每日安全扫描日报
日期 · 2026-10-03 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
88
当日新增
0
严重
36
需注意
52
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @mvalentsev/dsh-wsl-projects One DSH web server per project, inside WSL2 — started, stopped and opened from a panel in the Windows app. | 需注意 | warn | 0/5/7 | 0/0 | 2026-10-03 00:13 |
| @YizhouLouisLu/dsh-math-copy Copy rendered math in the DSH Web UI as its LaTeX source instead of KaTeX's glyph text. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 00:13 |
| @DevTarlow/dsh-chrome-devtools Give your DSH Agent a real Chrome browser to drive and inspect. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 02:13 |
| @447662/dsh-native-codex-cli Drive Codex from DSH: DSH owns the chat UI, Codex CLI owns task execution and native thread history - no second AI in the loop. | 需注意 | warn | 0/1/8 | 0/0 | 2026-10-03 02:13 |
| @bjzkhy/dsh-multiplatform-balance DSH skill plugin for multi-platform model account balances. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-03 02:13 |
| @louisyeaaah/dsh-doctor Read-only diagnostics for DSH: why a plugin row is not running, why a skill is invisible, whether patch rows conflict, and why an edited plugin did not take effect — plus a redacted card you can paste into an issue. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @EarthPretender/dsh-session-delete DSH 插件：在会话“…”菜单的“归档会话”下方新增红色“删除会话”行，二次确认后真正删除该会话的日志与工作区登记（不可逆；当次启动使用过的会话先停用再删，正在执行任务的会话再点一次停止任务并删除）。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 04:13 |
| @Jaylor-Wang/dsh-tool-headroom Intelligent output compression, log denoising, syntax-preserving JSON compaction, and CCR cache plugin for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @rocketstar666/dsh-approval-comment fork and fix from MaYiFei1995/dsh-approval-comment | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @AusertDream/TravelPlanner 旅行规划师：DSH 的中文旅行规划 agent，实时查 12306 / 飞猪 / 途牛 / 高德，交付单文件 HTML 路书 | 需注意 | warn | 0/11/35 | 0/0 | 2026-10-03 04:13 |
| @Cyrene-xl/dsh-cyrene-chat DSH 插件：增加「纯文本对话模式」agent 预设——整份替换系统提示词进行纯角色对话，只保留联网搜索与表情包。随包人设文本整理自开源项目 Cyrene-Agent（MIT）。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 04:13 |
| @ch1bug/dsh-shell-remote Remote one-shot shell execution (thin ssh transport) - the remote world per ADR-0004 | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-03 04:13 |
| @0mao0/dsh-inline-figures DSH 插件：让模型把矢量图穿插在回答段落之间，回答变成「文字-图-文字」 · DSH plugin: inline vector figures between the paragraphs of a reply | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @artorias-zj/dsh-cc-switch-skills DSH plugin: load every skill from the current user's .cc-switch\skills into DSH at startup | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 06:13 |
| @herenfor/dsh-task-notify DSH 任务完成通知插件，支持浏览器通知和 Windows 通知保底。 | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-03 06:13 |
| @lzyyzznl/dsh-prompt-tuner Composer prompt tuner for the DSH Web GUI: rewrites the input draft through a model you choose, with a review card, SSE streaming, and a settings page for model / reasoning effort / style / optimization prompt. | 需注意 | warn | 0/2/11 | 0/0 | 2026-10-03 06:13 |
| @lxchapu/dsh-session-purge DSH插件：把会话从磁盘上彻底删除。任意会话的「…」菜单里可删单条，侧边栏切到「仅显示已归档」时可一键删除全部已归档会话；两者都先弹二次确认，正在运行的会话会被拒绝删除。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 06:13 |
| @gxpppp/dsh-boot-anim DSH 桌面版启动动画（SteamOS 风格七段分镜）+ UI 由外向内分层入场过渡。宿主侧插件，经 webserver/index-inject 注入，零依赖、零源码改动。 | 需注意 | warn | 0/8/9 | 0/0 | 2026-10-03 06:13 |
| @wwwyxsuper/dsh-session-purge DSH 插件：在侧栏「已归档」会话的 ⋯ 菜单里彻底删除会话（日志 + 投影缓存 + 工作区登记；二次确认；五道安全闸门）。DSH plugin: permanently delete a session straight from the archived list. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-03 06:13 |
| @kaine380/dsh-mcp-unified-panel 能力库 (Unified MCP & Skill Hub): All-in-One MCP & Skill manager for DSH with feature-based row recognition and built-in OAuth 2.1 client driver. | 需注意 | warn | 2/1/6 | 0/0 | 2026-10-03 06:13 |
| @edwardzhou21/dsh-reasoning-slider DSH 插件 · 仿 Codex 的推理等级滑条，内嵌在模型选择器里 | Codex-style reasoning-effort slider embedded in the DSH model selector | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @YuMo-233/dsh-subagent-model-switch DSH ??:???/?????????????--??????????,????? turn ????? | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-03 06:13 |
| @louisyeaaah/dsh-receipt Turn one DSH session into a shareable receipt: duration, turns, tool calls, files touched, tokens. Read-only, redacted by default, zero dependencies. | 需注意 | warn | 0/3/1 | 0/0 | 2026-10-03 06:13 |
| @Dalizi2026/dsh-factory-provider 把 Factory (Droid) 订阅额度接入 DSH 的原生 LLM provider 插件 · Factory (Droid) subscription quota as native DSH providers | 需注意 | warn | 0/5/8 | 0/0 | 2026-10-03 06:13 |
| @Iris0fTheValley/Thaliris-dsh Thaliris plugin for DSH using native agents, subagents, Settings and shared Web/Desktop client extensions. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @moon-partner/dsh-anime25d-pets-v2 DSH0.2.0compatible anime 2.5D desktop pet | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @qiweiii/dsh-brand-studio Customize in-app branding in DSH Web, PWA, and Desktop. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 06:13 |
| @lsmax-72/dsh-rsi 面向个人用户、安装在 dsh 中的 Chat Memory＋Skill 自动演化插件 | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-03 06:13 |
| @wbb316/dsh-comfyui-image DSH的本地 ComfyUI 图片生成插件：一个 generate_image 工具覆盖文生图 / 图生图 / 局部重绘 / 去背景，参数有智能默认值、报错可照做；零第三方运行时依赖，附 doctor 自检与 88 项测试（自带 mock ComfyUI，无需真装）。Local ComfyUI image plugin for DSH — one generate_image tool with text2img / img2img / inpaint / remove-background modes. | 需注意 | warn | 0/2/14 | 0/0 | 2026-10-03 08:13 |
| @winniesi/dsh-hide-sidebar Mobile left sidebar for the DSH Web GUI: the 56px collapsed rail becomes a top toggle button that slides the sidebar in over the content. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @panando/dsh-pua DSH PUA 修订版（基于 @michengai/dsh-pua v0.3.22）：解除上游全局总闸，让「入口常显」与「功能默认关闭」共存——输入栏菜单一键开关 PUA，界面紧凑化。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @AK-blank/dsh-plugin-offpeak-badge Unofficial DSH Web GUI plugin: shows whether the DeepSeek API is billing at the off-peak or peak rate right now — bilingual 空闲/高峰 · Idle/Peak, Chinese holiday calendar built in. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 08:13 |
| @d0ublecl1ck/dsh-search-enhance Search inside the DSH New-Session workspace picker: pinyin initials, full pinyin spelling and substring matching. / 在「新建会话」的工作区下拉里直接搜索，支持拼音首字母、全拼与任意位置子串匹配。 | 需注意 | warn | 0/1/6 | 0/0 | 2026-10-03 08:13 |
| @chinahhy/DSH-plugins Hoya自用DeepSeek-Harness插件仓库 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @MYX-0211/dsh-sidebar-image-zoom Pointer-anchored wheel zoom and drag-to-pan for images in the DSH right sidebar. Replaces the built-in image viewport. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @copylee711/dsh-remote-control | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @dajie2014/dsh-dictation-turbo 双击 Control 键 = 点一下 DSH 输入框下方的语音输入麦克风（开始 / 停止听写） | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-03 08:13 |
| @jizenghui81/dsh-huashu-pixel Warm pixel theme for the DSH Web UI: cream-paper and arcade-phosphor palettes, pixel chrome with bundled pixel fonts, CRT motion on streaming and state changes, three intensity tiers, and a pixel loading bar while a turn runs. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 08:13 |
| @ouransishen/dsh-identity DSH agent 自身身份（did:web + X.509）的器官化出入口 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 08:13 |
| @yue-xiaxing/dsh-chang-kaishen-mode 常凯申模式：纯娱乐向的 DSH 人物饰演开关。开关位于「设置 → 通用」；本插件的代码与发布流程全部由 AI 完成。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @A42Null/dsh-opencode-zen-plugin OpenCode Console (Zen) models for DSH: paste your Console API key and the Console's chat models become selectable in DSH. | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-03 08:13 |
| @hy-sde/dsh-graph Agent Graph for DSH (durable supervisor): control plane, operator executor, stream layer, projection, wakes, host assembly and supervisor tools — the dsh-graph-* / dsh-tool-graph packages. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @Palpitate1388/dsh-market-sidebar | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @hy-sde/dsh-session-intelligence The session_health tool for DSH: per-session health intelligence (outcome classification, tool-health signals, prompt-quality heuristics, context pressure). | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 08:13 |
| @gba-mep/docx-toc | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @daoyu1993-lab/dsh-plugin-type-to-compose DSH plugin: type or paste anywhere in the window and it lands in the current conversation's composer — no click needed. | 需注意 | warn | 0/2/9 | 0/0 | 2026-10-03 08:13 |
| @piecuzwhynot/dsh-external-workers Give your DSH agent three more pairs of hands. It sends long tasks to Claude Code, Codex and Antigravity using your own subscription logins, keeps one persistent session per lane, and never loses a job. 给 DSH 用的外部 agent 泳道：把长任务派给 Claude Code、Codex、Antigravity 三个 CLI，用你自己已有的订阅登录。每条泳道一个持久会话，作业重启和压缩都不会丢。 | 需注意 | warn | 0/4/19 | 0/0 | 2026-10-03 08:13 |
| @xieani090612/dsh-remote-panel DSH插件：探测本机 WSL 发行版与远程 SSH 机器 注：主要部分均为ai编写 | 需注意 | warn | 0/5/7 | 0/0 | 2026-10-03 08:13 |
| @qianai05233/dsh-codex-panel Floating control panel for DSH: one-tap approval for git & GitHub write tools | 需注意 | warn | 0/2/3 | 0/0 | 2026-10-03 10:14 |
| @baldovinmarques391-design/dsh-computer-control DSH bundle: Windows desktop operation as discrete tool calls, each returning the frames captured around the call. | 需注意 | warn | 0/7/12 | 0/0 | 2026-10-03 10:14 |
| @karahanart/dsh-client-locale-tr | 低风险 | pass | 0/0/12 | 0/0 | 2026-10-03 10:14 |
| @asdukw/dsh-plugin-chat-tools Chat-page context tracking tools for DSH: collect and incrementally read on-screen chat messages over a local HTTP bridge | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 10:14 |
| @asdukw/dsh-plugin-android-tools Android device automation tools for DSH: read screen, tap, type, back, launch app, swipe over a local HTTP bridge | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-03 10:14 |
| @qianai05233/dsh-freeapi-panel Free-API aggregator panel for DSH: 29 legit free LLM providers with automatic failover | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-03 10:14 |
| @nikitafedorov008/dsh-flutter-tools Flutter panel for the DSH sidebar: devices, launch, VM Service controls, debug toggles, embedded DevTools, memory and profiling | 需注意 | warn | 0/6/8 | 0/0 | 2026-10-03 10:14 |
| @Inceptzws/dsh-project-guard DSH permission guard: work inside the workspace is never interrupted; only the extra permission a call asks for is judged — machine-safe actions pass, system changes ask with a consequence analysis, destructive ones are refused. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @qianai05233/dsh-codex-preset Codex-mode agent preset for DSH: explore → plan → implement → verify → integrate | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @N3kOk0/dsh-acrylic DSH Windows 10 Theme | 需注意 | warn | 0/5/20 | 0/0 | 2026-10-03 10:14 |
| @Hwayn-pixel/dsh-touchstone 璇曢噾鐭?路 dsh-touchstone: the missing evaluation half of DSH's self-evolution 鈥?same golden cases, run the current config vs a candidate prompt change, score with rule checks + an LLM judge, keep it only if it got better. | 低风险 | pass | 0/0/8 | 0/0 | 2026-10-03 10:14 |
| @AK-blank/dsh-plugin-mac-notify Unofficial DSH plugin: macOS Notification Center alerts when a session finishes or needs you — the banner carries the last reply, plays your system alert sound, and clicking it jumps back to the DSH page. | 需注意 | warn | 1/2/5 | 0/0 | 2026-10-03 10:14 |
| @kvashninsasha-gif/dsh-locale-ru Русский язык для DSH: 2615 строк интерфейса в 58 namespace — штатный DSH-плагин, добавляющий Русский рядом с 中文 и English | 低风险 | pass | 0/0/7 | 0/0 | 2026-10-03 10:14 |
| @d0ublecl1ck/dsh-csdn-theme CSDN 博文的配色与正文排版主题插件，用于 DSH Web GUI · CSDN-blog typography theme for the DSH web GUI. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @Hwayn-pixel/dsh-clipbook 灏忓す瀛?路 dsh-clipbook: a clipbook for DSH conversations 鈥?one click on any assistant reply to keep it; a header panel to browse, search, copy, delete and export your clips. | 低风险 | pass | 0/0/12 | 0/0 | 2026-10-03 10:14 |
| @metaone01/dsh-better-float Live DOM floating panels and screenshot overview for DSH Desktop | 需注意 | warn | 0/3/10 | 0/0 | 2026-10-03 10:14 |
| @lovezi0/dsh-open-in-androidstudio dsh第三方插件：向会话（Session）头部工具栏的 **"Open In..."** 按钮组注册 **Android Studio** 目标，一键用本机 Android Studio打开当前会话的 workspace 目录。 | 需注意 | warn | 0/2/10 | 0/0 | 2026-10-03 10:14 |
| @lpeixin/dsh-project-compass An AI-powered DSH plugin for codebase analysis, developer onboarding, and project-level Q&A. 项目罗盘 / Project Compass — DSH 插件，通过 AST、依赖图、RAG 和 LLM 分析代码库，自动生成架构、模块、调用链与上手指南，并提供项目级 AI Q&A，帮助开发者快速理解和接手项目。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @huguangyu666/dsh-plugin-ai-super-search DSH 插件：超级搜索 toolkit——集成 TinyFish 结构化检索、AnySearch REST、Bing 免 Key 爬取、Jina 与 DuckDuckGo，接管 DSH 原生 web_search，零 Token 消耗。 | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-03 10:14 |
| @Isle-ux/dsh-archive-keeper-plugin 归档守护：DSH 会话归档后自动提炼要点，由你自己决定每条归档的去留（保留原文 / 只留摘要 / 彻底删除，删除可恢复）。 | 需注意 | warn | 0/11/9 | 0/0 | 2026-10-03 10:14 |
| @pokerface-1224/deepseek-whale-girl-pet DSH 鲸鱼娘桌宠插件：透明 Windows 桌宠、五种动作立绘与互动菜单 | 需注意 | warn | 0/2/7 | 0/0 | 2026-10-03 10:14 |
| @daoyu1993-lab/dsh-plugin-composer-align Pin the New Session composer to the exact place the conversation composer occupies, so the input box stops jumping after the first message. | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-03 12:14 |
| @lpf0404/dsh-compat-market | 低风险 | pass | 0/0/9 | 0/0 | 2026-10-03 12:14 |
| @daoyu1993-lab/dsh-plugin-sidebar-polish Polish the DSH left sidebar: drop the brand row, redraw New Session as a panel row, unify row heights, tune the fill, pin the collapse toggle, add a settings entry, mark idle sessions. | 低风险 | pass | 0/0/11 | 0/0 | 2026-10-03 12:14 |
| @littlefish04/dsh-turn-price DSH plugin: shows the CNY cost of every completed turn under the turn | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
| @kyan001/dsh-jev-thinking Ask TypeSafe's Jev how deep a prompt needs to think. Apply that level to the model request. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
| @ADkun/dsh-convergence-notice DSH plugin: append one convergence line to every user message and inject it every N steps — both switchable, adjustable from the Settings page · 每条用户消息末尾追加一句收敛提示，并每 N 步注入一次，两项均可在设置页开关 | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @15372010668-dot/dsh-bluewhale-pet 一只陪你处理 DSH 任务的蓝鲸桌宠（dsh-bluewhale-pet）。In-page blue whale companion for DSH. | 需注意 | warn | 0/2/9 | 0/0 | 2026-10-03 12:14 |
| @guzhou079-arch/dsh-plugin-android-vscreen DSH plugin — let an agent drive an Android phone on a virtual display, so your own screen stays untouched. · 让 AI 在安卓手机的「虚拟屏」上干活，手机照常用。 | 需注意 | warn | 0/8/14 | 0/0 | 2026-10-03 12:14 |
| @HaiYu-22/dsh-session-purge Deep delete for DSH sessions: remove a session's log, projection cache, and archive entry from disk instead of only hiding it | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @Yokhong/dsh_academic_web_proxy | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-03 12:14 |
| @InInNHD/dsh-recheck Unofficial DSH plugin: bind conclusions to evidence files and revisit them when files change. 原生侧栏与结论复核历史。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 12:14 |
| @2DogsLee/dsh-watcher DSH 插件 API 面自动比对引擎：升级前一条命令看清插件依赖的 API/配置字段变了没有 · Auto diff engine for DSH plugin-breaking changes, with CI watch & agent skill | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 12:14 |
| @beibeihk/dsh-agent-observability Community plugin for event-grounded, privacy-first agent observability and reliability analysis in DSH. | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @Mark54s/dsh-regen | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-03 12:14 |
| @PPsz-qqq/dsh-restart-button DSH plugin: one-click restart button in the top-right of the session header (Windows desktop + dsh web). 一键重启 DSH 客户端。 | 需注意 | warn | 0/3/13 | 0/0 | 2026-10-03 12:14 |
| @zudazhuang/dsh-update DSH update plugin: official release checks, scheduled updates and supervised rollback | 需注意 | warn | 0/4/12 | 0/0 | 2026-10-03 12:14 |
| @yang208691-source/dsh-nutstore-backup en: 'Backs up DSH sessions, plugin config and workspace memory to Nutstore (Jianguoyun) over WebDAV, with incremental upload, connection test and one-click restore on a new machine.' zh: '把 DSH 的会话记录、插件配置与工作区记忆通过 WebDAV 增量备份到坚果云，支持连接测试与在新机器上一键恢复。' | 需注意 | warn | 0/7/21 | 0/0 | 2026-10-03 12:14 |
| @hiocobueno653-pixel/dsh-ui-polish DSH UI 打磨层：毛玻璃浮层修复 + 推理强度滑杆 + 模型选择导航增强（浏览器侧注入插件） | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-03 12:14 |
| @3likofj/dsh-custom-reasoning DSH 第三方模型推理强度选择 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
48 期2026-10-03当前88 新增0 严重36 需注意2026-10-0299 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-10-03 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于