每日安全扫描日报
日期 · 2026-10-10 (UTC,覆盖当日 00:00–24:00 新增入库的插件)
104
当日新增
0
严重
40
需注意
64
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @bihong2026/dsh-arcade 🎮 GameHub Arcade — DSH sidebar plugin: 90+ classic open-source browser games, play instantly, zero installs. 1000+ planned. | 需注意 | warn | 0/2/9 | 0/0 | 2026-10-10 00:15 |
| @DenAbr/dsh-compact-selected-model DSH plugin: /compact uses the currently selected model, not the one that finished the last turn | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 00:15 |
| @lakerian/dsh-plugin-term-dictionary | 需注意 | warn | 0/1/7 | 0/0 | 2026-10-10 00:15 |
| @blackstar-baba/dsh-bird-bike 像素小鸡骑自行车 —— DSH Web GUI 底部的我的世界像素风骑行带 / A DSH client plugin: a helmeted pixel chicken rides a bicycle along a Minecraft-style strip docked at the bottom of the app frame. Day/night cycle, bell, jumps, headlight, ride stats. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 02:15 |
| @icrefin/dsh-agent-prompt Edit the AGENTS.md instruction files DSH actually loads - user-global and per-workspace - from a left-sidebar panel in the GUI. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 02:15 |
| @matiomlei/dsh-workbuddy-project | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-10 02:15 |
| @FuriousKinght/dsh-restart-button A button at the foot of the sidebar that restarts the DSH desktop app and reloads the page when it comes back. | 需注意 | warn | 0/10/13 | 0/0 | 2026-10-10 02:15 |
| @Upstream196/dsh-label-tune dsh字体亮度的控制 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @jojoman2024/dsh-memj 基于项目逻辑的dsh记忆系统,项目基于交接文档,知识基于项目沉淀。以人实际工作的逻辑,做知识的聚合和交接。开放书写规范以及全插件提示词的前端编辑(热加载),用户可自行优化,或者让模型帮插件通过修改提示词自进化。 | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-10 02:15 |
| @awol2005ex3/dsh-file-comment [DSH](https://github.com/deepseek-ai/deepseek-harness) 插件:在右侧边栏文件预览中选中文本,添加评论并发送到会话输入框。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @lerqian883-alt/dsh-plugin-ml-phase-gate Evidence-backed ML phase gates, live visualization, and portable project bootstrap for DSH. | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 02:15 |
| @ZinK33/dsh-plugin-glass-notepad A floating black liquid-glass schedule plugin for DSH: work/personal categories, time ranges, a two-lane timeline and mainland-China holidays. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 02:15 |
| @reliable-ly0411/babeldoc-pdf-translate Portable agent skill for layout-preserving PDF translation with BabelDOC, bilingual output and custom terminology | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @Wahwayhale/dsh-connect-doubao | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-10 02:15 |
| @LINinLIN-0079/godot-imagegen DSH 插件「美术工坊」:把本机秋叶 SD WebUI / ComfyUI 接进 DSH,对话里直接出图、改写并运行 ComfyUI 工作流,产物落成 Godot 可用美术资产 | 需注意 | warn | 0/3/5 | 0/0 | 2026-10-10 02:15 |
| @eaglezlee/dsh-ui-html Renders sandboxed interactive HTML in a chat turn and sends the user's selections, clicks and form input back to the model — as a new user message by default, or as the tool result in blocking mode. | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 02:15 |
| @RicardoYan/dsh-session-delete Delete a DSH session together with all its subagent sessions · 永久删除 DSH 会话及其派生的所有子代理会话 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 04:15 |
| @17897693/wen-wanan DSH 技能:情侣向睡前陪伴。一句温柔情话 → 一个谐音梗猜谜小故事 → 一句温柔晚安。131 条谐音词对、43 个落点,纯 Markdown、零依赖。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @sixzjd/npm-usage Local usage statistics for DSH: token consumption, request count, cache hit rate and estimated cost as a native settings section. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 04:15 |
| @ttmouse/dsh-generative-ui DSH 插件:AI 在对话流里直接输出可交互的 Generative UI 组件(沙箱 iframe,纯客户端) | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-10 04:15 |
| @P-JIANGH/dsh-enhance oh-my-zsh-style enhancement bundle for DSH: packaged skills, work-rule prompt guidance, the Enhance agent preset with a persistent deep-work prompt section, guards + delivery gate, work tracking, worktrees, advisor — install and go | 需注意 | warn | 0/1/1 | 0/0 | 2026-10-10 04:15 |
| @Wei894348/dsh-wb2api Self-hosted gateway plugin for DSH: registers a local WorkBuddy / CodeBuddy account pool as OpenAI-compatible model providers, with a web settings panel and a task-automation engine. | 需注意 | warn | 0/6/11 | 0/0 | 2026-10-10 04:15 |
| @rhl88/dsh-session-delete DSH插件:在侧边栏会话菜单里加入删除会话(永久移除会话记录与完整历史,补足只能归档的限制)。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 04:15 |
| @takboo/dsh-session-bin Native archived-session management for DSH with guarded permanent deletion and fixed batches. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @liaimei/dsh-cost-breakdown DSH 会话费用账单:账号余额 + 峰谷计价 + 每个会话(含子代理衍生会话)的消耗构成,输入框下方读数与右侧栏面板双入口。 DSH session cost breakdown: balance, peak/off-peak pricing, and how each session's spend is composed. | 低风险 | pass | 0/0/10 | 0/0 | 2026-10-10 04:15 |
| @xufu5438-netizen/dsh-boot-video 给 DSH加一段视频开机片头:启动时全屏播放 mp4、点击或 Esc 跳过、可导入自己的视频(解不了的编码自动转码成 H.264) | 需注意 | warn | 0/4/11 | 0/0 | 2026-10-10 04:15 |
| @cumthugo/dsh-deepseek-offpeak-indicator 在 DSH Web GUI 输入框工具行显示当前 DeepSeek API 计费时段的小圆点:黄=高峰,绿=空闲(半价),仅在选中 DeepSeek 提供商时显示 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 04:15 |
| @xulixin1968/dsh-paperless-retrieval Search a local Paperless-ngx document library with hybrid semantic + keyword retrieval, returning titles and key snippets as agent context. | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-10 04:15 |
| @vitkuz573/dsh-token-saver DSH plugin: peak-hour billing guard for DSH, plus token-saving settings UI and a live session cost strip | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @XSJUSTC/dsh-favourite Favorites for DSH: star sessions/workspaces, favourites-only filter, hide unfavourites, pin with hover metadata, star color, fork inheritance. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 04:15 |
| @AhYi8/dsh-gotify-notify DSH 的 Gotify 通知插件 | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-10 04:15 |
| @sunnycreate/dsh-plugin-stand-reminder | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-10 06:14 |
| @miku05231/dsh-provider-quote DSH 插件:对正在使用的模型提供商询价(余额 + 单价,参考 cc-switch 的「服务商询价」) | 需注意 | warn | 1/0/1 | 0/0 | 2026-10-10 06:14 |
| @Jia-HuaWu/dsh-ujn-image 在 DSH 里用济南大学大模型平台生成与编辑图片(文生图 + 图生图) | 需注意 | warn | 0/3/8 | 0/0 | 2026-10-10 06:14 |
| @liaosiliangCodeLife/harness-mate-dsh DSH plugin: use the agent running on your own computer from your phone or browser — bridge to the HarnessMate platform. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 06:14 |
| @YiQiuAcc/dsh-font-settings A DSH web plugin that replaces the font settings in general settings with searchable font pickers. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 06:14 |
| @john-walks-slow/dsh-cd Session working-directory override for DSH: a cd tool that makes relative paths in the file tools and the bash default workdir follow the new directory, per-session and cache-safe, without moving the session or its workspace root. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 06:14 |
| @BlackThunder2191026/dsh-deepseek-usage DSH 插件:侧边栏实时余额 + 每轮对话花费(人民币,含 token 明细) | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @Ok541151/cwk Agent mode picker for DSH: choose an external Agent CLI as the session's default executor, with automatic discovery of installed CLIs. | 低风险 | pass | 0/0/8 | 0/0 | 2026-10-10 06:14 |
| @Zhang1025681484/dsh-md-editor Editable Markdown tab for the DSH right sidebar — Monaco editor, autosave, opens from the workspace file tree. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @KILLEDx/dsh-token-stats DSH设置页 Token 统计分区:跨会话用量指标、热力图与常驻悬浮小窗(读本地日志,零模型消耗) | 需注意 | warn | 0/1/4 | 0/0 | 2026-10-10 06:14 |
| @PolinniZhong/dsh-apradar AI 产品雷达(AI Product Radar)—— DSH 插件:关注公开来源、识别前后变化、查看原始证据、沉淀产品机会。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 06:14 |
| @xjhao-heim/dsh-task-memory DSH 插件:工作区级任务记忆,把做过的任务存成记忆卡,下次会话不必重新分析一遍。 | 需注意 | warn | 0/1/5 | 0/0 | 2026-10-10 06:14 |
| @freeqin123/dsh-commandcode-plans-provider Command Code 订阅(Go/GOAT/Pro/Max)接入 DSH:档位过滤不隐藏任何模型、可视化配置 API Key、底部用量环、图片输入 | 需注意 | warn | 0/1/0 | 0/0 | 2026-10-10 06:14 |
| @EJDRONE/dsh-multi-acp 让 DSH 的一个会话由外部 ACP agent CLI 作为根 agent 驱动 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 06:14 |
| @sorawithcat/dsh-health-reminder DSH 插件:按自定义作息定时提醒喝水、起身、护眼和拉伸,多套方案随时切换,完全离线。 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @whf-jx/dsh-wallpaper DSH Web GUI 本地壁纸插件:上传本地图片/视频、手动切换、定时轮换与随机播放,带清晰度/压暗/模糊/填充调节 | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @acdsh4869/DSH-Transparent-UI-Plugin Aqua glassmorphism theme plugin for DSH (DSH v0.2.x / desktop v0.22.3+) — original by WYH66666666, adapted for 0.2.x | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @sorawithcat/dsh-settings-sync 设置同步插件:一份 JSON 带走插件清单、profile 配置、DSH_HOME 文件与浏览器本地设置,导入后可一键重装插件;与插件市场的 dsh-profile-backup 0.2 格式互通。 | 需注意 | warn | 0/2/7 | 0/0 | 2026-10-10 08:15 |
| @liu-zhengdong/dsh-shells DSH 插件:给 Agent 多个跨平台持久后台 shell(zsh/cmd/gitbash/pwsh),侧边栏面板跟随 PTY 流 | 需注意 | warn | 0/1/1 | 0/1 | 2026-10-10 08:15 |
| @EDDY597/dsh-opencode-gateway DSH 插件:把本机 opencode 生态接入 DSH 模型菜单——OpenCode Go 订阅(经 opencode-api-plugin 网关)+ Zen 免费档(内嵌 opencode2api,无需网关运行) | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 08:15 |
| @liu-zhengdong/dsh-recall DSH 插件:把每个 turn 归档为一条 Run,后台生成摘要,让 Agent 检索自己的执行历史 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @hfbcwhy7gh-cpu/dsh-restart-hotkey | 需注意 | warn | 0/2/11 | 0/0 | 2026-10-10 08:15 |
| @JUYANJY/dsh-codex-bridge Observe and steer a local Codex (OpenAI) session from DSH, over the codex app-server protocol. | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @xingxingbk-git/dsh-chat 为 DSH 提供 Chat / Harness 双模式切换 | 需注意 | warn | 0/2/6 | 0/0 | 2026-10-10 08:15 |
| @AAAlenwow/dsh-spring-admin-kit Spring Boot admin toolkit: EasyExcel batch import/export code generation and Thymeleaf+LayUI template safety guard. 企业后台开发技能包。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @AAAlenwow/dsh-weknora-archive Incrementally archive DSH sessions into a self-hosted WeKnora knowledge base: extract, summarize, dedupe, upload. DSH 会话归档进 WeKnora 知识库。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 08:15 |
| @FurryBear2025/dsh-session-drag-move DSH 左侧栏会话跨工作区拖拽:把会话拖到别的工作区,真正改写会话日志 header 的 cwd 并把日志目录迁到目标项目下,改变归属而不只是改名。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-restart-autostart 在 DSH 网页版「设置 → 通用」加入进程控制行:手动重启 dsh web 宿主进程,以及「跟随系统启动」勾选框(写入 macOS launchd / Linux systemd / Windows 服务自启条目,开机拉起并在崩溃后自动重启)。 | 需注意 | warn | 0/11/6 | 0/0 | 2026-10-10 08:15 |
| @xulixin1968/dsh-cookie-sync Sync cookies from Edge browser to DSH sidebar browser, avoiding repeated logins on supported sites. | 需注意 | warn | 0/2/4 | 0/0 | 2026-10-10 08:15 |
| @18477514055/dsh-ledger-memory 台账记忆(Ledger Memory)—— DSH 的工程化项目记忆:台账 + 活动日志(L0-L4) + 三层上下文压缩 + 逐字胶囊落盘 + 跨会话交接单。可回溯、可追查。 | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-settings-params 集中管理注入宿主的环境变量,并支持按白名单热重载那些启动时只读一次环境变量的插件(如 dsh-sql),免重启即可读取新值。 | 需注意 | warn | 0/3/6 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-lock 密码门禁:打开 DSH 时先显示密码界面,解锁后才能使用;支持手动锁定与自动锁定,密码以 scrypt 单向哈希存储。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 08:15 |
| @66wjz/dsh-model-cap DSH 提供商与模型高级管理台 · Provider & model management console for DSH | 低风险 | pass | 0/0/5 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-env-inspector-plus 环境体检:在「设置 → 环境体检」加一个分页,展示当前 DSH 宿主进程的身份(pid / 入口 / 工作目录 / Node / 运行时长)与环境变量分组(总数、DSH_ 前缀组、凭证形态组),值一律不出宿主;同时给模型一个只读的 env_inspect 工具。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 08:15 |
| @HangZhouXi/dsh-xiaoyi Turn your phone's Huawei XiaoYi into a remote control for the DSH agent on your own PC. DSH host plugin for XiaoYi OpenClaw mode: zero third-party deps, hand-written RFC6455 WebSocket client, AK/SK auth, heartbeat, A2A streaming, inbound attachments, outbound files. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 10:15 |
| @LiuJiaCheng11/dsh-postman DSH插件,允许你的AI直接操作你的Postman(网页版)的COLLECTIONS | 需注意 | warn | 0/5/9 | 0/0 | 2026-10-10 10:15 |
| @NINKCH/dsh-infinite_canvas A node-based short-drama studio inside DSH. Start from a one-line idea, walk out with a storyboarded, voiced, subtitled video cut — right on an infinite canvas. | 需注意 | warn | 0/3/2 | 0/0 | 2026-10-10 10:15 |
| @MarchingWorkhorse/Output-Overview dsh产出统计,包括代码行,采纳率,文档数,编辑次数等信息 | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 10:15 |
| @OrderG-X/dsh-cu Vision-first desktop computer-use for DSH on macOS: OCR text targeting, set-of-mark element indices, and a Codex-style cursor with spring animation. No accessibility-tree dependency. | 低风险 | pending | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @zq0929/dsh-coding-plan-balance Coding Plan quota pill for the DSH Web composer dock: monthly cycle usage in USD and the rolling 5-hour window, read with the credential your ctrip model provider already uses. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 10:15 |
| @Seller-1990/dsh-model-smart-config Smart model setup for DSH third-party API providers: recognize a model ID and fill in context window, input modalities and reasoning levels. | 低风险 | pass | 0/0/1 | 0/0 | 2026-10-10 10:15 |
| @MYming-yue/dsh-board DSH 的持久化共同白板插件:完整白板在左、原生对话在右,人和 AI 持续维护同一份草稿。基于 draft-board。 | 需注意 | warn | 0/1/10 | 0/0 | 2026-10-10 10:15 |
| @ccccty/proposal-generator-cn 项目书生成 - 科研项目申报书撰写技能包(DSH plugin) | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @BangBang-03/dsh-memory DSH 工作区长期记忆插件:会话开始注入记忆摘要、memory 工具按需读写、轮次结束自动提炼,设置面板里可查看与管理;支持把 Qoder / WorkBuddy 的既有记忆导入。 | 需注意 | warn | 0/6/5 | 0/0 | 2026-10-10 10:15 |
| @hojas/dsh-price-tip 侧栏的 DeepSeek API 价格时段提醒:当前处于空闲时段还是高峰时段、距离切换还有多久,以及当前生效的价目表。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @wobenshiwomu/dsh-facet DSH 插件:切面(facet)—— /visualize 一个名字或 arXiv 链接,主 agent 调研 + 双子代理并行生成 2D/3D 架构图谱,浮窗直接弹出 | A name or paper in, structured diagram windows out | 需注意 | warn | 0/1/2 | 0/0 | 2026-10-10 10:15 |
| @fishcg/dsh-input-prediction DSH 输入预测插件:输入框灰字续写下一句(Tab 接受)+ 每轮回答后 1–3 条可一键发送的候选 | 低风险 | pass | 0/0/8 | 0/0 | 2026-10-10 10:15 |
| @TindalosKorone/dsh-agent-memory DSH 跨会话长期记忆插件:零运行时依赖、输出可自算自证、请求级隔离;每项机制都附能判红的取证(CC BY-NC-SA 4.0) | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 10:15 |
| @zhao-guang-ai/dsh-quote-annotate-pro | 需注意 | warn | 0/3/10 | 0/0 | 2026-10-10 10:15 |
| @Unicorn0320/dsh-session-delete DSH 的会话 / 工作区「删除 + 恢复」插件:在左侧会话列表里直接删除会话或整个工作区,数据移入回收站,随时可以恢复,也可以彻底删除 | 低风险 | pending | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @NINKCH/dsh-artcraft Drive the open-source ArtCraft studio apps — PhotoCraft, FilmCraft, EffectCraft... — from DSH, in chat or from your own UI. | 需注意 | warn | 0/6/5 | 0/0 | 2026-10-10 10:15 |
| @mirelconstantin/dsh-postgres-expert PostgreSQL expertise for DSH: 11 curated pg-aiguide skills from Tiger Data registered natively, plus the pg-aiguide MCP server for version-exact manual search. | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 10:15 |
| @B1aZerr/dsh-net-switch Runtime network switch for DSH: flip Harness's own outbound traffic between a local Clash Verge proxy and direct/LAN without restarting, driven from a top-right status pill, the network_mode agent tool and the /net command. | 需注意 | warn | 0/4/26 | 0/0 | 2026-10-10 12:15 |
| @YubaiLoving/dsh-followup-suggestions Follow-up suggestion chips under a DSH session's last completed reply, generated with that session's own selected model. | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @jiang-yang/dsh-ai-worker | 需注意 | warn | 1/0/7 | 0/0 | 2026-10-10 12:15 |
| @casteadelqui/dsh-go 围棋模式 for DSH — a playable Go (Weiqi/Baduk) board tab, complete rules engine, five AI levels, and a tutor that plays with you. | 需注意 | warn | 0/2/8 | 0/0 | 2026-10-10 12:15 |
| @loyalchiiina/dsh-archive-favorites-forge Favorites, copy id+path, per-session delete, idle batch archive and a favourites filter for DSH conversations — additive slot extensions over the shipped archive feature, editing no official file. 为 DSH 对话增加收藏、复制 ID+路径、单条删除、超时批量归档与收藏筛选。 | 需注意 | warn | 0/4/7 | 0/0 | 2026-10-10 12:15 |
| @czpGhost/dsh-glm-web-search Z.AI (GLM) web search, web reader and vision for DSH, authenticated by a Z.AI email (OAuth) login instead of an API key | 需注意 | warn | 0/1/6 | 0/0 | 2026-10-10 12:15 |
| @Herbert-wang820/dsh-image | 需注意 | warn | 0/2/4 | 0/0 | 2026-10-10 12:15 |
| @ysefu/dsh-sidebar-tags Colored session tags for the DSH sidebar - tag a session from its row, see it at a glance, and filter history by tag. | 需注意 | warn | 0/5/20 | 0/0 | 2026-10-10 12:15 |
| @CyberQin/dsh-ohos-shell | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
| @rayyugz/dsh-plugin-hunyuan-image Native DSH plugin for Tencent Hunyuan image generation. v1.0: two models (Hy-Image-3.5-preview up to 4K / 3.0), official resolution × aspect-ratio picker, batch 1/2/4, local gallery with search + regenerate, custom output folder, official advanced parameters, model-callable tool. Zero native deps; macOS/Windows/Linux. Docs in 8 languages. | 需注意 | warn | 0/2/6 | 0/0 | 2026-10-10 12:15 |
| @MoruTeaven/dsh-model-quickslots 在 DSH 输入框上方添加一排模型快捷切换按钮:左键切换模型,右键编辑预设,支持自定义备注 | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @YubaiLoving/dsh-pinned-session-bar A DSH Web GUI client plugin: a dedicated Pinned bar above the sidebar workspace list, collecting every pinned session with cross-container drag and drop. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 12:15 |
| @tuanzi0v0/dsh-search-picture 一款用于DSH的插件,可以直接使用DSH搜索并下载图片 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
| @godlike985/dsh-sidebar-editor 在 DSH 右侧栏预览代码文件、按名字搜索工作区文件,并把选中行一键引用进对话框 | Preview code files in the DSH sidebar, search workspace files by name, and reference the selected lines into the composer | 低风险 | pass | 0/0/4 | 0/0 | 2026-10-10 12:15 |
| @baigei0710/dsh-remote-frp Remote access for the DSH Web GUI via your own cloud server: frp reverse tunnel managed as a macOS LaunchAgent, plus the server-side setup script. | 需注意 | warn | 0/15/14 | 0/0 | 2026-10-10 12:15 |
| @YSwo-fei/dsh-api-heal DSH 插件:界面报「API 密钥无效」时,自动定位并续期真正失效的那条凭据链(qoder / workbuddy-ai / our-free-model),然后重发请求。Self-healing credentials for DSH. | 需注意 | warn | 0/2/9 | 0/0 | 2026-10-10 12:15 |
| @was35/dsh-reclaim 审计并安全回收 DSH 占用的空间:看清会话、附件与缓存各占多少、还被谁引用,清理一律进可恢复的隔离区(DSH 插件) | 需注意 | warn | 0/5/4 | 0/0 | 2026-10-10 12:15 |
| @JianHeShui/dsh-desktop-glass Frosted-glass look for the DSH desktop app (translucent page + Windows acrylic window material) | 低风险 | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @LUDIWUSI12138/dsh-rewind Rewind a DSH session to before a turn you already sent. | 低风险 | pass | 0/0/9 | 0/0 | 2026-10-10 12:15 |
| @mirelconstantin/dsh-ponytail-sync Ponytail lazy-senior-dev mode as a native DSH skill, system-prompt section and six slash commands. Always available, level-switchable, no external process. | 低风险 | pass | 0/0/3 | 0/0 | 2026-10-10 12:15 |
| @Charaaah/dsh-web-api-balance DSH Web 插件:输入框旁常驻显示 DeepSeek API 余额;悬停展开左栏账户余额、右栏本次对话消耗(缓存命中/未命中/输出分档,峰谷自动判断),胶囊右半滑出可充值。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
静态启发式扫描 + 语义清单审计,非完整安全审计;不执行代码、不解析依赖。风险等级映射与站点一致:secrets/外泄/破坏性/挖矿类 critical 为"严重",其余 critical 级与警告归入"需注意"(medium)。
历史日报归档
56 期2026-10-110 新增0 严重0 需注意2026-10-10当前104 新增0 严重40 需注意2026-10-098 新增0 严重1 需注意2026-10-08100 新增0 严重39 需注意2026-10-070 新增0 严重0 需注意2026-10-060 新增0 严重0 需注意2026-10-050 新增0 严重0 需注意2026-10-0472 新增0 严重30 需注意2026-10-0388 新增0 严重36 需注意2026-10-0299 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么?
这份日报覆盖 2026-10-10 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的?
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”,其余 critical 判为“高风险”;medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计?
日报是静态启发式扫描加 manifest 审计,不执行代码,也不解析依赖,因此不能证明插件绝对安全。请用它来优先安排检查,而不是替代检查。
来源:dsh.so 安全标准 · 由 dsh.so 维护 · 发布于