每日安全扫描日报
日期 · 2026-10-08 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
100
当日新增
0
严重
39
需注意
61
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @Travizm/dsh-openai-live Full-duplex voice for DSH: a realtime capability seam, a GPT-Live-1 adapter, and a keyless replay backend. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 00:13 |
| @raymondkm2025/dsh-go-game Go (圍棋) plugin for the DSH: full rules engine, three-level AI, dead-stone estimator, LLM review, SGF, and an optional KataGo GTP bridge | 需注意 | warn | 0/2/12 | 0/0 | 2026-10-08 02:13 |
| @ImHaoYuan/dsh-mobile-mirror DSH 插件：一键搭建局域网服务器，手机浏览器直连，也可下载调试版 App | 需注意 | warn | 0/3/19 | 0/0 | 2026-10-08 02:13 |
| @Chi-hong22/dsh-plan-spend Plan Spend：DSH Web GUI 弹窗插件，展示已配置服务商的套餐花销（DeepSeek 官方余额 / OpenCode Go 5h·7d·月配额） | 低风险 | pass | 0/0/9 | 0/0 | 2026-10-08 02:13 |
| @HaoyanZhang123/dsh-plugin-control-your-development 把 AI 开发的进展变成人人看得懂、能拍板的产品仪表盘（DSH skill + 右侧栏面板）｜Turn AI-assisted development into a product dashboard anyone can read and control (a DSH skill + optional right-sidebar panel) | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-08 02:13 |
| @gh-gongjin/dsh-plugin-gh-trending dsh 插件：GitHub 日/周/月热榜监控 + 仓库详情中文描述与 README 节译（全程只读 GET） | 需注意 | warn | 0/2/4 | 0/0 | 2026-10-08 02:13 |
| @Chi-hong22/dsh-session-autoname 根会话首轮结束后按 MMDD｜类型｜主题 自动命名，并支持按全文内容按需命名指定会话 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 02:13 |
| @sumingwang233/dsh-code-review-graph Native DSH code intelligence, review workflows and interactive graphs powered by Code Review Graph | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @fanjinduo111/dsh-service-board DSH服务面板插件：按会话查看由哪个 Agent 会话启动了哪些服务，三态健康点 + HTTP 码、启动时间与运行时长、礼貌停止、实时日志带、原地重启并重放原命令行。基于上游 dsh-process-board 的补丁分叉（Windows）：修好重启后日志失效、扫描器误合并同名启动器、面板抢走输入框焦点。A docked DSH service panel plugin. | 需注意 | warn | 0/6/17 | 0/0 | 2026-10-08 04:13 |
| @Endless-zby/dsh-jenkins-plugin dsh-jenkins-plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @Ckarefulon/dsh-codespace-workspace | 需注意 | warn | 0/3/6 | 0/0 | 2026-10-08 04:13 |
| @ChrisLou-bioinfo/dsh-usage-lite DSH plugin: token usage statistics across all sessions as a settings page (zero-dep, no build) | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @Hope-Phenom/dsh-plugin-notify 一个标准的 DSH 插件：每轮回答结束时发一条桌面通知。A standard DSH plugin that posts a desktop notification whenever a turn ends. | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-08 04:13 |
| @kmyqchy/dsh-3d-preview STL / 3MF file preview for the DSH plugin dsh-better-sidebar: orbit, zoom, slicer plate switching and per-object filament colours from Bambu Studio / OrcaSlicer projects. Three.js based, no runtime dependencies. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @jerryxff26-alt/dsh-delivery-board DSH plugin: delivery board with stage pipeline, handoff audit trail and weekly Markdown report | 需注意 | warn | 0/1/3 | 0/0 | 2026-10-08 04:13 |
| @StarterMonk/dsh-adhd-session-mode DSH plugin converted from ayghri/i-have-adhd: ADHD-friendly output shaping that takes effect in a single session, never globally. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @elegant01/agent-acta 本地 AI agent 请求日志面板 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-area-progress DSH 跨工作区任务进度查看器：全区概览、跨区任务进度详情、异常与待办扫描，只读会话日志 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-im-alive DSH IM 主动消息守护进程：不定时发家常主动消息，抖动间隔、免打扰时段、日预算、防重复 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-cuoti DSH 错题本插件：坑、根因、解法与预防守则钉进提示词，同样的错不犯第二遍 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @residenthiago2011/DSH-Laya-Tool-Router Laya Tool Router Using the SystemOne Jev Typed Decisions for Local Laya Model and Equivalents. | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-08 04:13 |
| @Amo-aibiancheng/dsh-balance-meter DSH Web 界面底部常驻标注：充值余额 + 本次会话消费（按账户余额差测量，非本地 token 估算） | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 04:13 |
| @iuuuuuuuu/dsh-session-handoff DSH plugin: memory-preserving session handoff. Carries a conversation into a fresh session before it becomes unusable, and rescues sessions that already are. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @xiaoso456/dsh-workflow-lite DSH 的软工作流插件：在画布上设计流程，编译成计划提示词，由模型按计划执行；运行状态由模型自己记，没有执行引擎 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @solstice621/dsh-openai-auth OpenAI / Codex ChatGPT subscription auth for DSH Desktop, with native account and quota UI. | 需注意 | warn | 0/3/9 | 0/0 | 2026-10-08 06:14 |
| @linglanxin/dsh-aiagent-taskboard Minimal live taskboard plugin for DSH: what Claude Code / Codex / DSH / Open Design are doing right now - list + swimlane timeline. | 需注意 | warn | 0/2/9 | 0/0 | 2026-10-08 06:14 |
| @xuzihao66/dsh-token-frugal Cut the input-token cost of long DSH sessions: source-side tool-output compression on tools/post-execute plus per-agent tool-catalogue visibility, with a measurement script. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 06:14 |
| @arzvaak/dsh-provider-hub BharatCode and OpenAI-compatible provider setup alongside ChatGPT and GitHub Copilot subscriptions for DSH. | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-08 06:14 |
| @kee0012/dsh-restart DSH 桌面版标题栏重启按钮：一键重启整个应用（含 shell 与宿主进程）。 | 需注意 | warn | 0/6/10 | 0/0 | 2026-10-08 06:14 |
| @ruaibeite/dsh-undo Turn-level file undo for DSH: every write and edit is snapshotted before it lands, and the model can call the undo tool to roll back all files a conversation turn changed. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 06:14 |
| @wjvalue/dsh-answer-me-with-html Answer me with HTML as a DSH plugin: a skill-only bundle that answers hard questions with a one-page HTML. 让 DSH 用一页 HTML 回答复杂问题。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 06:14 |
| @gygygfg/dsh-winstage-sandbox DSH plugin: Windows staging-candidate-selective-commit sandbox (files + registry) with a review panel | 低风险 | pass | 0/0/7 | 0/0 | 2026-10-08 06:14 |
| @Respawn-ID/dsh-rhine-splash Rhine Lab style boot splash bundle for DSH desktop — 莱茵生命风格的 DSH 开屏动画插件 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 06:14 |
| @kee0012/dsh-science-skill 科研技能中心 for DSH：技能目录、分类、按会话启用门控，以及用户可调用的 /command 技能栏。 | 低风险 | pass | 0/0/9 | 0/0 | 2026-10-08 06:14 |
| @kee0012/expert-team DSH 专家团插件：把一支多角色专家团队装进当前会话 —— 团队画廊、成员名册、一键召唤，每位专家在独立子会话中并行工作，主会话汇总产出。 | 需注意 | warn | 0/5/19 | 0/0 | 2026-10-08 06:14 |
| @adamcjm/dsh-window-drag-probe Restore macOS window dragging in DSH Desktop: a 16px top drag band plus an in-window diagnostic panel (upstream discussion #9112). | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 06:14 |
| @PerryLink/dsh-phocinae Local non-generative decision layer for DSH: phocinae_ask / phocinae_gate tools plus a fail-closed approval gate | 需注意 | warn | 0/12/11 | 0/0 | 2026-10-08 06:14 |
| @COH2357/dsh-workspace-api-key 一个DSH插件，可以为每一个工作区配置独立的Api Key | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-08 06:14 |
| @ruaibeite/dsh-files-to-chat Right-click a file or folder in the DSH right sidebar file tree to add it to the conversation as an @ reference, with multi-select batch insertion. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @xinyang20/dsh-decision-router Decision-model-powered routing for DSH, with local inference and opt-in cloud decisions. | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-08 08:14 |
| @xinyang20/dsh-project-space Workspace resource library for DSH: organize, preview and reuse references and deliverables. | 需注意 | warn | 0/5/15 | 0/0 | 2026-10-08 08:14 |
| @qiz42144-web/dsh-ai-curfew AI 也要下班。到点话越来越少，凌晨三点只剩一句「明天再说」；已下班照样收消息，只是只回一个「。」 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 08:14 |
| @BaoBao1996121/dsh-chatgpt-subscription DSH 插件：ChatGPT 订阅登录、主 Agent 模型选择与直连/Clash 网络设置 | 需注意 | warn | 0/4/9 | 0/0 | 2026-10-08 08:14 |
| @jessicacui99/dsh-plugin-token-cost Live token spend for the current DSH session, priced with your profile's table and shown beside the composer. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @Smallballoons01/echo-notes Emotion-first encrypted diary plugin for DSH: templates, mood browsing, writing reminders, MCP adapter | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @miiy/dsh-terminal-keybar A touch key bar for the DSH Web terminal. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @seonzzy/dsh-zen-adapter OpenCode Zen free models for DSH, with live catalog discovery and no dependencies. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @NianjunZou/dsh-session-manager Codex-style left session manager for DSH — a reversible left-workspace UI overlay with a pinned section, project-session grouping and status dots. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @Tonywqs/dsh-session-folders 每个 DSH 会话一个时间戳产物目录：会话留在原工作区，插件注入「产物目录」规则；可选硬隔离模式。 Per-conversation output directories for DSH sessions. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @dingchenhui0618-arch/dsh-warden Adversary review gate for DSH: an independent small model reviews destructive tool calls before they run, and reports every verdict. · DSH 对抗式审查门：危险工具调用在执行前由一个独立小模型复核。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @dingchenhui0618-arch/dsh-market-sidebar 把 dshmarket 插件市场搬进 DSH 侧边栏 / Puts the dshmarket plugin market on the DSH sidebar | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @azazo1/dsh-browser Drive the user's real Google Chrome from DSH without CDP: native messaging + MV3 extension, numbered-text snapshots, persistent profile. 不走 Chrome 调试协议, 用扩展驱动本机 Chrome. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 08:14 |
| @sbVAN/dsh-skill-mimo 将每个MiMo Desktop / MiMoCode skill读取到 DSH 会话技能目录中。Reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session skill catalog. | 需注意 | warn | 0/3/3 | 0/0 | 2026-10-08 08:14 |
| @icrefin/dsh-notify-push Push DSH agent notifications to your phone and watch via ntfy, Bark, Gotify, Telegram or a webhook. | 需注意 | warn | 0/2/5 | 0/0 | 2026-10-08 08:14 |
| @Smallballoons01/dsh-idle-scholar Idle-time micro-learning for DSH: turns agent waiting gaps into study cards. Ships English, Japanese, and 法考 (Chinese National Judicial Examination) seed decks; extensible with JSON course packs. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @wonderandyou/dsh-qwen-paint DSH 插件：在对话里调用本机 ComfyUI，用千问 Qwen-Image 2.1 出图。纯本地、不出网、不需要 API Key。 | 需注意 | warn | 0/4/29 | 0/0 | 2026-10-08 08:14 |
| @Ebony-Vinyl/dsh-our-free-model 在 dsh 里装上这个插件即可，无需登录、注册或填 API Key，就能使用包括 DeepSeek V4.1 Flash、Kimi K3 在内的前沿模型——完全免费，不限量。 All you do is install this plugin in dsh: no login, no sign-up, no API key — the frontier models are just there, DeepSeek V4.1 Flash and Kimi K3 among them. Completely free, with no usage cap. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @kissazi2/dsh-personalization-local dsh个性化插件 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @Octen-Team/dsh-octen Octen web search and fetch for DSH: web_search via Octen /search, web_fetch via Octen /extract. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 08:14 |
| @shenjackyuanjie/dsh-openrouter-service-tier DSH 原生 OpenRouter service tier 控制插件，兼容 0.2.0-rc.2 与 0.2.1-alpha.1 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @xgxx666/dsh-clear-usage DSH 本地 Token 用量统计与模型分析，支持热力图、自定义日期和模型筛选。 | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-08 10:14 |
| @HsgtLgt/dsh-plugin-screenshot 面向模型的「截图」工具插件（DSH，Windows 宿主）。 注册一个 screenshot 工具，让会话里的 AI 能真正「看见」并展示你的屏幕。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @Twofruitsgrape/dsh-comsol DSH plugin: drive COMSOL Multiphysics end to end (steady + transient workflows) with a bundled MCP engine | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @helloHupc/dsh-git-branch DSH 插件：在对话框工具行、权限选择框右侧只读显示当前项目的 git 分支；目录不是仓库时不显示。 | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-08 10:14 |
| @Matthew-Laplace/dsh-ark-pet DSH 方舟桌宠：干员库按需下载、自定义 Codex 图集与普通图片导入。Arknights library and custom image pets for DSH. | 需注意 | warn | 0/1/6 | 0/0 | 2026-10-08 10:14 |
| @Everglow28/dsh-glm-quota-dock GLM Coding Plan quota pill for the DSH web GUI - real-time per-window usage in the composer stats row | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 10:14 |
| @callqh/dsh-project-summary Compact floating Git project summary for DSH: branch, changes, commits and GitHub PR. Follows DSH themes and conversation bounds. | 需注意 | warn | 0/2/10 | 0/0 | 2026-10-08 10:14 |
| @deepseekv41flash/dsh-remote-trust DSH plugin: makes a reverse-proxied (non-loopback) dsh web page count as a trusted host, so the Settings surface loads instead of reporting "settings are unavailable in this browser". | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @Femad-6/dsh-lumen-market 流明市场：DSH 插件发现、介绍与文档、GitHub 仓库查验，以及官方管线安装和更新。 | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-08 10:14 |
| @wang6077/dsh-ide-vscode DSH 右栏内置 IDE 插件：左文件树 + 右编辑区，右键新建文件/文件夹、重命名改后缀、删除，Ctrl+S 保存（中文界面） | 需注意 | warn | 0/5/8 | 0/0 | 2026-10-08 10:14 |
| @SHADOW-LI0327/dsh-process-kit 面向任意仓库的开发流程增强插件：以文件状态机驱动，内置 7 角色 Subagent、门禁脚本与 GUI 状态看板；仅执行确定性读取、渲染、安全追加与脚手架落地。 | 需注意 | warn | 0/3/16 | 0/0 | 2026-10-08 10:14 |
| @jingkun05/dsh-session-delete-native Sidebar session deletion for DSH — a native "Delete session" row in the Session "…" menu. UI-only, registers no agent tools. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 10:14 |
| @CarrotFish/dsh-file-and-terminal 为 DSH Web 配置添加“文件管理”和“终端”面板。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 10:14 |
| @boring-cuzzz/dsh-chimes Startup & turn-completion chimes for the DSH desktop app, with an in-app control panel and switchable sound library (Windows, zero dependencies). | 需注意 | warn | 0/2/12 | 0/0 | 2026-10-08 10:14 |
| @XHXnb123/dsh-plugin-archive-reader 只读翻看 asar / zip 归档的 dsh 插件：列条目、读条目、正则搜内容（零依赖） | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 10:14 |
| @ethanweave/workbuddy-gateway-dsh 在 DSH 中免费使用腾讯 CodeBuddy（WorkBuddy）账号额度：本机网关一键安装、开机自启、统一管理 | Use your CodeBuddy quota inside DSH for free: one-shot Windows installer, logon autostart and unified management for workbuddy-gateway | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @wuanthony397-hash/dsh-codex-peer Run the local Codex CLI as a peer agent from DSH: split work between the two agents, hand tasks over, review each other's changes, and keep every run on disk. | 需注意 | warn | 0/3/6 | 0/0 | 2026-10-08 12:14 |
| @paayton/dsh-link DSH 移动端 H5 桥接插件：手机浏览器经内网 / Tailscale 用连接密钥接入桌面版正在运行的会话（流式回复、Markdown、工具卡、图片上传）。 | 需注意 | warn | 0/1/9 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-skill-workshop 从日常工作自动提炼、发布和更新技能，按使用情况整理受管技能；也支持手工编辑与导入。 | 需注意 | warn | 0/4/0 | 0/0 | 2026-10-08 12:14 |
| @0w0miki/dsh-openpeon | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @oumaekumiko0821/dsh-splash-gojo DSH 开机动画插件 · Full-screen boot splash for DSH — 图片内联、零运行依赖、纯 host 半边 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @llafztq/dsh-video-tool Video editing toolset for DSH - trim, concat, audio, subtitles, transform, transcode and frame grabbing, powered by ffmpeg. | 需注意 | warn | 0/1/3 | 0/0 | 2026-10-08 12:14 |
| @4444Hao/dsh-codefall 适用于dsh的数字瀑布开机动画与绿色字样主题 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-08 12:14 |
| @WhichWitchWin/dsh-power-button 给 DSH 桌面版补一个可拖动的电源按钮：贴边自动收起，点开可重启或退出 DSH。Windows 专用、零依赖 · A draggable power button for DSH Desktop — latches to the window edge, click to restart or quit. | 需注意 | warn | 0/1/6 | 0/0 | 2026-10-08 12:14 |
| @korosu/dsh-web-search-ddg Keyless DuckDuckGo HTML-scrape web_search provider for the DSH (ctx.web seam): no API key, no extra model turn, one command to install. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @ags-neto/dsh-status-telemetry A DSH client plugin: a session telemetry pill in the composer dock that expands into a token, performance and context panel. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @smter/dsh-codebase-memory DSH plugin: connects the codebase-memory-mcp code graph, nudges the model at the decision point, corrects failed MCP calls, and indexes repositories by itself. | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-memory-dreaming 从原生会话整理日常记忆、Dream 与每周复查，保留出处并审阅长期事实。 | 需注意 | warn | 0/4/0 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-channel-core 统一管理 Discord、飞书渠道、会话绑定、消息交付与进度卡片的单插件。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @Cjamiel/manoo-manos Manoo: manos para DSH. Ve tu pantalla, mueve el mouse y escribe por ti ‚Äî barra, aro para ense√±ar y voz, en espa√±ol, para quien no sabe usar la computadora. macOS. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 12:14 |
| @Arbeiter-bit/dsh-open-branch Fork a writable side conversation from any completed DSH turn, in the right sidebar. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-browser-tools 连接已启动的浏览器，通过结构快照、引用、原生审批与截图完成网页操作。 | 需注意 | warn | 0/6/2 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-instruction-files 配置指令文件自动更新、角色的独立工作区和新会话默认模型与权限。 | 需注意 | warn | 0/2/0 | 0/0 | 2026-10-08 12:14 |
| @adamcjm/dsh-memo DSH 备忘录插件：侧边栏快速记录 + 本地 SQLite + GitHub 私有仓库同步 + 图片截图｜Memo plugin for DSH | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-status-cards 统一查看运行状态，并在原有边缘卡片查看 OpenCode Go 额度和 DeepSeek 余额。 | 需注意 | warn | 0/2/2 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-lossless-context 使用原生压缩引擎分层整理上下文，保留原始会话并提供检索与展开。 | 需注意 | warn | 0/2/0 | 0/0 | 2026-10-08 12:14 |
| @ChrisLou-bioinfo/dsh-workspace-badge DSH plugin: workspace badge on each session row in the flat (recency-sorted) sidebar list | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-08 12:14 |
| @Zai-G/dsh-preset-workshop 预设工坊 · Preset Workshop：为 DSH 管理人设、系统提示词、工具与技能，并预览请求组成。 | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-08 12:14 |
| @T-Auto/dsh-ops Provides bash, PowerShell 7, and a suite of high-performance tools written in Rust for Windows DSH to enhance token efficiency / 为windows的dsh提供bash、powershell7及一系列rust编写的高性能tools来提高token效率 | 需注意 | warn | 0/4/5 | 0/0 | 2026-10-08 12:14 |
| @pridurok-goxa/dsh-ui-tweaks Твики интерфейса DSH. Первый — масштаб всего интерфейса: Ctrl+=, Ctrl+-, Ctrl+0, нумпад, Ctrl+колесо | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-08 12:14 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
54 期2026-10-098 新增0 严重1 需注意2026-10-08当前100 新增0 严重39 需注意2026-10-070 新增0 严重0 需注意2026-10-060 新增0 严重0 需注意2026-10-050 新增0 严重0 需注意2026-10-0472 新增0 严重30 需注意2026-10-0388 新增0 严重36 需注意2026-10-0299 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-10-08 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于