每日安全扫描日报
日期 · 2026-09-30 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
182
当日新增
3
严重
51
需注意
128
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @lingyingaojue/dsh-dev-mode 开发者模式：新手几句大白话讲需求，AI 自动走完「写计划 → 子代理审计划 → 极简模式后台会话写代码并编译 → 子代理 QA → 修 bug → 复测 → 交付」的 DSH 插件（agent preset）。 | 需注意 | warn | 0/3/7 | 0/0 | 2026-09-30 02:11 |
| @fangweixuan26-hash/dsh-dual-balance DSH plugin: show the signed-in DeepSeek account's Platform wallet next to the DEEPSEEK_API_KEY balance, as one pill in the composer stats band | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-30 02:11 |
| @apherchin/dsh-windows-session-notification DSH plugin: cross-session "needs attention" notifications on Windows — actionable toasts, tiered sounds and a taskbar badge, only for sessions you are not watching. | 需注意 | warn | 0/1/5 | 0/0 | 2026-09-30 02:11 |
| @temidayoxyz/deep-opencode OpenCode's free-tier models for DSH: a local opencode serve makes the free models resolve, so no API key is needed. | 需注意 | warn | 0/2/18 | 0/0 | 2026-09-30 02:11 |
| @hoyyang/dsh-project-manager Project board for DSH: kanban card groups, cards linked to landfill-project memory, mounted repos and sessions. | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-30 02:11 |
| @YanKaFei/Lacan-Knowledge-OS Corpus-grounded research environment for Lacanian psychoanalysis: frozen scholarly core (39 hash-pinned components), evidence-carrying answers with provenance, MCP surface (10 tools), Obsidian bridge. Engine ships no source text — the reference corpus is a separate public repository, research use only. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @LilJoeIJOYU/dsh-session-delete Delete a DSH conversation for real: a Session sidebar action that removes the stored log, its projection cache and its subagent logs. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @shine-yu-student/dsh-pen Enable DSH to paint (literally). | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 02:11 |
| @SZYTree0312/dsh-bailian-gold 百炼成金模式 — 为阿里云百炼做前缀缓存优化的 dsh agent preset。缓存命中定价差 8 倍，省的是金子。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @sknagato/dsh-plugin-fc-emulator dsh fc/nes模拟器 | 需注意 | warn | 0/4/8 | 0/0 | 2026-09-30 02:11 |
| @sevastopol36/dsh-plugin-scihub a sci-hub search plugin for DSH | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 02:11 |
| @Justin-Mai/dsh-stock-view DSH 右上角行情盯盘插件：A 股 / ETF / 港股 / 美股 自选股 + 加密货币实时行情 | 严重 | fail | 3/0/15 | 0/0 | 2026-09-30 02:11 |
| @stefanohe/dsh-show-balance Show account balance directly in the status bar. | 需注意 | warn | 0/1/0 | 0/0 | 2026-09-30 02:11 |
| @WuShichao/dsh-ipynb-preview Render Jupyter .ipynb notebooks in the DSH document preview: syntax highlighting, offline LaTeX, and zoomable figures | 需注意 | warn | 1/0/0 | 0/0 | 2026-09-30 02:11 |
| @sevastopol36/dsh-plugin-ghproxy DSH native plugin: fetch GitHub files, release assets, archives, gists and api.github.com JSON through public proxy mirrors with automatic health-checked failover | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 02:11 |
| @sj244/dsh-qq-bridge 把已存在的固定 DSH 会话接到 QQ（OneBot/NapCat）并保留原上下文：白名单 + @/昵称必唤醒 + 概率唤醒，其余只记录；也可以把 agent 扔进群里当群友玩（不建议公共群）。 / Bridge one existing DSH session to QQ via OneBot/NapCat, keeping its context — fail-closed whitelist, @/nickname wake, configurable-probability wake. | 需注意 | warn | 0/3/13 | 0/0 | 2026-09-30 02:11 |
| @apherchin/dsh-session-delete DSH session-row menu "Delete conversation": permanently deletes a session, cascades into subagent sessions, and refuses live sessions. Host + client Cordis plugin (bundle form). | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @luckamuu/dsh-sessions-plugin DSH 插件：提供删除已归档会话的入口（可以彻底删除不会在次出现） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @0x-0cd/dsh-opencode-go-status DSH Web plugin: OpenCode Go subscription panel — usage quota, remaining quota, subscription expiry and renewal state, all from one API-key endpoint (the public /zen/go/v1/usage API has no money and no expiry date). | 需注意 | warn | 0/1/6 | 0/0 | 2026-09-30 04:13 |
| @ethanrise/dsh-privacy-gateway DSH 本地隐私网关，在数据发送给 AI 前脱敏 CSV/XLSX 中的敏感字段。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-tip-jar Tip jar for DSH: contributors declare USDC / fiat / QR channels in sponsors.json; sponsor-center panel + TipJarEmbed. Pure P2P, privacy by default. 打赏罐 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @PennChong95/dsh-cost-meter DSH 插件：在上下文用量右侧显示本会话 token 用量与人民币费用（按 DeepSeek 官方价目折算） | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @joeseesun/dsh-plugin-qiaomu-rss 在 DSH 中阅读 RSS，与原生 AI 对话伴读文章 | RSS reading with native AI companion for DSH | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @adsikito/dsh-study-steward DSH agent preset: a study-and-execution steward persona on the full Standard tool surface, shipped with a generic Markdown rule pack for plans, vocabulary, algorithms, review and archiving. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @yangyiqun747/dsh-plugin-whale-maid A chibi whale-maid companion plugin for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-session-backup Backup tooling for DSH session data: bundle + sha256 integrity verification + spot-restore loader check. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-fixture-bad-plugin Negative test fixture for DSH plugin contract checks (intentionally bad plugin, do not use as a real plugin) | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @Lmf-ynu/dsh-aurora-glass | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @liyang52520/dsh-web-login Password gate for the DSH Web GUI: first-run setup, brute-force lockout, audit log, and a management page inside Harness settings. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 04:13 |
| @crease123/dsh-journal-calendar Daily journal for DSH: the agent records what you did and what you plan to do into one JSON file per day, and the right sidebar draws them as a calendar with checkable todos. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @nilesh32236/dsh-squad Cross-workspace AI worker fleets for DSH: spawn named worker sessions in other projects, queue or steer tasks into them, watch them in the background, collect their reports, and answer their escalations — all from one orchestrating chat. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @lovezi0/dsh-open-in-app-base dsh "Open In..."控件底座，提供一个开放的可由同类插件补充的插槽以解决原生"Open In..."缺少在某些软件中打开 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-session-doctor Session doctor for DSH: scan and losslessly repair corrupted session logs. 会话医生：扫描并无损修复会话日志损坏。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @sakuraboy9128-cmd/dsh-approval-notify Desktop notification when DSH is waiting for your approval of a tool call, with click-to-focus on the DSH window. | 需注意 | warn | 0/4/6 | 0/0 | 2026-09-30 04:13 |
| @lovezi0/dsh-open-in-codebuddy 按钮与菜单由底座 `dsh-open-in-app-base` 统一渲染，本插件只负责「目标软件」这一半：注册一条目标记录，并在自己的宿主半边实现「是否可用」与「怎么打开」。不 fork、不修改宿主，也不依赖原生 open-in-app 的应用目录——插件自带一个本机路由，直接向 CodeBuddy CN 的 CLI 入口传递目录参数。 | 需注意 | warn | 0/2/2 | 0/0 | 2026-09-30 04:13 |
| @EXstarAmazing/dsh-aqua-0.2-adapt Aqua 玻璃主题 · DSH 0.2 适配版（上游 WYH66666666/DSH-Transparent-UI-Plugin 的兼容补丁分支） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @NanGePlus/dsh-sop-capsules DSH 插件，提示胶囊：在当前工作区沉淀可复用 SOP / 提示片段，并在会话输入框中一键注入。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @sakuraboy9128-cmd/dsh-sensevoice-npu DSH speech-to-text provider that runs SenseVoiceSmall on the Intel NPU via OpenVINO | 需注意 | warn | 0/3/6 | 0/0 | 2026-09-30 04:13 |
| @Theworld7/dsh-session-delete-plugin A DSH plugin that adds a permanent "Delete session" action to the sidebar session context menu. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @tianyiming1/dsh-plugin-local-prompt-bridge Stock-safe DSH community plugin: local tokenize pressure + overflow to CONTEXT_WINDOW_EXCEEDED compact-retry | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @2JumpSinA/dsh-context-guard A DSH plugin that tells you to wrap up and start a new session before the session gets too long: badge + one-shot banner from the official contextPressure projection, and from 45% occupancy it auto-drafts a machine-facts handoff block into your working directory. Zero context tax, bilingual zh/en. | 需注意 | warn | 0/7/24 | 0/0 | 2026-09-30 04:13 |
| @verneuil/dsh-opencode-go-usage DSH插件，一个极简的浮窗同时显示 DeepSeek 官方余额与 OpenCode Go 的 5h/w/m 用量 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @songgms/dsh-git-graph | 严重 | fail | 1/2/9 | 0/0 | 2026-09-30 04:13 |
| @ASDLYF/Bilibili-Quark-Transform B 站视频批量下载（可选分辨率 / 分集）并上传到夸克网盘 | 需注意 | warn | 0/2/16 | 0/0 | 2026-09-30 04:13 |
| @HarrisXiu/dsh-plugin-finder DSH插件发现工具：自动在 GitHub 与 npm 上检索社区插件，给出每个插件的 npm 包名与 GitHub 仓库地址，并内置一份可安装的推荐清单。装上后可在侧边栏「插件发现」页面浏览搜索，也可以让 agent 直接调用 dsh_plugin_finder 工具检索。 | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-30 06:13 |
| @TianYa-DAO/dsh-pinned-sessions Keeps running, finished-but-unopened and currently open sessions at the top of the DSH Web sidebar workspace list. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @frederico-kluser/dsh-orquestrator DSH plugin: on task send, pick a different model for subagents and an independent reviewer that validates each subagent's work before it reaches the main agent | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @orzyyyy/dsh-vim-scroll 桌面版会话中增加模仿 vim 的翻页方式。 | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @xqtx9527/dsh-live-pricing DSH 实时价格条：高峰/空闲时段、中国法定节假日、当前单价与会话花费 | Live pricing widget for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @dongshan1999/dsh-toolkit | 需注意 | warn | 0/2/7 | 0/0 | 2026-09-30 06:13 |
| @lengmodkx/dsh-mimo-tts MiMo voice for DSH: auto-read answers aloud, click-to-talk composer mic, voice cloning. 小米 MiMo 语音插件。 | 低风险 | pass | 0/0/8 | 0/0 | 2026-09-30 06:13 |
| @yuluo554/dsh-prompt-polisher Composer prompt-polisher button plugin for DSH: one-click draft rewrite, style presets, dual model path, race protection | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @wangzhanchao883/dsh-no-long-sit DSH cat desktop pet — its first job is a sit/water reminder. 猫猫桌宠：先当久坐/喝水提醒用（可拖动、四态循环动画、真实案例、总结评价）。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @Teagnes/dsh-xxnerv-eva EVA-style companion HUD for DSH: remaining balance as active time, session cache-hit share as sync ratio. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 06:13 |
| @MyRemme/dsh-lan-pair LAN-only remote access for DSH: pair a phone or another PC by QR code or token to open the same web UI, with optional key-free access inside the LAN. | 需注意 | warn | 0/4/10 | 0/0 | 2026-09-30 06:13 |
| @huanglianqi/dsh-math-snippets LaTeX snippet expansion in the DSH web composer: Tab expands a trigger into a formula template with the caret in the first hole, then walks the rest. // expands with no Tab at all. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 06:13 |
| @kyle123740/dsh-zcode-cli-proxy dsh-zcode cli反代 —— 把 ZCode CLI（客户端 agent）接入 DSH：app-server 常驻通道、Start Plan 额度直连、真流式、图片输入、工具委派 | 需注意 | warn | 0/1/45 | 0/0 | 2026-09-30 06:13 |
| @kxdyh/dsh-usage-meter Live token usage and account balance meter for the DSH sidebar | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @boxiaolanya2008/tokensqueezer Cuts a DSH agent's token use on its own output: caps generation before the call, folds verbose answers and reasoning after it, and keeps code byte-identical. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 06:13 |
| @aujurd22/dsh-flymemory Long-term memory for DSH: 15 FlyMemory MCP tools, automatic recall and capture hooks, and a supervised local engine. | 需注意 | warn | 0/5/12 | 0/0 | 2026-09-30 06:13 |
| @Mgeeeeee/dsh-personalization Sidebar identity row and client UI tweaks for DSH: your own avatar, nickname and account balance | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @xiseliuli/dsh-as-mcp dsh-as-mcp | 需注意 | warn | 0/2/14 | 0/0 | 2026-09-30 08:14 |
| @linner1224/dsh-video-coursemap 视频课程知识地图 Agent（DSH 插件） | 需注意 | warn | 0/2/3 | 0/0 | 2026-09-30 08:14 |
| @seeseeczl/dsh-sym 给 DSH 的界面读数层：实时会话花费（人民币，按厂商/模型与峰谷时段折算）、DeepSeek 账户余额、峰谷时段标记，以及把任一回复作为上下文引用的 @ 按钮 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @novaschai7/dsh-plugin-balance-ui DeepSeek account balance, today's token usage and estimated spend in the dsh Web client sidebar. · 在 dsh 侧边栏显示 DeepSeek 余额、今日 token 用量与花费估算。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 08:14 |
| @lxl8182/dsh-message-edit DSH Web 用户消息编辑重发插件：改掉某一轮提问重发，该轮之后的内容丢弃，原会话归档（新会话继承逐字节相同前缀以保住 prompt 缓存）。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 08:14 |
| @Han-1413141/dsh-visual-edit Point at a webpage, give your DSH agent feedback, and compare the result. Local Vite + React visual editing sidebar. | 需注意 | warn | 0/6/9 | 0/0 | 2026-09-30 08:14 |
| @ethanrise/dsh-model-deploy | 需注意 | warn | 0/3/2 | 0/0 | 2026-09-30 08:14 |
| @Ayelsh/dsh-zhipu-plan A DSH plugin: Zhipu coding-plan sign-in, quota and usage panel. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 08:14 |
| @f1426912008/dsh-stock-ticker DSHWeb GUI 的实时股票盯盘插件：A 股自选股迷你窗口，含分时曲线、悬停详情卡与自选股设置页。零运行时依赖，无需构建。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 08:14 |
| @win10ogod/dsh-knowledge-work Persistent knowledge-work Agent workflows, evidence capture, review and reports for DSH | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @fanyongbing/dsh-mcp-native MCP server manager for DSH — manage this machine's MCP servers as native Loader rows, from a Settings page with cards, search, start/stop and a full config editor. Zero dependencies, zero build. | 需注意 | warn | 0/1/7 | 0/0 | 2026-09-30 08:14 |
| @lxl8182/dsh-session-ops DSH Web 会话管理插件：设置 → 会话管理，一键归档 / 一键还原 / 一键删除（删除移入回收目录，可手工恢复）。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @Yinhefuluoye/dsh-glass-effect A glass-material appearance for DSH: translucent composer, dialogs, menus and code blocks — one switch in Settings, off restores the stock look exactly. | 需注意 | warn | 0/1/6 | 0/0 | 2026-09-30 08:14 |
| @AllenCoderBug/dsh-web-search-zerokey 零 key 联网搜索：不填任何 API key、不启任何本地服务、不消耗模型积分。多源聚合（Bing/HN/GitHub/arXiv/npm/掘金/CSDN），中英文自动路由。 | 低风险 | pass | 0/0/12 | 0/0 | 2026-09-30 08:14 |
| @Ayelsh/reasoning-setup A DSH plugin: edit reasoning effort levels and thinking formats for models that declare none. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @Alkaid4521/dsh-pixel-art 手写像素画 skill 插件：教 agent 写脚本逐像素画出任意图，不联网、不依赖绘图库、同参数必然复现（DSH / DSH） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @liuqingman/dsh-somni Sleep-consolidated long-term memory for DSH agents: episodic / semantic / prospective / procedural memory + identity, stdio JSON-RPC sidecar, idle-time dream consolidation, zero-config Cordis plugin. ｜ 给 DSHagent 的睡眠整理式长期记忆：醒时回忆、睡时做梦整理，零配置 Cordis 插件。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 08:14 |
| @Tim5613/dsh-homepage-palette-skin DSH client skin: reproduces the deep-blue gradient glass sidebar from the official DSH homepage preview. · DSH 客户端皮肤：复刻官网预览图的深蓝渐变玻璃侧边栏 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @Schrei5/dsh-plugin-session-project DSH sidebar plugin: show each session's project (Workspace) name under its title in the flat session list | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @kxdyh/dsh-agent-governor Two interception layers for DSH agents - DOL communication semantics and Sentinel tool execution governance | 严重 | fail | 2/1/5 | 0/0 | 2026-09-30 08:14 |
| @jryang1997/dsh-hold-to-talk Hold-to-talk dictation for the DSH composer: long-press the input box, release to transcribe into the draft. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @drfai/dsh-whale-pet DSH 桌宠插件：内置 Coopanion 鲸鱼娘分层精灵，随模型峰谷计价自动更换女仆装发带颜色，并常驻显示时段倒计时 | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-30 08:14 |
| @Leo-Cjw/dsh-pharos | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Lostforest7/dsh-encoding Correct-encoding command runner and mojibake recovery for DSH. 让 DSH 在 Windows 上不再乱码。 | 需注意 | warn | 0/1/1 | 0/0 | 2026-09-30 10:13 |
| @haotian-lu-prog/dsh-dev-backup Backup freshness monitor for DSH — see whether your scheduled backup actually ran, right in the Harness Web UI (DSH 0.2.0-rc.2) | 需注意 | warn | 0/1/1 | 0/0 | 2026-09-30 10:13 |
| @HelloQingTao/dsh-rail-zero DSH web plugin: zero the collapsed left sidebar's 56px rail; reuses dsh-qol's hamburger, falls back to the official toggle. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @1497105876/dsh-mimotts MiMo TTS 语音合成 DSH 插件（DSH 0.1.7） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @Han-1413141/dsh-compat-guardian Plugin compatibility checks, quarantine, recovery and offline startup rescue for DSH | 需注意 | warn | 1/1/1 | 0/0 | 2026-09-30 10:13 |
| @Mgeeeeee/dsh-ui-personalization Sidebar identity row and client UI tweaks for DSH: your own avatar, nickname and account balance | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-zakou-pack DSH 杂口语言包：傲娇暴躁雌小鬼人格包，三层方言引擎（换骨架而非塞词）+ 脾气系统 + 斗嘴迎战 + 文件静默处理 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @liujianqiao701/dsh-compat-vet DSH插件兼容性体检：预警下次启动会被拒绝加载的插件，并在页面上按键一键隔离/卸载修掉它（改前自动备份、失败自动回滚）。Plugin compatibility vet for DSH. | 需注意 | warn | 0/1/30 | 0/0 | 2026-09-30 10:13 |
| @cglyvip/dsh-auto-continue DSH 插件：模型请求失败自动注入「继续」并切换兜底模型，免手动干预 | 需注意 | warn | 0/2/2 | 0/0 | 2026-09-30 10:13 |
| @callqh/dsh-codex-oauth Sign in to OpenAI Codex from DSH with a ChatGPT Plus/Pro subscription. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-long-memory DSH 超长记忆包：跨会话长期记忆 + 长文分块检索 + 聊天记录提取精炼，纯 JS 混合检索零依赖 | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-30 10:13 |
| @lsdt45/dsh-model-config DSH 模型设置页插件：管理提供方与模型目录，配置模型容量、输入类型与思考能力 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @oldHan2423/dsh-everything-find Everything (voidtools) file-name search for DSH: an everything_find tool plus a configuration card. | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-30 10:13 |
| @mwk719/dsh-skill-center DSH Web GUI 技能中心：侧栏入口把可配置来源目录里的技能铺成卡片，点击查看完整 SKILL.md；卡片开关会把技能注册进或移出模型可用的技能表。零依赖、免构建、无遥测、不采集数据。 | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-30 10:13 |
| @robin421/dsh-html-inspector Selection mode for DSH: click any element in a local HTML demo, locator auto-written to chat input / DSH HTML 选区模式插件 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 10:13 |
| @liweidong1722/dsh-work-list DSH工作台 | 低风险 | pass | 0/0/8 | 0/0 | 2026-09-30 10:13 |
| @HuanLinOTO/dsh-plugin-terminal-extension-wait-for 阻塞到字符串出现在 DSH 原生持久终端保留输出里（正则/子串；found/超时/退出/消失/取消五态） | Blocks until a pattern appears in a DSH persistent terminal's retained output (regex/substring; found/timeout/exit/gone/cancel outcomes) | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @lzpway-jpg/dsh-plugin-brand-custom Custom brand icon and name for the DSH Web client, editable live from a settings card | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Tim5613/dsh-homepage-glass DSH macOS风格深蓝渐变侧边栏 + 官网流动蓝底丨DSH macOS-Style Deep Blue Gradient Sidebar + Official Website Fluid Blue Background | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Lzhimie/dsh-skin-master DSH 皮肤大师：主题壁纸/自定义皮肤插件 —— 全局背景图片/视频、毛玻璃、输入框背景、弹出框毛玻璃、滤镜、AI 回复文本与消息气泡颜色 | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-30 10:13 |
| @project-hy/dsh-claude-delegate DSH 插件：把自包含的编码子任务委派给本机 Claude Code（官方 Agent SDK），后台作业 + 实时输出通道 + 监控面板 + 运行时技能；npm: dsh-claude-delegate | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @FeC3-pearlite/bearing-notes DSH 文献笔记插件：笔记汇总到一个 Word，右侧栏调用模型审阅并提示相关知识（轴承钢滚动接触疲劳） | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-ciku-pack DSH 词库插件：收录用户情绪脏话与攻击性口气词当斗嘴弹药，弹药清单每轮自动注入 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Han-1413141/dsh-autocompose Task-aware plugin composition for DSH, with native Web UI and isolated task execution | 需注意 | warn | 1/1/1 | 0/0 | 2026-09-30 10:13 |
| @Altermoe/dsh-onedev DSH Plugin for OneDev | 需注意 | warn | 0/2/7 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-ask-mode DSH 插件：会话内一键切换咨询模式——只读问答，仅可新建 txt/md/docx 产出 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @bwndlct/dsh-codex-bridge Delegate Codex tasks to a running official DSH Desktop Host over MCP + loopback plugin | 需注意 | warn | 0/2/9 | 0/0 | 2026-09-30 10:13 |
| @Zekilou/dsh-ask-form Structured form questions for the DSH agent: 14 typed field types, conditions, validation, targeted re-asks, and typed JSON answers. | 需注意 | warn | 1/0/0 | 0/0 | 2026-09-30 10:13 |
| @17897693/dsh-wen DSH 办公文档插件：docx/xlsx/pptx/pdf/odf/csv/html 读写改与互转 + 离线 OCR（自用为主，不承诺维护） | 需注意 | warn | 0/3/7 | 0/0 | 2026-09-30 10:13 |
| @swiftlc/dsh-annotation Text annotation tools for the dsh web composer | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-session-delete DSH 插件：侧栏一键删除会话（先归档再清理磁盘日志，运行中的会话受保护） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @jryang1997/dsh-composer-dictation Hold-to-talk dictation for the DSH composer: long-press the input box, release to transcribe into the draft. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-element-context DSH 插件：对话中圈选/关联 UI 元素，把选择器、源码位置、盒模型与计算样式注入模型提示词 | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @f-e-n-g-0531/dsh-code-review | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @niliemi/dsh-billing DSH plugin: prices tokens with the official model price table, shows the running cost beside the composer context meter, and blocks a turn once spend passes the ceiling you set. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-30 12:13 |
| @MyRemme/dsh-computer-use-guard Three-tier (deny / ask / auto) authorization gate for DSH computer-use (cua-driver) tools, with a settings row that renders the three tiers per tool category. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 12:13 |
| @songshuhuoban/dsh-next-input | 需注意 | warn | 0/1/1 | 0/0 | 2026-09-30 12:13 |
| @WindAndWood/dsh-chat-manager-wide DSH Chat Manager Wide — unofficial fork of dsh-chat-manager | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 12:13 |
| @760403-create/dsh-endfield-theme Arknights: Endfield theme for the DSH Web GUI — charcoal + hazard-yellow industrial HUD, first-paint boot splash, conversation backdrop. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 12:13 |
| @QWEQ-CELL-DEL/dsh-whale-girl-wallpaper DSH Web skin: whale-girl dynamic wallpaper background | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 12:13 |
| @Rczlin/dsh-better-reasoning | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 12:13 |
| @vowa-antilamer/dsh-locale-ru Russian localization (ru) for the DSH web GUI — 58 message namespaces, 3674 strings. Language pack for @deepseek-ai/dsh-client-locale. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @LX-HMKK/DSH-appearance 轻量的 DSH 字体与主题插件：中英文字体分开选，含 One Dark Pro / Dracula / Nord / GitHub / Catppuccin 五套官方色板预设 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 14:14 |
| @Zm886/dsh-ruankao-essay 软考系统分析师论文助手：DSH 插件（题库索引 + 10 段式写作 + Word 交付） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @Yaaaaaaa233/dsh-plan-and-execute On-demand planning for DSH: execute simple tasks directly and call a configurable planning model for complex ones. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @zhuoxiaoshuai/dsh-database MySQL, Oracle, Redis, and Kafka workbench for DSH, with a shared execution path for humans and the model. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @moazzamak/dsh-code-review Code-review pack for DSH: the /review shortcut over the pinned Changes page, plus the dsh-change-review Skill that teaches an agent what a rejected change means. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @DmitriyValetov/dsh-session-folders Session folders for the DSH 0.2.x web sidebar — fork of EugeneVl/dsh_session_folders (MIT) ported to DSH 0.2.0-rc.1 | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @Erbsen16/dsh-client-ui-dracula 把 VS Code 的 Dracula（吸血鬼）配色搬到 DSH 的网页界面，顺带做了一组程序员向的排版调优。深色模式专用，随时可整页还原。 | 需注意 | warn | 0/4/2 | 0/0 | 2026-09-30 14:14 |
| @Lyrissonare/dsh-preset-bridge DSH预设桥插件，解决“风神插件”“梁神模式”等在更新桌面版后预设不生效的问题，欢迎使用 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 14:14 |
| @YIYuNCU/DSHTrueDelete | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-30 14:14 |
| @XN-H/dsh-ark-image DSH 生图插件：文生图 / 图片生成 / AI 绘画，基于火山方舟 Seedream（豆包）。零依赖、纯 JavaScript、无需构建。 | DSH image generation plugin for DSH: text-to-image via Volcano Ark Seedream (Doubao). Zero dependencies, plain JavaScript, no build step. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @invoker-bandit/dsh-history-up 一个 DSH 插件：记录每个会话里你提交过的输入，支持用 <kbd>↑</kbd> 方向键逐条回溯，也可以用 <kbd>/</kbd> 菜单挑一条填进输入框。按会话隔离的 shell 式输入历史。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @better-er/dsh-mobile-drawer 「DSH·手机适配」：窄屏下把侧栏收成悬浮小方块，点会话自动收起，并压掉切会话时的自动聚焦，免得软键盘把页面顶起。纯客户端插件。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @bauerelizabeth07139/tangsan TangSan mascot appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 14:14 |
| @he0119/dsh-tailnet-admin 把 Tailnet / 反向代理页面当作「本机」来用：启用 host 持久化设置，并按需关闭浏览器会话校验（Host/Origin 栅栏保持不动）。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @wlxyxykj/dsh-phone-remote | 需注意 | warn | 0/1/8 | 0/0 | 2026-09-30 14:14 |
| @zcr-133/dsh-follow-edits Cline-style follow-along for DSH: open the file the agent just changed in the right Sidebar, jump to the change, and highlight the diff. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @liuyuhao1122/dsh-hermes-memory Lightweight layered memory plugin for DSH with automatic distillation and compaction. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @Yiheng-guo/dsh-boot-animation-pro DSH 片头开机动画增强版：播放控制、触发规则、会话名单、分时段片头、片库管理、中英双语。A full-frame intro animation for DSH. Fork of NativeDog1/dsh-boot-animation. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @joeseesun/qiaomu-radio-dsh 乔木电台 DSH 插件 | Live radio with themed players, mood channels and local listening history | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @bauerelizabeth07139/MDSM MDSM (Male DeepSeek Mascot) appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @TBChaos/dsh-remote-desks 把本机 / WSL / 虚拟机 / SSH 远端上另一套 DSH 的 WebUI 镜像进桌面版 DSH，用同一套界面和体验管理它们。DSH 插件，MIT。 | 需注意 | warn | 0/2/25 | 0/0 | 2026-09-30 16:14 |
| @Longxiangjunlin/dsh-endfield-theme Arknights: Endfield theme for the DSH Web GUI — charcoal + hazard-yellow industrial HUD, first-paint boot splash, conversation backdrop. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @anneqaq/dsh-widget DSH 插件：把模型编写的 SVG/HTML 片段渲染成对话中的内联可视化卡片（图表、流程图、时间线、对比表格），沙箱隔离、无网络、无依赖 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-home-dsh 乔木 Home：让 Harness 成为一天的起点。会话搜索、今日重点、待办、记录与专注计时。 | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-reader-dsh 乔木阅读：在 DSH 中阅读 EPUB、PDF、TXT，划线批注、导出阅读笔记与 AI 伴读。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @HuanLinOTO/dsh-plugin-sidebar-terminal-tools DSH plugin: model-driven official sidebar terminals — six sidebar_terminal_* tools over ctx.terminalController; terminals auto-appear as native sidebar tabs, the user can take over anytime. / DSH 插件：模型驱动官方侧栏终端，自动出现原生终端 tab，用户可随时接管。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @SereinHK/dsh-plugin-session-delete A DSH plugin that deletes a conversation from disk — the destructive Session action DSH deliberately omits — plus bulk cleanup of empty Sessions. For DSH 0.2.x. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @DDDMUC/dsh-markdown-bubble Markdown rendering for DSH sent messages: the user and steering chat bubbles render headings, lists, code, tables, math and quotes through the host's own Markdown pipeline, while reference chips, attachments and the action strip stay intact. | 需注意 | warn | 0/3/11 | 0/0 | 2026-09-30 16:14 |
| @huguangyu666/dsh-plugin-better-folders DSH 插件：更好的 DSH 文件夹 —— 自动整理工作区，把同一上级目录下的工作区汇合成可折叠的文件夹节点（复用内置「按工作区树」视图，不覆盖官方 UI）。 | 需注意 | warn | 0/3/8 | 0/0 | 2026-09-30 16:14 |
| @wangjiezhe/dsh-jp-translate 「日语翻译」模式 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @bauerelizabeth07139/nai Nai milk-frog mascot appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @Funny1Potato/dsh-outsourcing-expert DSH agent presets whose leader does no work itself: non-management tool calls are denied at the harness boundary and every task goes to a subagent (a second preset deliberately picks weaker models for harder tasks). | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @chongyi/dsh-notify DSH notify plugin | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @xiaoxingyuemiao/dsh-session-delete DSH 会话删除插件：会话行「…」菜单里的浅红色删除项 + 二次确认弹窗，确认后连同全部子会话移入可恢复的回收站（DSH 官方只支持归档） | 需注意 | warn | 0/1/8 | 0/0 | 2026-09-30 16:14 |
| @mike-sl-ig/dsh-agent-bridge Data-driven agent bridge plugin for DSH: JSON recipes, cross-platform launcher, recipe wizard, self-test, registry import | 需注意 | warn | 0/3/7 | 0/0 | 2026-09-30 16:14 |
| @skillre/dsh-plugin-pomodoro Pomodoro focus clock plugin for the DSH Web UI: ambient timer under the composer, daily rounds, local preferences | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-30 16:14 |
| @TixAn9/DSHdesktop-restart-bottom 给桌面DSH写的重启插件 | 需注意 | warn | 1/4/9 | 0/0 | 2026-09-30 16:14 |
| @praystring/dsh-send-debounce 把聊天框里连发的几条短消息合并成一轮后再唤醒模型（DSH 插件） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @Gty2408/dsh-session-eraser Delete a session from the DSH sidebar. A DSH plugin. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @AlanKhronos/dsh-dispatch-gate DSH 插件：在工具调用层强制「先委派给其他模型」——未派发的会话无法执行 pwsh/write/edit。⚠️ 本插件会拦截工具调用（这是设计目标）；含举证式放行、行为账本与一键停用开关。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @Ushio155/dsh-composer-balance 把 DeepSeek 余额常驻在 DSH 输入框工具行：接替已停更的 kte66/dsh-balance，修复密钥落盘、无来源策略与遮蔽内置 UI。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @wbb316/dsh-profile-sync profile 间插件迁移：把网页版（web）的插件集安全牵引到桌面端（desktop）—— 算差异、预检、生成退出后执行的脚本、重启后核对 | 需注意 | warn | 1/17/17 | 0/0 | 2026-09-30 16:14 |
| @FIZMIE/dsh-restart-button One-click restart for the DSH desktop app: a sidebar button plus an agent-callable restart route. | 需注意 | warn | 0/7/17 | 0/0 | 2026-09-30 16:14 |
| @Richardwongyk/dsh-happy-reader Happy Reader（dsh-happy-reader）—— DSH 桌面端阅读增强插件：隐藏输入框/上边栏、自由调整字号、中英分设正文字体、内容宽度扩展、一键全屏。dsh plugin / DSH plugin. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @Cangjier/dsh-mail-notify | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @shuiqian520/dsh-session-delete DSH plugin: permanently delete a session from the sidebar menu, and retry a user message or an assistant reply. | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-rss-dsh 在 DSH 中阅读 RSS，与原生 AI 对话伴读文章 | RSS reading with native AI companion for DSH | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @wangjiezhe/dsh-md-linebreak 将软换行视为硬换行 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @kotinder/dsh-roomcomm Roomcomm for DSH: your dsh agent talks to other AI agents in shared rooms (MCP tools + skill, zero setup) | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
| @Hu9956/DSH-model-controls 切换供应商、模型与思考强度，每个模型各自记住档位。 | 需注意 | warn | 0/2/11 | 0/0 | 2026-09-30 18:14 |
| @lctfwyt/dsh-liuyao Six-Line Divination (liuyao) for DSH — one-click casting, eight-palace najia chart, AI interpretation, chart card and case archive. 六爻起卦 · AI 解卦：一键起卦、纳甲装卦、按所问事项断卦。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-30 18:14 |
| @HGT158/dsh-plugin-share 把你这套 DSH 插件变成一段可粘贴的分享码，别人贴进去就能逐个安装 · Turn your DSH plugin set into one pasteable code, and anyone can install the plugins one by one | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-30 18:14 |
| @xlennart/dsh-auto-review-jev DSH 审批守护者：权限请求先由审查模型裁决。内置 System One 决策 API 后端（TypeSafe Jev / 硅基流动 systemone / 自部署 Laya）、onLowConfidence 低置信度策略与 allowRules 免审白名单。fork 自 gbthui/dsh-auto-review。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
| @Adamaik/dsh-ollama-cloud-usage DSH plugin: Ollama Cloud remaining quota in Settings, with an in-page API key editor. · DSH 插件：设置页显示 Ollama Cloud 剩余额度并支持填写 API Key。 | 需注意 | warn | 0/1/2 | 0/0 | 2026-09-30 18:14 |
| @umysy/DSH-Plugins DSH 插件集合 · Plugins for DSH | 低风险 | pass | 0/0/9 | 0/0 | 2026-09-30 18:14 |
| @SZYTree0312/dsh-opencode-free 星桥模式：OpenCode 免费模型路线的前缀稳定与载荷控制 Agent 预设（配套 dsh-opencode-xdbridge） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
46 期2026-10-010 新增0 严重0 需注意2026-09-30当前182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-09-30 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于