每日安全扫描日报
日期 · 2026-10-02 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
99
当日新增
1
严重
47
需注意
51
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @86cloudyun-afk/dsh-gungnir GUNGNIR - DSH 红队战役指挥框架：攻击路径合成的工程化。事实库+门闸+跳板池，执行层可插拔。编排层，不含漏洞利用代码；仅限授权测试。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-02 00:13 |
| @yuehancn/dsh-tool-comfyui Let DSH generate images: call local or LAN ComfyUI workers directly from chat (status, generate, queue). | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 02:13 |
| @yuehancn/dsh-tool-gzh-publisher WeChat Official Account (公众号) pipeline for DSH: validate a draft against the publish gate, then push it to the draft box. | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-02 02:13 |
| @modesthub/dsh-sensenova-freeapi DSH provider plugin for SenseNova with running/blocked dual-list key pool & dual-account rotation | 低风险 | pass | 0/0/14 | 0/0 | 2026-10-02 02:13 |
| @Tommy00748/dsh-self-evolution Self-evolution for DSH: bounded self-managed memory, an automatic per-turn review that refines skills instead of duplicating them, a skill health check, cross-session recall, and a learning card that appears only when it has something to say. | 需注意 | warn | 0/3/6 | 0/0 | 2026-10-02 02:13 |
| @duxingxiake3/dsh-plugin-market Plugin Market for DSH: discover, vet and install DSH plugins from inside DSH. | 低风险 | pass | 0/0/9 | 0/0 | 2026-10-02 02:13 |
| @LemRic1117/dsh-download-dashboard DSH 的悬浮下载看板：只列 300MB 以上的下载，跨会话、跨子代理、跨终端可见 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-02 04:13 |
| @moyu-777/dsh-notion-workspaces Bind each DSH workspace to its own Notion workspace over the official Notion MCP. | 需注意 | warn | 0/2/10 | 0/0 | 2026-10-02 04:13 |
| @d0ublecl1ck/dsh-unarchived-watch DSH Web 插件：未归档会话超过阈值时在侧边栏亮警告图标 + 设置页按工作区分组的只读看板 · Warning light for unarchived-session backlog: sidebar badge, threshold, read-only board. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @scccy/dsh-enterworktree DSH 宿主插件：创建(或复用) git worktree 并自动开隔离 session，等价于 Claude Code /enterworktree。 | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @yuehancn/dsh-tool-ocr Extract text from images and PDFs in DSH: read a born-digital text layer, or OCR a scan with any engine you configure. | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @yuehancn/dsh-tool-media DSH plugin | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @gswenxue/dsh-egress-router On-demand egress routing plugin for DSH: import vless/vmess/trojan/ss nodes, route only blocked traffic (GitHub, pip, npm) through them, fall back automatically, never auto-delete nodes. 给 DSH 的按需网络出海插件：选择性走节点、直连失败自动回退、失效只标记不删除。 | 需注意 | warn | 0/6/18 | 0/0 | 2026-10-02 04:13 |
| @19north/dsh-redstone-music Minecraft redstone-music toolkit for DSH: onset-aligned SoundFont sample rendering and a song-to-datapack compiler (rm_render / rm_build). | 需注意 | warn | 1/1/3 | 0/0 | 2026-10-02 04:13 |
| @Alicex7777/dsh-theme-colors DSH Web theme plugin: per-region colors, OKLCH depth/vividness, 26 day+night schemes, 3-state text colors with a free gamut picker | 需注意 | warn | 0/1/8 | 0/0 | 2026-10-02 04:13 |
| @121212165/dsh-plugin-quota dsh plugin: live usage meter — per-session token/turns/cost tracking injected into the system prompt, /qm panel, quota_meter card tool; also the family's universal plugin-development test template | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @sjh9714/dsh-retry-guard Observe identical tool failures and optionally pause the next model step in DSH. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @QIN-SMART/dsh-sidebar-marks DSH plugin: sidebar conversation marks — row tint, colored dot, per-conversation title size | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-02 04:13 |
| @LiuCrane/dsh-easy-balance DSH Web UI plugin: model provider chip beside the composer plus DeepSeek and OpenCode Go balances below it, only for providers the profile configures. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 04:13 |
| @Coshire90-1135/DSH-MnnChat-Provider 把手机上 MNN Chat 的端侧小模型接进 DSH 当 LLM provider —— 一个娱乐产物，工具调用基本不行,暂不支持文生图 | 需注意 | warn | 0/2/7 | 0/0 | 2026-10-02 04:13 |
| @xubin0628/dsh-task-notifier DSH 任务通知插件：任务完成 / 需要批准 / 需要回答 / 出错时的横幅、提示音与系统通知，并在设置里提供「通知」页自由配置 | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-02 04:13 |
| @codel6i/dsh-shell-switch Switch the dsh agent's command shell between PowerShell and Git Bash, from a panel in Settings or on the plugin's own row page. | 需注意 | warn | 0/4/4 | 0/2 | 2026-10-02 04:13 |
| @archcra/dsh-plugin-project-monitor DSH 插件：事项进度看板。自管数据、零配置，红橙黄绿到期预警 + 每日摘要，无需本地 Excel。 | 需注意 | warn | 0/5/5 | 0/0 | 2026-10-02 06:13 |
| @Charlestam218/dsh-sound-alert DSH 声音提示插件：任务完成与需要确认时播放两种不同的清脆音效（一高一低，浏览器端合成，无音频文件） | 需注意 | warn | 0/5/18 | 0/0 | 2026-10-02 06:13 |
| @CeilCelia/dsh-travily-api Tavily web search for DSH: settings switch, credential-held API key, connection test. | 需注意 | warn | 0/2/7 | 0/0 | 2026-10-02 06:13 |
| @QXingYShu/dsh-comfyui-image DSH plugin that drives a local ComfyUI image workflow (Z-Image-Turbo, Qwen-Image-2.1) from the agent | 需注意 | warn | 0/4/9 | 0/0 | 2026-10-02 06:13 |
| @yuehancn/dsh-tool-invoice DSH plugin | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 06:13 |
| @gggtmd/dsh-wallet-hud Sidebar DeepSeek wallet balance HUD for the DSH Web UI | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @yuehancn/dsh-tool-subtitle DSH plugin | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-02 06:13 |
| @yuanxinbin520/dsh-session-cleaner DSH session-menu plugin: thorough session deletion (including the projection-cache records DSH leaves behind) and real cross-workspace moves. | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-02 06:13 |
| @Han-1413141/dsh-codex-computer-use DSH plugin for the local Codex Computer Use runtime on Windows, with native menu integration and automatic startup. | 需注意 | warn | 0/4/14 | 0/0 | 2026-10-02 06:13 |
| @Fnckerpoi/dsh-plugin-nexus-sdlc Nexus spec-driven development agent preset for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @kirigayakazima/dsh-antigravity-usage 反重力（Antigravity）额度 / 用量 DSH 插件：实时额度走本地语言服务器 API，离线 token 与缓存命中从本地会话库只读解出（反重力没开也能看历史） | 需注意 | warn | 0/2/14 | 0/0 | 2026-10-02 06:13 |
| @tuoLuoSuan/dsh-skill-center 技能中心 — 在 DSH 的 Web GUI 里浏览、体检并一键安装全世界的 Agent Skills。Skill Center for DSH: five public skill sources, pre-install validation, provenance, update checks and a trash. | 需注意 | warn | 2/1/5 | 0/0 | 2026-10-02 06:13 |
| @KDDKBD/DeepSeek-splash-animation 给 DSH 加一段自定义开屏动画 | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-02 06:13 |
| @WTStarMark/dsh-plugin-mesh 把带 dsh 系列 GitHub 标签的仓库，画成一张可交互的生态网络图 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-02 06:13 |
| @chen112233usa/dsh-typesafe-ai-skill 把 TypeSafe / Jev（System One 判断模型）的构建技能注册进 DSH 的全局技能层，每个会话自动可用。不含任何密钥。 | Registers the TypeSafe/Jev skill into DSH's global skill layer. Ships no API key. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @yuhub233/dsh-effort-slider 科幻推理等级滑条 for DSH：Ultra 档 + 闪电编排模式 + 子代理 tok/s 读数 / A sci-fi reasoning-effort slider for DSH | 低风险 | pass | 0/0/12 | 0/0 | 2026-10-02 06:13 |
| @Charlestam218/dsh-github-publish DSH 插件发布器：把本地做好的插件一键推送到 GitHub 仓库（凭据 → 建仓 → 提交 → 推送 → 可选 Release） | 需注意 | warn | 0/4/9 | 0/0 | 2026-10-02 06:13 |
| @DelayNooMore/dsh-plugin-session-trash DSH 会话回收站插件：移入回收站、恢复、永久删除，设置页管理 | 需注意 | warn | 0/2/4 | 0/0 | 2026-10-02 06:13 |
| @ROBOHAPPYIY/dsh-zh-review-guard DSH bundle plugin: make internal reasoning user-reviewable and keep every user-facing explanation in Simplified Chinese. Injected into every session system prompt. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @baom1ng/dsh-local-plugin-source Turn a local folder into an in-app plugin source for DSH Desktop: list, install, enable/disable and remove local plugin bundles from Settings ? Plugins ? Local plugins. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 08:13 |
| @A2chitect/dsh-openviking-enhance OpenViking in the DSH web GUI: a Studio panel, a per-session memory-commit status pill with its commit timeline, and a right-sidebar tab showing what the current session retrieves. | 需注意 | warn | 1/5/10 | 0/0 | 2026-10-02 08:13 |
| @anne43983959/dsh-audio-cue DSH 宿主插件：审批询问与一轮对话结束时播放声音提示（含两次实测事故复盘） | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-02 08:13 |
| @leexiaode4/dsh-launch-buttons Multiple named launch targets in the DSH composer: left-click starts the default target, right-click opens the list. | 需注意 | warn | 0/2/6 | 0/0 | 2026-10-02 08:13 |
| @baom1ng/dsh-desktop-archive-manager Manage and permanently delete archived Sessions in DSH Desktop - no harness core patch required. Desktop-only DSH bundle. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @d0ublecl1ck/dsh-hide-empty-workspace DSH Web 插件：最后一个未归档会话被归档的瞬间自动隐藏该工作区行，并在工作区行自带的「…」菜单里追加「隐藏工作区」，另配侧栏底部恢复入口；不归档、不删除、不改写任何工作区注册与会话数据。Auto-hide a sidebar workspace the moment its last unarchived session is archived — display only, no data writes. | 需注意 | warn | 0/2/11 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-epub DSH plugin | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @Zilong6666/dsh-task-workspace DSH task workspace convention: one folder per task, one PROGRESS.md per task (overwritten each update), and per-task git once a task runs long. | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-02 08:13 |
| @DucLong06/dsh-vietnam Vietnamese UI language, Vietnamese palettes and a rotating Vietnam-landscape backdrop for DSH · Tiếng Việt, bảng màu Việt và hình nền phong cảnh Việt Nam cho dsh | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 08:13 |
| @GreatArrow-ai/dsh-greatarrow GreatArrow.ai workspace memory for DSH: connects dsh to the GreatArrow.ai MCP server, so the agent can search and save memories, tasks and decisions that carry across sessions and other AI clients. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 08:13 |
| @KLAX54ix/dsh-explain-selection DSH 插件：选中回答里的文本就地解释，解释不进入主对话上下文；卡片内可继续选中追问，支持拖拽、指向线与三级嵌套。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @qgynisc/dsh-inline-pastes DSH Web GUI 插件：粘贴图片即在文字中插入 image-1.png 内联胶囊，悬浮名字预览缩略图，自动编号（文字中插图 / hover 预览） | 需注意 | warn | 0/2/11 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-podcast DSH plugin | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-qrcode DSH plugin | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @mmd134312/dsh-cost-manager | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-02 08:13 |
| @ashareapi/ashareapi-dsh-plugin A股数据 API 官方 DSH 插件 —— 桌面端 / Web UI 输个包名即装，24 个 A股工具（行情 / K线 / 财务 / 资金 / 龙虎榜 / 板块 / 因子选股），免费工具无需 Key｜Official DSH plugin for the A-Share Data API — install by name from the desktop app or Web UI; 24 China A-share tools (quotes, K-lines, financials, money flow, dragon-tiger lists, sectors, screening), free tools need no key | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @kkwings/dsh-super-memory | 低风险 | pass | 0/0/7 | 0/0 | 2026-10-02 08:13 |
| @GRUST303/dsh-loop-guard DSH 插件：检测并打断 agent 循环中的纯文本重复退化（generation degeneration）。7917 条真实消息实测，误报率 0.03%。DSH plugin that detects and breaks pure-text degeneration loops in agent output. | 需注意 | warn | 1/0/3 | 0/0 | 2026-10-02 08:13 |
| @CharlesLiuZC/dsh-voice-context Voice-to-text plugin for DSH (desktop & web): composer mic button with cloud (SiliconFlow) or local offline (FunASR / faster-whisper) transcription. | 需注意 | warn | 0/8/17 | 0/0 | 2026-10-02 08:13 |
| @liceses/dsh-cosplay DSH 角色扮演插件：角色卡（系统提示词注入 + 用户提示词改写）、可分享的单文件卡包、复刻原版 UI 的角色页签与首轮选角 chip | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 08:13 |
| @Very12345/dsh-ssh-workspace Remote SSH workspaces for DSH with SSH config discovery and project selection | 需注意 | warn | 0/4/1 | 0/0 | 2026-10-02 10:14 |
| @DC-507/dsh-zoom Global UI zoom for the DSH web client: Cmd/Ctrl +/-, 0 — scales the whole interface, not just conversation text. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @taoyiii112-creator/dsh-deepseek-balance DSH API balance plugin with Wallpaper Engine backgrounds and an in-page mascot | 低风险 | pass | 0/0/16 | 0/0 | 2026-10-02 10:14 |
| @zjhaaa042-cloud/dsh-mobile-notify DSH 插件：任务完成后把通知推送到手机 —— ntfy / Bark / 钉钉 / 企业微信 / 飞书 / Server酱 / PushPlus / Telegram / Qmsg酱 / 通用 webhook | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @FANLS05/dsh-desktop-notifications Windows toast notifications for DSH: approvals, questions, run completion, errors and sign-in prompts - every toast led by the conversation name. | 需注意 | warn | 0/1/3 | 0/0 | 2026-10-02 10:14 |
| @deadbushxw/dsh-plugin-query-enhance DSH 插件：精简 profile 中插件管理列表的回传信息，每项只回一行摘要，并新增支持参数输入的条件查询工具 | DSH plugin: keep plugin manager list actions from returning the whole table by answering with one summary line per record, and add a parameterized query tool for filter-based lookups | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-browser DSH plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-mining DSH plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @XIMOYA/dsh-danger-reflection Danger Reflection (危险反思) — a DSH permission preset where the conversation's own model reviews each sandbox-escalation request instead of asking you. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-notion DSH plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @nijika-boyfriend/dsh-macos-notify macOS system notification plugin for DSH on task completion | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @QIN-SMART/dsh-quote-to-chat Select text in a DSH reply: a floating toolbar that quotes it into the composer draft or opens a side chat about it. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @hmtxj/dsh-model-modality Per-model input type (text/image) and thinking level checkboxes on the DSH Models settings page, writing the official llm-pi-ai input and reasoningEfforts fields. | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-02 10:14 |
| @Big-Dao/dsh-plugin-wsl-env Run a DSH session against a WSL distro: ctx.shell, ctx.fs and the GUI terminal served from inside the distro, sandboxed with bubblewrap | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-02 10:14 |
| @Wenaixi/dsh-plugin-dev The authoritative standard and developer skill for DSH (DSH 0.2.0-rc.2) & Cordis plugin development. | 严重 | fail | 1/0/3 | 0/0 | 2026-10-02 10:14 |
| @wjj-8283/dsh-web-fetch-fakeip-plugin | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-02 10:14 |
| @Yangi-252410/dsh-import-repositories | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @jipika/dsh-jev-grep Search-flood adjudication plugin for DSH: ripgrep + TypeSafe Jev typed judgments (noul/choice) so the agent reads ~30 calibrated rows instead of hundreds. Configurable provider (OpenCode Zen free tier / TypeSafe / OpenRouter), degrades to raw grep when offline. Zero deps, cross-platform. | 低风险 | pending | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @meowyuho/dsh-usage-balance | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-02 10:14 |
| @GuaiWuA/dsh-skill-bar 让 DSH 的 skill 变成可浏览的技能栏：搜索、收藏、点一下或拖一下写进输入框。/A browsable skill bar for DSH: search, favorite, and click or drag to insert into the input box. | 需注意 | warn | 0/5/19 | 0/0 | 2026-10-02 12:14 |
| @zywnb-2/dsh-donevoice dsh桌面任务提醒，根据codex等agent相同逻辑构建而成，点击桌面提醒可快速回到dsh页面。可自定义上传的音效（自带16个通知音效） | 需注意 | warn | 0/6/21 | 0/0 | 2026-10-02 12:14 |
| @QIN-SMART/dsh-session-md DSH plugin: export a session as human-readable Markdown or a self-contained HTML page — full / handoff / readable / audit presets, one-click download | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 12:14 |
| @nijika-boyfriend/dsh-notify-macos macOS system notification plugin for DSH on task completion | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 12:14 |
| @Nay-1/dsh-session-share DSH 侧栏会话行菜单里的「分享会话」：预览后复制 Markdown、导出 .md（同名文件夹 + 图片）或单文件 HTML | 需注意 | warn | 0/1/7 | 0/0 | 2026-10-02 12:14 |
| @tttwh/dsh-feishu-doc-saver | 需注意 | warn | 0/8/4 | 0/3 | 2026-10-02 12:14 |
| @ikun666666/dsh-groupchat DSH 插件：每个工程一个群聊 —— 多个 AI 会话与人同群互聊、@ 唤醒离线会话、@创建成员 拉新会话进群 | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-02 12:14 |
| @hemppp/dsh-panel-dock-plugin Photoshop-style floating dockable panels for the DSH Web UI - draggable, resizable, collapsible panels with persisted layout. | 低风险 | pass | 0/0/8 | 0/0 | 2026-10-02 12:14 |
| @zywnb-2/dsh-prompt-studio 提示词优化工坊 —— DSH 插件的多风格一键优化与发送前自动优化 | 需注意 | warn | 0/1/18 | 0/0 | 2026-10-02 12:14 |
| @LapStdy/dsh-dingtalk-notify DSH钉钉群通知插件：AI 需要你选择/审批、或一轮任务完成时推送到钉钉群，自带设置面板 | 低风险 | pass | 0/0/8 | 0/0 | 2026-10-02 12:14 |
| @CloudWoR/dsh-bilibili dsh-web嵌入B站视频插件，可登录，但建议使用小号。 | 需注意 | warn | 0/3/7 | 0/0 | 2026-10-02 12:14 |
| @yuehancn/dsh-tool-archive DSH plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-02 12:14 |
| @133563825as-ai/dsh-localdream DSH 插件：将手机端 Local Dream 的本地 NPU 生图接入对话，含文生图、图生图、四倍放大与分块重绘。 | 需注意 | warn | 0/2/3 | 0/0 | 2026-10-02 12:14 |
| @Sky-lll27/DSH-chat-keeper DSH 对话管家：跨工作区对话总表 · 正文搜索（中文子串 / 未打开的旧对话也能搜 / 定位到命中那句并读出上下文）· 按时间批量归档 · 回收站式删除（可恢复、分批、不删除正在运行的对话） | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-02 12:14 |
| @OkliaoliO/dsh-token-counter A DSH plugin that shows the account balance and, after every conversation turn, that turn's token usage and what it cost. Written by DeepSeek-V4.1-Flash at maximum reasoning effort (max). 一个 DSH插件：显示账户余额，并在每轮对话结束后显示该轮的 Token 消耗量与本次花费。本插件由 DeepSeek-V4.1-Flash 在最高推理强度（max）下编写。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-02 12:14 |
| @ybh1291747665/dsh-peer-bus Cross-session message bus for DSH: let independent sessions address and wake each other. | 低风险 | pass | 0/0/13 | 0/0 | 2026-10-02 12:14 |
| @yinhong-zhou/jevdo Just Jev it. A Jev-first agent loop with reusable actions for DSH. | 低风险 | pass | 0/0/10 | 0/0 | 2026-10-02 12:14 |
| @wojiao42/dsh-memory-file DSH ????????????????? Markdown ?????????????????????????????? ? File-backed memory for DSH with verifiable constraints | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-02 12:14 |
| @liwei9745/dsh-genbox-plugin DSH tools for GenBox: image generation/editing and video generation through a local GenBox server. | 需注意 | warn | 0/13/21 | 0/0 | 2026-10-02 12:14 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
48 期2026-10-0388 新增0 严重36 需注意2026-10-02当前99 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-10-02 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于