每日安全扫描日报

日期 · 2026-10-10 (UTC,覆盖当日 00:00–24:00 新增入库的插件)

104
当日新增
0
严重
40
需注意
64
低风险
插件风险扫描结论C/W/I清单审计收录时间
@bihong2026/dsh-arcade
🎮 GameHub Arcade — DSH sidebar plugin: 90+ classic open-source browser games, play instantly, zero installs. 1000+ planned.
需注意warn0/2/90/02026-10-10 00:15
@DenAbr/dsh-compact-selected-model
DSH plugin: /compact uses the currently selected model, not the one that finished the last turn
低风险pass0/0/00/02026-10-10 00:15
@lakerian/dsh-plugin-term-dictionary
需注意warn0/1/70/02026-10-10 00:15
@blackstar-baba/dsh-bird-bike
像素小鸡骑自行车 —— DSH Web GUI 底部的我的世界像素风骑行带 / A DSH client plugin: a helmeted pixel chicken rides a bicycle along a Minecraft-style strip docked at the bottom of the app frame. Day/night cycle, bell, jumps, headlight, ride stats.
低风险pass0/0/20/02026-10-10 02:15
@icrefin/dsh-agent-prompt
Edit the AGENTS.md instruction files DSH actually loads - user-global and per-workspace - from a left-sidebar panel in the GUI.
低风险pass0/0/40/02026-10-10 02:15
@matiomlei/dsh-workbuddy-project
低风险pass0/0/50/02026-10-10 02:15
@FuriousKinght/dsh-restart-button
A button at the foot of the sidebar that restarts the DSH desktop app and reloads the page when it comes back.
需注意warn0/10/130/02026-10-10 02:15
@Upstream196/dsh-label-tune
dsh字体亮度的控制
低风险pass0/0/00/02026-10-10 02:15
@jojoman2024/dsh-memj
基于项目逻辑的dsh记忆系统,项目基于交接文档,知识基于项目沉淀。以人实际工作的逻辑,做知识的聚合和交接。开放书写规范以及全插件提示词的前端编辑(热加载),用户可自行优化,或者让模型帮插件通过修改提示词自进化。
需注意warn0/1/40/02026-10-10 02:15
@awol2005ex3/dsh-file-comment
[DSH](https://github.com/deepseek-ai/deepseek-harness) 插件:在右侧边栏文件预览中选中文本,添加评论并发送到会话输入框。
低风险pass0/0/00/02026-10-10 02:15
@lerqian883-alt/dsh-plugin-ml-phase-gate
Evidence-backed ML phase gates, live visualization, and portable project bootstrap for DSH.
低风险pass0/0/60/02026-10-10 02:15
@ZinK33/dsh-plugin-glass-notepad
A floating black liquid-glass schedule plugin for DSH: work/personal categories, time ranges, a two-lane timeline and mainland-China holidays.
低风险pass0/0/40/02026-10-10 02:15
@reliable-ly0411/babeldoc-pdf-translate
Portable agent skill for layout-preserving PDF translation with BabelDOC, bilingual output and custom terminology
低风险pass0/0/00/02026-10-10 02:15
@Wahwayhale/dsh-connect-doubao
低风险pass0/0/10/02026-10-10 02:15
@LINinLIN-0079/godot-imagegen
DSH 插件「美术工坊」:把本机秋叶 SD WebUI / ComfyUI 接进 DSH,对话里直接出图、改写并运行 ComfyUI 工作流,产物落成 Godot 可用美术资产
需注意warn0/3/50/02026-10-10 02:15
@eaglezlee/dsh-ui-html
Renders sandboxed interactive HTML in a chat turn and sends the user's selections, clicks and form input back to the model — as a new user message by default, or as the tool result in blocking mode.
低风险pass0/0/60/02026-10-10 02:15
@RicardoYan/dsh-session-delete
Delete a DSH session together with all its subagent sessions · 永久删除 DSH 会话及其派生的所有子代理会话
低风险pass0/0/60/02026-10-10 04:15
@17897693/wen-wanan
DSH 技能:情侣向睡前陪伴。一句温柔情话 → 一个谐音梗猜谜小故事 → 一句温柔晚安。131 条谐音词对、43 个落点,纯 Markdown、零依赖。
低风险pass0/0/00/02026-10-10 04:15
@sixzjd/npm-usage
Local usage statistics for DSH: token consumption, request count, cache hit rate and estimated cost as a native settings section.
低风险pass0/0/40/02026-10-10 04:15
@ttmouse/dsh-generative-ui
DSH 插件:AI 在对话流里直接输出可交互的 Generative UI 组件(沙箱 iframe,纯客户端)
需注意warn0/1/20/02026-10-10 04:15
@P-JIANGH/dsh-enhance
oh-my-zsh-style enhancement bundle for DSH: packaged skills, work-rule prompt guidance, the Enhance agent preset with a persistent deep-work prompt section, guards + delivery gate, work tracking, worktrees, advisor — install and go
需注意warn0/1/10/02026-10-10 04:15
@Wei894348/dsh-wb2api
Self-hosted gateway plugin for DSH: registers a local WorkBuddy / CodeBuddy account pool as OpenAI-compatible model providers, with a web settings panel and a task-automation engine.
需注意warn0/6/110/02026-10-10 04:15
@rhl88/dsh-session-delete
DSH插件:在侧边栏会话菜单里加入删除会话(永久移除会话记录与完整历史,补足只能归档的限制)。
低风险pass0/0/30/02026-10-10 04:15
@takboo/dsh-session-bin
Native archived-session management for DSH with guarded permanent deletion and fixed batches.
低风险pass0/0/00/02026-10-10 04:15
@liaimei/dsh-cost-breakdown
DSH 会话费用账单:账号余额 + 峰谷计价 + 每个会话(含子代理衍生会话)的消耗构成,输入框下方读数与右侧栏面板双入口。 DSH session cost breakdown: balance, peak/off-peak pricing, and how each session's spend is composed.
低风险pass0/0/100/02026-10-10 04:15
@xufu5438-netizen/dsh-boot-video
给 DSH加一段视频开机片头:启动时全屏播放 mp4、点击或 Esc 跳过、可导入自己的视频(解不了的编码自动转码成 H.264)
需注意warn0/4/110/02026-10-10 04:15
@cumthugo/dsh-deepseek-offpeak-indicator
在 DSH Web GUI 输入框工具行显示当前 DeepSeek API 计费时段的小圆点:黄=高峰,绿=空闲(半价),仅在选中 DeepSeek 提供商时显示
低风险pass0/0/40/02026-10-10 04:15
@xulixin1968/dsh-paperless-retrieval
Search a local Paperless-ngx document library with hybrid semantic + keyword retrieval, returning titles and key snippets as agent context.
需注意warn0/1/20/02026-10-10 04:15
@vitkuz573/dsh-token-saver
DSH plugin: peak-hour billing guard for DSH, plus token-saving settings UI and a live session cost strip
低风险pass0/0/00/02026-10-10 04:15
@XSJUSTC/dsh-favourite
Favorites for DSH: star sessions/workspaces, favourites-only filter, hide unfavourites, pin with hover metadata, star color, fork inheritance.
低风险pass0/0/30/02026-10-10 04:15
@AhYi8/dsh-gotify-notify
DSH 的 Gotify 通知插件
低风险pass0/0/50/02026-10-10 04:15
@sunnycreate/dsh-plugin-stand-reminder
低风险pass0/0/10/02026-10-10 06:14
@miku05231/dsh-provider-quote
DSH 插件:对正在使用的模型提供商询价(余额 + 单价,参考 cc-switch 的「服务商询价」)
需注意warn1/0/10/02026-10-10 06:14
@Jia-HuaWu/dsh-ujn-image
在 DSH 里用济南大学大模型平台生成与编辑图片(文生图 + 图生图)
需注意warn0/3/80/02026-10-10 06:14
@liaosiliangCodeLife/harness-mate-dsh
DSH plugin: use the agent running on your own computer from your phone or browser — bridge to the HarnessMate platform.
低风险pass0/0/40/02026-10-10 06:14
@YiQiuAcc/dsh-font-settings
A DSH web plugin that replaces the font settings in general settings with searchable font pickers.
低风险pass0/0/00/02026-10-10 06:14
@john-walks-slow/dsh-cd
Session working-directory override for DSH: a cd tool that makes relative paths in the file tools and the bash default workdir follow the new directory, per-session and cache-safe, without moving the session or its workspace root.
低风险pass0/0/00/02026-10-10 06:14
@BlackThunder2191026/dsh-deepseek-usage
DSH 插件:侧边栏实时余额 + 每轮对话花费(人民币,含 token 明细)
低风险pass0/0/30/02026-10-10 06:14
@Ok541151/cwk
Agent mode picker for DSH: choose an external Agent CLI as the session's default executor, with automatic discovery of installed CLIs.
低风险pass0/0/80/02026-10-10 06:14
@Zhang1025681484/dsh-md-editor
Editable Markdown tab for the DSH right sidebar — Monaco editor, autosave, opens from the workspace file tree.
低风险pass0/0/30/02026-10-10 06:14
@KILLEDx/dsh-token-stats
DSH设置页 Token 统计分区:跨会话用量指标、热力图与常驻悬浮小窗(读本地日志,零模型消耗)
需注意warn0/1/40/02026-10-10 06:14
@PolinniZhong/dsh-apradar
AI 产品雷达(AI Product Radar)—— DSH 插件:关注公开来源、识别前后变化、查看原始证据、沉淀产品机会。
低风险pass0/0/60/02026-10-10 06:14
@xjhao-heim/dsh-task-memory
DSH 插件:工作区级任务记忆,把做过的任务存成记忆卡,下次会话不必重新分析一遍。
需注意warn0/1/50/02026-10-10 06:14
@freeqin123/dsh-commandcode-plans-provider
Command Code 订阅(Go/GOAT/Pro/Max)接入 DSH:档位过滤不隐藏任何模型、可视化配置 API Key、底部用量环、图片输入
需注意warn0/1/00/02026-10-10 06:14
@EJDRONE/dsh-multi-acp
让 DSH 的一个会话由外部 ACP agent CLI 作为根 agent 驱动
低风险pass0/0/60/02026-10-10 06:14
@sorawithcat/dsh-health-reminder
DSH 插件:按自定义作息定时提醒喝水、起身、护眼和拉伸,多套方案随时切换,完全离线。
低风险pass0/0/30/02026-10-10 06:14
@whf-jx/dsh-wallpaper
DSH Web GUI 本地壁纸插件:上传本地图片/视频、手动切换、定时轮换与随机播放,带清晰度/压暗/模糊/填充调节
低风险pass0/0/30/02026-10-10 06:14
@acdsh4869/DSH-Transparent-UI-Plugin
Aqua glassmorphism theme plugin for DSH (DSH v0.2.x / desktop v0.22.3+) — original by WYH66666666, adapted for 0.2.x
低风险pass0/0/00/02026-10-10 08:15
@sorawithcat/dsh-settings-sync
设置同步插件:一份 JSON 带走插件清单、profile 配置、DSH_HOME 文件与浏览器本地设置,导入后可一键重装插件;与插件市场的 dsh-profile-backup 0.2 格式互通。
需注意warn0/2/70/02026-10-10 08:15
@liu-zhengdong/dsh-shells
DSH 插件:给 Agent 多个跨平台持久后台 shell(zsh/cmd/gitbash/pwsh),侧边栏面板跟随 PTY 流
需注意warn0/1/10/12026-10-10 08:15
@EDDY597/dsh-opencode-gateway
DSH 插件:把本机 opencode 生态接入 DSH 模型菜单——OpenCode Go 订阅(经 opencode-api-plugin 网关)+ Zen 免费档(内嵌 opencode2api,无需网关运行)
低风险pass0/0/30/02026-10-10 08:15
@liu-zhengdong/dsh-recall
DSH 插件:把每个 turn 归档为一条 Run,后台生成摘要,让 Agent 检索自己的执行历史
低风险pass0/0/00/02026-10-10 08:15
@hfbcwhy7gh-cpu/dsh-restart-hotkey
需注意warn0/2/110/02026-10-10 08:15
@JUYANJY/dsh-codex-bridge
Observe and steer a local Codex (OpenAI) session from DSH, over the codex app-server protocol.
低风险pass0/0/00/02026-10-10 08:15
@xingxingbk-git/dsh-chat
为 DSH 提供 Chat / Harness 双模式切换
需注意warn0/2/60/02026-10-10 08:15
@AAAlenwow/dsh-spring-admin-kit
Spring Boot admin toolkit: EasyExcel batch import/export code generation and Thymeleaf+LayUI template safety guard. 企业后台开发技能包。
低风险pass0/0/00/02026-10-10 08:15
@AAAlenwow/dsh-weknora-archive
Incrementally archive DSH sessions into a self-hosted WeKnora knowledge base: extract, summarize, dedupe, upload. DSH 会话归档进 WeKnora 知识库。
低风险pass0/0/20/02026-10-10 08:15
@FurryBear2025/dsh-session-drag-move
DSH 左侧栏会话跨工作区拖拽:把会话拖到别的工作区,真正改写会话日志 header 的 cwd 并把日志目录迁到目标项目下,改变归属而不只是改名。
低风险pass0/0/20/02026-10-10 08:15
@felixpu/dsh-restart-autostart
在 DSH 网页版「设置 → 通用」加入进程控制行:手动重启 dsh web 宿主进程,以及「跟随系统启动」勾选框(写入 macOS launchd / Linux systemd / Windows 服务自启条目,开机拉起并在崩溃后自动重启)。
需注意warn0/11/60/02026-10-10 08:15
@xulixin1968/dsh-cookie-sync
Sync cookies from Edge browser to DSH sidebar browser, avoiding repeated logins on supported sites.
需注意warn0/2/40/02026-10-10 08:15
@18477514055/dsh-ledger-memory
台账记忆(Ledger Memory)—— DSH 的工程化项目记忆:台账 + 活动日志(L0-L4) + 三层上下文压缩 + 逐字胶囊落盘 + 跨会话交接单。可回溯、可追查。
低风险pass0/0/10/02026-10-10 08:15
@felixpu/dsh-settings-params
集中管理注入宿主的环境变量,并支持按白名单热重载那些启动时只读一次环境变量的插件(如 dsh-sql),免重启即可读取新值。
需注意warn0/3/60/02026-10-10 08:15
@felixpu/dsh-lock
密码门禁:打开 DSH 时先显示密码界面,解锁后才能使用;支持手动锁定与自动锁定,密码以 scrypt 单向哈希存储。
低风险pass0/0/40/02026-10-10 08:15
@66wjz/dsh-model-cap
DSH 提供商与模型高级管理台 · Provider & model management console for DSH
低风险pass0/0/50/02026-10-10 08:15
@felixpu/dsh-env-inspector-plus
环境体检:在「设置 → 环境体检」加一个分页,展示当前 DSH 宿主进程的身份(pid / 入口 / 工作目录 / Node / 运行时长)与环境变量分组(总数、DSH_ 前缀组、凭证形态组),值一律不出宿主;同时给模型一个只读的 env_inspect 工具。
低风险pass0/0/40/02026-10-10 08:15
@HangZhouXi/dsh-xiaoyi
Turn your phone's Huawei XiaoYi into a remote control for the DSH agent on your own PC. DSH host plugin for XiaoYi OpenClaw mode: zero third-party deps, hand-written RFC6455 WebSocket client, AK/SK auth, heartbeat, A2A streaming, inbound attachments, outbound files.
低风险pass0/0/20/02026-10-10 10:15
@LiuJiaCheng11/dsh-postman
DSH插件,允许你的AI直接操作你的Postman(网页版)的COLLECTIONS
需注意warn0/5/90/02026-10-10 10:15
@NINKCH/dsh-infinite_canvas
A node-based short-drama studio inside DSH. Start from a one-line idea, walk out with a storyboarded, voiced, subtitled video cut — right on an infinite canvas.
需注意warn0/3/20/02026-10-10 10:15
@MarchingWorkhorse/Output-Overview
dsh产出统计,包括代码行,采纳率,文档数,编辑次数等信息
低风险pass0/0/40/02026-10-10 10:15
@OrderG-X/dsh-cu
Vision-first desktop computer-use for DSH on macOS: OCR text targeting, set-of-mark element indices, and a Codex-style cursor with spring animation. No accessibility-tree dependency.
低风险pending0/0/00/02026-10-10 10:15
@zq0929/dsh-coding-plan-balance
Coding Plan quota pill for the DSH Web composer dock: monthly cycle usage in USD and the rolling 5-hour window, read with the credential your ctrip model provider already uses.
低风险pass0/0/30/02026-10-10 10:15
@Seller-1990/dsh-model-smart-config
Smart model setup for DSH third-party API providers: recognize a model ID and fill in context window, input modalities and reasoning levels.
低风险pass0/0/10/02026-10-10 10:15
@MYming-yue/dsh-board
DSH 的持久化共同白板插件:完整白板在左、原生对话在右,人和 AI 持续维护同一份草稿。基于 draft-board。
需注意warn0/1/100/02026-10-10 10:15
@ccccty/proposal-generator-cn
项目书生成 - 科研项目申报书撰写技能包(DSH plugin)
低风险pass0/0/00/02026-10-10 10:15
@BangBang-03/dsh-memory
DSH 工作区长期记忆插件:会话开始注入记忆摘要、memory 工具按需读写、轮次结束自动提炼,设置面板里可查看与管理;支持把 Qoder / WorkBuddy 的既有记忆导入。
需注意warn0/6/50/02026-10-10 10:15
@hojas/dsh-price-tip
侧栏的 DeepSeek API 价格时段提醒:当前处于空闲时段还是高峰时段、距离切换还有多久,以及当前生效的价目表。
低风险pass0/0/00/02026-10-10 10:15
@wobenshiwomu/dsh-facet
DSH 插件:切面(facet)—— /visualize 一个名字或 arXiv 链接,主 agent 调研 + 双子代理并行生成 2D/3D 架构图谱,浮窗直接弹出 | A name or paper in, structured diagram windows out
需注意warn0/1/20/02026-10-10 10:15
@fishcg/dsh-input-prediction
DSH 输入预测插件:输入框灰字续写下一句(Tab 接受)+ 每轮回答后 1–3 条可一键发送的候选
低风险pass0/0/80/02026-10-10 10:15
@TindalosKorone/dsh-agent-memory
DSH 跨会话长期记忆插件:零运行时依赖、输出可自算自证、请求级隔离;每项机制都附能判红的取证(CC BY-NC-SA 4.0)
低风险pass0/0/20/02026-10-10 10:15
@zhao-guang-ai/dsh-quote-annotate-pro
需注意warn0/3/100/02026-10-10 10:15
@Unicorn0320/dsh-session-delete
DSH 的会话 / 工作区「删除 + 恢复」插件:在左侧会话列表里直接删除会话或整个工作区,数据移入回收站,随时可以恢复,也可以彻底删除
低风险pending0/0/00/02026-10-10 10:15
@NINKCH/dsh-artcraft
Drive the open-source ArtCraft studio apps — PhotoCraft, FilmCraft, EffectCraft... — from DSH, in chat or from your own UI.
需注意warn0/6/50/02026-10-10 10:15
@mirelconstantin/dsh-postgres-expert
PostgreSQL expertise for DSH: 11 curated pg-aiguide skills from Tiger Data registered natively, plus the pg-aiguide MCP server for version-exact manual search.
低风险pass0/0/40/02026-10-10 10:15
@B1aZerr/dsh-net-switch
Runtime network switch for DSH: flip Harness's own outbound traffic between a local Clash Verge proxy and direct/LAN without restarting, driven from a top-right status pill, the network_mode agent tool and the /net command.
需注意warn0/4/260/02026-10-10 12:15
@YubaiLoving/dsh-followup-suggestions
Follow-up suggestion chips under a DSH session's last completed reply, generated with that session's own selected model.
低风险pass0/0/20/02026-10-10 12:15
@jiang-yang/dsh-ai-worker
需注意warn1/0/70/02026-10-10 12:15
@casteadelqui/dsh-go
围棋模式 for DSH — a playable Go (Weiqi/Baduk) board tab, complete rules engine, five AI levels, and a tutor that plays with you.
需注意warn0/2/80/02026-10-10 12:15
@loyalchiiina/dsh-archive-favorites-forge
Favorites, copy id+path, per-session delete, idle batch archive and a favourites filter for DSH conversations — additive slot extensions over the shipped archive feature, editing no official file. 为 DSH 对话增加收藏、复制 ID+路径、单条删除、超时批量归档与收藏筛选。
需注意warn0/4/70/02026-10-10 12:15
@czpGhost/dsh-glm-web-search
Z.AI (GLM) web search, web reader and vision for DSH, authenticated by a Z.AI email (OAuth) login instead of an API key
需注意warn0/1/60/02026-10-10 12:15
@Herbert-wang820/dsh-image
需注意warn0/2/40/02026-10-10 12:15
@ysefu/dsh-sidebar-tags
Colored session tags for the DSH sidebar - tag a session from its row, see it at a glance, and filter history by tag.
需注意warn0/5/200/02026-10-10 12:15
@CyberQin/dsh-ohos-shell
低风险pass0/0/60/02026-10-10 12:15
@rayyugz/dsh-plugin-hunyuan-image
Native DSH plugin for Tencent Hunyuan image generation. v1.0: two models (Hy-Image-3.5-preview up to 4K / 3.0), official resolution × aspect-ratio picker, batch 1/2/4, local gallery with search + regenerate, custom output folder, official advanced parameters, model-callable tool. Zero native deps; macOS/Windows/Linux. Docs in 8 languages.
需注意warn0/2/60/02026-10-10 12:15
@MoruTeaven/dsh-model-quickslots
在 DSH 输入框上方添加一排模型快捷切换按钮:左键切换模型,右键编辑预设,支持自定义备注
低风险pass0/0/20/02026-10-10 12:15
@YubaiLoving/dsh-pinned-session-bar
A DSH Web GUI client plugin: a dedicated Pinned bar above the sidebar workspace list, collecting every pinned session with cross-container drag and drop.
低风险pass0/0/30/02026-10-10 12:15
@tuanzi0v0/dsh-search-picture
一款用于DSH的插件,可以直接使用DSH搜索并下载图片
低风险pass0/0/60/02026-10-10 12:15
@godlike985/dsh-sidebar-editor
在 DSH 右侧栏预览代码文件、按名字搜索工作区文件,并把选中行一键引用进对话框 | Preview code files in the DSH sidebar, search workspace files by name, and reference the selected lines into the composer
低风险pass0/0/40/02026-10-10 12:15
@baigei0710/dsh-remote-frp
Remote access for the DSH Web GUI via your own cloud server: frp reverse tunnel managed as a macOS LaunchAgent, plus the server-side setup script.
需注意warn0/15/140/02026-10-10 12:15
@YSwo-fei/dsh-api-heal
DSH 插件:界面报「API 密钥无效」时,自动定位并续期真正失效的那条凭据链(qoder / workbuddy-ai / our-free-model),然后重发请求。Self-healing credentials for DSH.
需注意warn0/2/90/02026-10-10 12:15
@was35/dsh-reclaim
审计并安全回收 DSH 占用的空间:看清会话、附件与缓存各占多少、还被谁引用,清理一律进可恢复的隔离区(DSH 插件)
需注意warn0/5/40/02026-10-10 12:15
@JianHeShui/dsh-desktop-glass
Frosted-glass look for the DSH desktop app (translucent page + Windows acrylic window material)
低风险pass0/0/20/02026-10-10 12:15
@LUDIWUSI12138/dsh-rewind
Rewind a DSH session to before a turn you already sent.
低风险pass0/0/90/02026-10-10 12:15
@mirelconstantin/dsh-ponytail-sync
Ponytail lazy-senior-dev mode as a native DSH skill, system-prompt section and six slash commands. Always available, level-switchable, no external process.
低风险pass0/0/30/02026-10-10 12:15
@Charaaah/dsh-web-api-balance
DSH Web 插件:输入框旁常驻显示 DeepSeek API 余额;悬停展开左栏账户余额、右栏本次对话消耗(缓存命中/未命中/输出分档,峰谷自动判断),胶囊右半滑出可充值。
低风险pass0/0/60/02026-10-10 12:15

静态启发式扫描 + 语义清单审计,非完整安全审计;不执行代码、不解析依赖。风险等级映射与站点一致:secrets/外泄/破坏性/挖矿类 critical 为"严重",其余 critical 级与警告归入"需注意"(medium)。

历史日报归档

56 期
2026-10-110 新增0 严重0 需注意2026-10-10当前104 新增0 严重40 需注意2026-10-098 新增0 严重1 需注意2026-10-08100 新增0 严重39 需注意2026-10-070 新增0 严重0 需注意2026-10-060 新增0 严重0 需注意2026-10-050 新增0 严重0 需注意2026-10-0472 新增0 严重30 需注意2026-10-0388 新增0 严重36 需注意2026-10-0299 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
← 返回安全报告

这份日报覆盖什么?

这份日报覆盖 2026-10-10 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。

风险等级是如何划分的?

风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”,其余 critical 判为“高风险”;medium 与 low 分别表示需要关注和当前无发现。

为什么这不是完整安全审计?

日报是静态启发式扫描加 manifest 审计,不执行代码,也不解析依赖,因此不能证明插件绝对安全。请用它来优先安排检查,而不是替代检查。

来源:dsh.so 安全标准 · 由 dsh.so 维护 · 发布于

这页有帮助吗?