每日安全扫描日报
日期 · 2026-10-15 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
静态扫描 · 当日新增
规则启发式 · 只判断形态1
严重
5
高
42
中
62
低
按扫描终判归类：critical 命中 → 严重；warning/非阻断 critical → 高 / 中；无命中 → 低。
动态审计 · 当日新增子集
模型读源码上下文 · 不执行代码0
严重
0
高
5
中
6
低
只审计静态判定 ≥ warn 的条目；档位取该插件最高级别发现。当日 110 个新增中 99 个未进队列或暂无结论。
| 插件 | 静态扫描 | 动态审计 | 静态发现 C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @qqmqq/dsh-live2d-pet Live2D 桌宠挂件 for DSH Web: 可拖动吸附/滚轮缩放/待机呼吸眨眼, 单击显示 DeepSeek 余额 | 中 | 未审计 / 无结论 | 0/4/12 | 0/0 | 2026-10-15 00:16 |
| @WangDouble-Dev/procuremate 开源采购助手插件，为 DSH 提供 Excel 需求导入、询价文本生成、供货商管理、询价进度标记与采购提醒。 | 高 | 中 | 1/4/10 | 0/0 | 2026-10-15 00:16 |
| @lb290/dsh-db-connections Named database connections for DSH - configure MySQL in a settings page, then refer to them by name in chat. Read-only by default, writes opt-in per connection. | 中 | 未审计 / 无结论 | 0/1/7 | 0/0 | 2026-10-15 02:15 |
| @NeoHotaru/dsh-read-animation DSH plugin: a pasted animated GIF or WebP keeps playing in the UI, and the model receives a labelled sheet of frames sampled across the animation. | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 02:15 |
| @jiangluoyiyi/dsh-quota-pill DSH plugin: DeepSeek account balance and per-Session spend in the composer dock | 高 | 低 | 1/0/0 | 0/0 | 2026-10-15 02:15 |
| @The-Data-Galaxy/dsh-dpia-workbench A versioned DPIA workbench for DSH: trace facts, resolve gaps, reassess risks, and produce reviewable reports. | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 02:15 |
| @23bear/dsh-plugin-qq-bot QQ 官方机器人通道插件 for DSH — talk to your DSH sessions from QQ groups and private chats. | 低 | 未审计 / 无结论 | 0/0/5 | 0/0 | 2026-10-15 04:17 |
| @mengwEX/dsh-block-ptc Model-controlled context blocks for DSH PTC mode | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 04:17 |
| @youran0faust/dsh-cache-report See what ate your prompt cache. Hit-rate & tool-block cost report for DSH — zero deps, registers no tools. | 中 | 未审计 / 无结论 | 0/1/4 | 0/0 | 2026-10-15 04:17 |
| @beex-labs/dsh-knowledge Give your AI a project memory: /init makes it read the codebase and write .dsh docs, then every later turn gets them injected back automatically. | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 04:17 |
| @cander0815/dsh-computer-mcp 通过 MCP 让 DSH 操作另一台电脑：文件读写、搜索、编辑、回收与可选命令执行，支持 Windows/macOS 和内网/Tailscale。 | 低 | 未审计 / 无结论 | 0/0/4 | 0/0 | 2026-10-15 04:17 |
| @funswe/dsh-resizable-settings | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 04:17 |
| @eeFrank123/dsh-snowflake-shutdown Snowflake shutdown button for DSH - desktop-fixed fork of dsh-shutdown-after-task: auto shutdown after tasks complete, cancellable countdown. | 中 | 未审计 / 无结论 | 0/1/6 | 0/0 | 2026-10-15 04:17 |
| @Fleey/deepseek-harness-acp DSH 桌面插件：用 ACP（Agent Client Protocol）把 Codex、Claude Code 等外部 Agent 注册成模型提供方 | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-skill-commands Smarter slash-command matching for skills: suffix, contains and alias matching (e.g. /studio finds autonomous-studio). | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 06:16 |
| @xiray-xia/dsh-remote-vs VSCode-style remote SSH development for DSH: host manager, helper deploy pipeline, remote files/terminal/git, transparent remote execution. | 严重 | 低 | 2/1/1 | 0/0 | 2026-10-15 06:16 |
| @rumilhz/dsh-pylon-workbuddy DSH plugin: supervise a workbuddy2api gateway and register its models as an editable LLM provider. Self-hosted, no upstream wrapping. | 中 | 未审计 / 无结论 | 0/1/7 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-super-injector Runtime plugin injector: inject, hot-reload and uninstall local plugin packages in a running dsh without restarts, with plugin scaffolding, self-test and a management panel. | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-en2zh Live English-to-Chinese translation of model output in the web UI - translation above, original kept aside - with an optional local MT engine and LLM fallback. | 低 | 未审计 / 无结论 | 0/0/10 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-web-search-duck Web search provider that bridges an OpenAI Responses-API-compatible endpoint with the web_search_preview tool into the dsh web seam. | 低 | 未审计 / 无结论 | 0/0/4 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-web-search-bing Keyless Bing HTML search provider plus a relay-aware fetch provider with per-hop redirect validation for the dsh web seam. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 06:16 |
| @07210905/crop-zoom Makes small text in a screenshot readable before a model reads it: crop a region, magnify it with a chosen kernel, hand back a new image. DSH plugin + standalone CLI. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-harness-suite Session hygiene suite: strips leaked thinking tags, adds retry cooldown budgets, blocks plaintext credentials before execution, runs a daily health-check loop with a health panel, and auto-tunes agent instruction hints from error statistics. | 中 | 未审计 / 无结论 | 0/1/3 | 0/0 | 2026-10-15 06:16 |
| @FideFeiPlane/dsh-auto-maximize DSH 桌面版插件：启动自动最大化主窗口（等同于手动点击最大化按钮） | DSH Desktop Plugin: Auto‑maximize main window on launch (same as clicking the Maximize button manually) | 中 | 未审计 / 无结论 | 0/2/0 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-stream-index-guard Patches the LLM assistant-stream accumulator at runtime to clamp invalid chunk indices, downgrading hard stream failures to dropped or merged chunks; ships a stats tool. | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-guild-bridge Bridges a guild expert-team board into dsh: routes guild tasks to one-shot dsh subagents, visible in the GUI. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-approval-watch Floating overlay that surfaces pending approvals, plan reviews and user questions from any session, with click-through to the session. | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 06:16 |
| @CH3SH-LC/dsh-better-wechat 本地优先的微信消息整理助手：把电脑微信聊天变成可检索、可筛选、可追溯的私人消息工作台，免打扰群一键忽略，聊天内容不出本机。 | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 06:16 |
| @r-ayin/dsh-context-budget Ports the Codex CLI TokenBudget mechanism to dsh: remaining-context awareness, archive rollover, and notes/history retrieval tools for past sessions. | 中 | 未审计 / 无结论 | 0/3/0 | 0/0 | 2026-10-15 06:16 |
| @neil-ji/dsh-plugin-sidebar-tabs Browser-style tab management for the DSH right sidebar: batch close, float/dock, reopen closed tabs, and a tab overview panel. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 06:16 |
| @panqing0313/dsh-plugin-weixin 微信（iLink）通道插件：在微信里给 DSH Agent 发消息，在本机跑会话并把回复发回微信。Text, images, files and voice notes. | 中 | 未审计 / 无结论 | 0/5/7 | 0/0 | 2026-10-15 06:16 |
| @mqnu00/dsh-undici-timeout A configurable direct channel for the DSH LLM egress: a keep-alive undici Agent with adjustable connect/headers/body/keep-alive timeouts, IPv4-forcing, HTTP/2 off by default, automatic stand-down behind a proxy, and a read-only status route. A minimal patch, one file, zero dependencies. | 中 | 未审计 / 无结论 | 0/4/10 | 0/0 | 2026-10-15 08:16 |
| @po-et/dsh-har-triage Offline HAR diagnostics with minimal evidence for DSH | 中 | 未审计 / 无结论 | 0/1/1 | 0/0 | 2026-10-15 08:16 |
| @juanbaiing/dsh-alert-inject 给 DSH agent 一个"回答前会出声"的机制：目标锚点、似曾相识检索、重复检测、引用核对、按语境分块的警报判据。零第三方依赖，核心不调 LLM。 | 中 | 未审计 / 无结论 | 0/4/24 | 0/0 | 2026-10-15 08:16 |
| @coolwyz/dsh-skill-map DSH skill map: browse every loaded skill through your own categories in a right-sidebar tab. | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 08:16 |
| @foreee/dsh-app-restart DSH desktop plugin: restart the whole application from Settings (graceful quit + automatic relaunch) | 中 | 未审计 / 无结论 | 0/3/2 | 0/0 | 2026-10-15 08:16 |
| @kang200862/dsh-firefly-spring-skin DSH 的流萤「春日手信」主题皮肤样板 · Firefly 'Spring Missive' theme skin for the DSH web GUI | 中 | 未审计 / 无结论 | 0/1/6 | 0/0 | 2026-10-15 08:16 |
| @diwer/dsh-codex-adapter ChatGPT subscription / GPT provider for DSH desktop: image input, host tools and DeepSeek/GPT switching. Harness 桌面版 ChatGPT 订阅适配器，支持图片、工具调用和模型切换。Community MIT plugin. | 低 | 未审计 / 无结论 | 0/0/5 | 0/0 | 2026-10-15 08:16 |
| @chenyifawan-cell/dsh-litellm-extra-headers DSH plugin: inject a body-level extra_headers entry into OpenAI-compatible chat/completions requests for listed providers and upstream hosts (the only injection point that survives a LiteLLM relay). | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 08:16 |
| @stefanydevitoqz-creatorPPP/dsh-edit-resend DSH plugin: edit an already-sent user prompt and resend it - forks a child session whose inherited prefix stops just before that message. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 08:16 |
| @xt765/dsh-milestone-guard Milestone progress soft-enforcement guard plugin for DSH (阶段性结论软强制守卫插件) | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 08:16 |
| @swdwm5nr4k-sketch/dsh-netflow-dock DSH 服务器流量监测插件：宿主半边采样 /proc/net/dev，浏览器半边在输入框下方显示实时上下行速率。 | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 08:16 |
| @yidao2000/dsh-local-background dsh用本地图片做背景图 | 低 | 未审计 / 无结论 | 0/0/6 | 0/0 | 2026-10-15 08:16 |
| @chimneyQ/dsh-model-rotator Model auto-ranking and transparent failover for DSH: ranks discovered models and switches to the next candidate when the current one fails with no output. | 中 | 未审计 / 无结论 | 0/1/5 | 0/0 | 2026-10-15 08:16 |
| @molanxuan-del/DSH-MOTU 墨图 MoTu — 把对话里的代码块渲染成真正的图。DSH 可视化套件：Mermaid / Graphviz / nomnoml / ECharts（含交互）/ Vega-Lite / 手写 SVG，六引擎本地伺服、离线可用、完整性校验。 | 中 | 未审计 / 无结论 | 0/1/8 | 0/0 | 2026-10-15 08:16 |
| @Seren-715/dsh-token-heatmap A daily Token-usage heatmap for the DSH settings page. Aggregated entirely from local session logs; no external requests and no separate usage ledger. ｜ DSH 设置中的每日 Token 用量热力图，数据完全取自本机会话日志，不发起外部请求，亦无需另行记录用量。 | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 10:17 |
| @HumXC/dsh-nestquay Workspace groups for the DSH sidebar | 低 | 未审计 / 无结论 | 0/0/5 | 0/0 | 2026-10-15 10:17 |
| @GuanYang14700/dsh-hermes-panel Hermes in the DSH sidebar: gateway + dashboard control, Hermes own health report, and the DSH <-> Hermes bridge. Generated mirror of plugins/hermes-panel - do not edit here. | 中 | 低 | 0/17/27 | 0/0 | 2026-10-15 10:17 |
| @RaganaBloodedge/dsh-lmmarr DSH 长期记忆插件：分层任务记忆 + 关系图谱 + 索引常驻稳定前缀；零运行时依赖，另附同源的 Agent skill 形态 | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 10:17 |
| @dingchenhui0618-arch/dsh-turing-table 图灵圆桌：若干座位由不同模型配置的 agent 扮演，靠提问与交叉印证找出哪些座位是 AI，每局导出逐席位对话 JSONL 与判定记录 | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 10:17 |
| @Joe-0202/dsh-archive-manager DSH 归档管理插件：双 Tab 面板管理已归档会话，支持归档/取消归档/彻底删除 | 低 | 未审计 / 无结论 | 0/0/4 | 0/0 | 2026-10-15 10:17 |
| @bbskye5008/dsh-task-runner DSH task launcher combining PUA and Completion Guard with frozen acceptance, candidate-bound certificates, and an 8-round / 90-minute cap. | 中 | 未审计 / 无结论 | 0/3/4 | 0/0 | 2026-10-15 10:17 |
| @Wanyi424/dsh-markdown-notes DSH 桌面端 Markdown 笔记插件：本地保存、公式与图表、拖拽导入和目录迁移。 | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 10:17 |
| @dingchenhui0618-arch/dsh-doudizhu Three-player LAN Doudizhu as a DSH floating-window plugin: 54 cards, bidding for landlord, clockwise play and landlord rotation. | 中 | 未审计 / 无结论 | 0/5/24 | 0/0 | 2026-10-15 10:17 |
| @F1yBear/dsh-open-workspace-any-app dsh,支持自定义应用打开工作区 | 中 | 未审计 / 无结论 | 0/3/4 | 0/0 | 2026-10-15 10:17 |
| @dingchenhui0618-arch/dsh-launch-card 发布卡片：从本地仓库真实产物生成 hero 图、特性网格与双语文案，导出前 lint 掉无法证实的说法 | 低 | 未审计 / 无结论 | 0/0/8 | 0/0 | 2026-10-15 10:17 |
| @liuhaolong16/dsh-quote-reply Quote reply layer for DSH: quote a passage into an editable tray above the composer; it rides into the next turn as model context (never into the message body) and shows as an expandable row under that turn. 引用回复层：选中一段进引用行，随下一回合作为上下文注入模型（不进消息正文），回合尾部显示可展开的引用(N)。 | 高 | 中 | 2/4/9 | 0/0 | 2026-10-15 10:17 |
| @liuhaolong16/dsh-hot-refresh One-click hot refresh for DSH client plugins: detect which plugin bundles changed and reload only those; guard whole-graph reloads behind an explicit flag; expose replay counters. 面板一键热刷新：只重载变化的那几个插件，整图重载需显式确认。 | 高 | 中 | 1/3/7 | 0/0 | 2026-10-15 10:17 |
| @fegnze/dsh-browser-computer 让 DSH 直接操作浏览器与电脑：以插件形式装配 playwright-mcp 与 peekaboo-mcp，附一键依赖安装、macOS 系统权限引导与 MCP 连接自检。 | 中 | 未审计 / 无结论 | 0/2/5 | 0/0 | 2026-10-15 12:15 |
| @youchai2016/dsh-plugin-auto-compact 上下文占用达到 50% 时自动压缩（DSH 插件）。Auto-compact a DSH session at 50% context usage. | 低 | 未审计 / 无结论 | 0/0/6 | 0/0 | 2026-10-15 12:15 |
| @Maple-Yoli/dsh-notice-card Focus-free notification cards for DSH on Windows: turn finished, approval pending, question pending. | 中 | 未审计 / 无结论 | 0/2/1 | 0/0 | 2026-10-15 12:15 |
| @Vincent-chk/dsh-plugin-auxiliary-chat Sidebar auxiliary chat for DSH: right-column panel hosting temporary auxiliary sessions that one-way mirror the main session's context and are deleted when closed · DSH 侧边栏辅助会话插件 | 低 | 未审计 / 无结论 | 0/0/5 | 0/0 | 2026-10-15 12:15 |
| @YunLiZeMeng/dsh-window-control | 中 | 未审计 / 无结论 | 0/3/9 | 0/0 | 2026-10-15 12:15 |
| @JunYingLingLan/dsh-sylphiette-agent 希露菲（Sylphiette）· DSH 角色扮演预设：中文人设 + 453 条六面世界设定按需注入 | 中 | 未审计 / 无结论 | 0/3/3 | 0/0 | 2026-10-15 12:15 |
| @kissfirembx/dsh-skill-map DSH skill map: browse every loaded skill through your own categories in a right-sidebar tab. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 12:15 |
| @LightingHa/dsh-cc-switch 把 cc-switch 配置的模型供应商接入 DSH（转成 llm-pi-ai 路由，附连通性体检） | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 12:15 |
| @YUYU276/dsh-blue-whale-balance DSH 插件｜DeepSeek 余额动画桌宠：余额卡片、逐密钥观测账目、历史趋势与低余额提醒 | 低 | 未审计 / 无结论 | 0/0/8 | 0/0 | 2026-10-15 12:15 |
| @HelloQingTao/dsh-railist Unified rail for the DSH sidebar: sort the top panels and the bottom actions as one list. / DSH 左侧栏统一排序插件：顶部面板与底部动作混排成同一条序列。 | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 12:15 |
| @windrover/dsh-prompt-optimizer Prompt optimizer for DSH: rewrite the conversation input draft in place with 15 templates (basic / context / image). 0.2.0-rc.2 adaptation of zhang-jiazhi/dsh-prompt-optimizer, which ports linshenkx/prompt-optimizer. | 低 | 未审计 / 无结论 | 0/0/6 | 0/0 | 2026-10-15 12:15 |
| @HanMaXiao/dsh-hub A floating TODO, Note and Prompt panel for the DSH harness — three tabs, full CRUD, edge docking, grid and list views. | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 12:15 |
| @Lumos0121/dsh-deepseek-chat DSH Desktop sidebar plugin: open chat.deepseek.com in the right sidebar or the system browser, read the conversation back into the current session, and edit its own hover texts. 91 offline tests. | 中 | 未审计 / 无结论 | 0/2/5 | 0/0 | 2026-10-15 12:15 |
| @lucas07814-hub/dsh-pet-guardian-dragon An AI-agent-assisted DSH desktop pet plugin, built as a personal learning project for development, debugging, and open-source sharing. | 低 | 未审计 / 无结论 | 0/0/8 | 0/0 | 2026-10-15 12:15 |
| @wei125775-lab/dsh-whale-run dsh-whale-run — a hidden mini-game plugin for DSH desktop. 把 dsh 界面上那只鲸鱼摘下来，放到输入框上方的跑道上跑一局。 | 中 | 未审计 / 无结论 | 0/1/3 | 0/0 | 2026-10-15 12:15 |
| @DriverWangNB/dsh-model-manager 控制dsh会话界面显示的模型 | 中 | 未审计 / 无结论 | 0/1/3 | 0/0 | 2026-10-15 14:16 |
| @xinyang20/dsh-campus-seu 东南大学校园主题插件：校园配色、九龙湖与四牌楼风景、可选叮东，适配 DSH Web。 | 中 | 未审计 / 无结论 | 0/1/5 | 0/0 | 2026-10-15 14:16 |
| @theroi/dsh-bg-panel DSH 个性化插件：自定义背景 + 半透明玻璃 + 主题色 | 中 | 中 | 0/5/6 | 0/0 | 2026-10-15 14:16 |
| @ygnstudio/dsh-plugin-session-cost DSH 会话费用估算、账号余额与额度监控插件 | 中 | 未审计 / 无结论 | 0/1/7 | 0/0 | 2026-10-15 14:16 |
| @youchai2016/dsh-plugin-token-bucket 余额水桶：水位就是你的 DeepSeek API 余额，出水口流出的是正在花的钱。A bucket that drains while your DeepSeek API balance is being spent (DSH plugin). | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 14:16 |
| @henrikdukefoss/dsh-standardcompute Standard Compute provider for DSH: OpenAI-compatible route with a cost router and direct model pins | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 14:16 |
| @DDDMUC/dsh-preset-workbench 在 DSH设置页里创建/编辑 agent 预设的可视化工作台：分段提示词 + 能力开关 + 内置模板。A visual agent-preset workbench for DSH. | 高 | 低 | 1/7/7 | 1/7 | 2026-10-15 14:16 |
| @R1145141919810/dsh-vulnclaw-pentest VulnClaw penetration-testing mode for the DSH: nmap, HTTP probing, directory/JS recon, traffic evidence, reports and PoCs as native Harness tools. Based on VulnClaw (MIT) by UncleC. | 中 | 中 | 0/6/23 | 0/0 | 2026-10-15 14:16 |
| @jonah791/dsh-agent-quant-cn | 中 | 未审计 / 无结论 | 0/2/1 | 0/0 | 2026-10-15 14:16 |
| @var-lin/dsh-plugin-layout-organizer dsh插件，整理dsh里插件按钮的布局 | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 14:16 |
| @taxueseek/dsh-models 模型选择 · 子代理路由 · 推理层级 — DSH Web GUI 的三分区模型菜单插件 | 中 | 低 | 0/1/6 | 0/0 | 2026-10-15 14:16 |
| @jonah791/dsh-agent-reconstruction | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 14:16 |
| @ygnstudio/dsh-plugin-title-oil DSH 会话自动命名插件：类别 emoji + 对象｜目标 | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 14:16 |
| @Makk9609/dsh-find-viewer Find bar for DSH sidebar text previews: whole-file match count, highlighted hits, and jumps. | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 14:16 |
| @oliblue-evan/dsh-peakclock 峰谷倒计时：在 DSH 模型名称中显示 DeepSeek 峰谷状态与倒计时，支持实时预览与紧凑设置。 | 中 | 未审计 / 无结论 | 0/3/8 | 0/0 | 2026-10-15 14:16 |
| @InoriMutsumi/dsh-grill-first | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 14:16 |
| @nvjaasouid/dsh-pending-session DSH 插件：未发送的会话草稿留在侧边栏标为「待执行」，可随时修改发送删除。删除不可恢复。 | 低 | 未审计 / 无结论 | 0/0/6 | 0/0 | 2026-10-15 14:16 |
| @blacktaoK/dsh-skill-zh-overlay 给 dsh-skill-mcp-panel 的技能卡片加中文说明浮层，中英对照，9 个技能已收录。 | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 16:22 |
| @yutao8/dsh-custom-style 给 DSH 注入你自己的 CSS：在设置界面里新增的「自定义样式」一栏直接编辑样式文件，即可调整弹窗宽度、导航宽度、字号与内容居中；约两秒生效，不改应用本体、无需重启。 ｜ Inject custom CSS into the DSH GUI from a new Custom CSS section in Settings — dialog width, nav width, font size and content centering; applied in about two seconds, no app patching or restart. | 中 | 未审计 / 无结论 | 0/4/12 | 0/0 | 2026-10-15 16:22 |
| @wmk66ds/dsh-vision-unlock 去掉 DSH「当前模型不支持图片」的拒绝限制：不改 app.asar，用运行时接缝放行未声明多模态能力的模型 | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 16:22 |
| @puyokura/dsh-1tempo DSH plugin: convert a request into MiL with Sarashina, review it, then hand it to the model dsh is running (TUI and Web UI) | 低 | 未审计 / 无结论 | 0/0/4 | 0/0 | 2026-10-15 16:22 |
| @mimetics-ai/mimetics-dsh-weekly-report DSH 工具插件：一句「帮我生成本周周报」即得固定四模块 Markdown 周报；内置流水线，装上即用。 | 中 | 未审计 / 无结论 | 0/4/6 | 0/0 | 2026-10-15 16:22 |
| @yusunz/dsh-plugin-noworkspace-session Adds sessions without a workspace to DSH | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 16:22 |
| @ztl0001/dsh-notify Windows notifications when a DSH task finishes | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 16:22 |
| @lishuo4096/dsh-wch-debug Drive WCH CH32 microcontrollers from the CLI through an isolated private copy of WCH's OpenOCD plus WCH-Link. DSH plugin: 20 tools + an agent skill. MIT. | 中 | 未审计 / 无结论 | 0/3/9 | 0/0 | 2026-10-15 16:22 |
| @jonah791/dsh-session-handoff | 低 | 未审计 / 无结论 | 0/0/1 | 0/0 | 2026-10-15 16:22 |
| @BoxMiao007/dsharbor 一个 DSH Web 的轻量启动器 | 中 | 低 | 0/8/12 | 0/0 | 2026-10-15 16:22 |
| @Elysia126/dsh-video-grab | 中 | 未审计 / 无结论 | 0/4/4 | 0/0 | 2026-10-15 16:22 |
| @shuang-ying/dsh-ThirdApi-ThinkingMode "DSH bundle that syncs per-model thinking levels from each endpoint's own model listing | 低 | 未审计 / 无结论 | 0/0/11 | 0/0 | 2026-10-15 16:22 |
| @immortal-akx/dsh-session-tool | 低 | 未审计 / 无结论 | 0/0/4 | 0/0 | 2026-10-15 16:22 |
| @fffcodefox/dsh-opencode-doctor Availability-probed OpenCode Go / Zen model routes for DSH — ships an availability-annotated catalog so you can see which models actually work (region blocks, empty balance, client-only free tiers) before you pick one. | 中 | 未审计 / 无结论 | 0/3/11 | 0/0 | 2026-10-15 16:22 |
| @reaxlll/dsh-workspace-memory DSH工作区内跨会话记忆插件 | 低 | 未审计 / 无结论 | 0/0/2 | 0/0 | 2026-10-15 16:22 |
| @tomandpotato/dsh-chess-board 在 DSH右侧边栏里下国际象棋：完整规则、八档内置对手、lichess 云端评估 / 复盘 / 战术题，中英双语。· A chess tab for DSH: full rules, built-in opponent, lichess eval, review and puzzles. | 中 | 未审计 / 无结论 | 0/3/14 | 0/0 | 2026-10-15 16:22 |
| @ShirohaChan/dsh-session-artifacts Delete a DSH session together with the workspace artifacts that session produced - the file list is reconstructed from the session log and previewed with its total size. The artifacts can also be deleted on their own, keeping the conversation. | 低 | 未审计 / 无结论 | 0/0/3 | 0/0 | 2026-10-15 16:22 |
| @lishuo4096/dsh-mcu-debug DSH 插件：STM32 / PY32 调试与烧录（CMSIS-DAP / DAPLink / openocd）+ 串口收发。内置独立 openocd 副本，不碰你的 IDE 树。 | 低 | 未审计 / 无结论 | 0/0/0 | 0/0 | 2026-10-15 16:22 |
| @shellexy/dsh-manuscript 稿本：给 DSH 补上回答署名、修订分支与常驻大纲侧栏 | 低 | 未审计 / 无结论 | 0/0/5 | 0/0 | 2026-10-15 16:22 |
| @Salty-Mocha/dsh-ops-mac macOS (Apple Silicon) port of dsh-ops — Rust-powered file tools & PTC batching for DSH. Ported from T-Auto/dsh-ops. | 中 | 未审计 / 无结论 | 0/1/2 | 0/0 | 2026-10-15 16:22 |
全站融合档位
静态 + vet 融合后并入动态审计上调（只升不降）；四档合计 23166 个条目
266
严重
0
高
195
中
22354
低
严重档位插件清单（266）
claude-paperdsh-sentineldsh-review-loopdeepseek-harness-fnosdsh-for-vscpi-mm-visiondsh-plugin-verifyds-web-uideepseek-harness-desktop-7dsh-plugin-managerdsh-fffdeepseek-harness-pluginsdsh-desktop-pet-2dsh-science-workbenchdsh-lan-2dsh-workshopdeepseekharnessremotegatewaydsh-lorebookmddsh-plugin-market-5dsh-file-paneldsh-np-pptdeepseek-harness-android-appdsh-web-remotedsh-self-harness-toolsdsh-change-reviewdsh-hotswapmakocodedsh-skill-mcp-paneldsh-tavern-2dsh-mc-agentdsh-webdsh-doctor-4dsh-design-studiodsh-tailscale-consoledhs-theme-plugindeepseek-harness-moltdsh-command-check-updatedsh-auth-gatedsh-silly-pluginopendshdsh-tool-code-reviewdsh-task-consoledsh-agent-eval-2deepseek-harness-plugins-3dsher-bbs-plugindeepseek-harness-plugs-managedsh-dev-serverdsh-about-updaterdsh-toolbox-webdsh-remote-publicdsh-notifier-2dsh-plugin-containerdsh-desktop-huacaideepseek-herness-desktoppaperlabchromex-browserdsh-github-tooldsh-lan-access-3dsh-custom-uidsh-pet-6desk-harnessdsh-plugin-larkdsh-webgatedsh-tavern-3dsh-anchored-monitordsh-neutrinoliving-dream-dshdsh-comfyuidsh-desktop-68dsh-wechatclawbotorbit-dsh-plugindsh-perm-guarddsh-cc-pluginsdsh-tool-generate-imagedsh-routed-subagentdsh-swarmdsh-nuphus-mcpdsh-lark-alldsh-ide-panelschat-deepseek-visiondeepseek-harness-liquid-glass-themedshscandsh-pwsh-directdsh-capcheckdsh-minecraft-themedsh-plugin-market-20dsh-diffgeomdsh-remote-7dsh-logcatdsh-ide-bridgedsh-mail-connectordsh-fleetdsh-desktop-tools-2dsh-usage-6dsh-mobilesharedsh-plugin-market-22dsh-profile-porttavern-launcherdsh-file-linkspdfreaderdsh-publish-plugindsh-workshop-3dsh-qq-remotedsh-settings-prodsh-github-pushdsh-web-remote-frpdsh-pentesterdsh-tool-lensdsh-testsuitecodereaderdsh-webroadweave-for-dshdsh-tool-git-3dsh-memory-eternaldsh-capability-managerdsh-arbitrary-hostdsh-plugins-76dsh-storedsh-lanchatdsh-k8sdsh-worktabledsh-tts-playerdsh-agent-browser-2dsh-image-readdsh-stats-expanddsh-usage-stats-11dsh-input-enhancementdsh-safe-launchdsh-balance-plugin-6atri-for-dshconvoportdsh-experience-librarydeepseek-harness-desktop-54dsh-relay-2dscoderdsh-inline-images-2dsh-community-plugins-2dsh-process-boarddsh-rtk-toolsdsh-plugin-offline-packagerdsh-asset-managerdsh-vsceditordsh-suhuang-scrolldsh-free-models-hubdsh-freeroutedsh-bg-plugindsh-sandbox-permissions-not-strictly-wider-justification-empty-fixdsh-applauncherdsh-public-accessdshessentialtoolsdsh-qrcode-hassle-freedsh-call-shrinkdsh-automation-3dsh-skill-hub-3dsh-desktop-102dsh-kit-4dsh-plugin-ollama-monitordsh-smart-reminderdsh-plugins-94dsh-4-role-workflowdsh-raw-html-v2dsh-gbdsh-git-review-2dsh-plugin-canvas-prodsh-search-prodsh-git-9dsh-tmwebdriverdsh-fleet-2dsh-cc-backupdsh-token-pulsephone-tunnel-poolsee-the-screendeepseek-harness-minimal-omnidsh-plugin-forge-5dsh-session-progressdsh-move-ragdsh-cad-viewerdsh-agentic-proxydsh-wechat-bridge-5dsh-windows-remote-sshdsh-remote-file-systemdsh-better-display-2dsh-better-uiuxdsh-default-promptdsh-agent-clusterdsh-sidebar-plusvscode-dsh-sidebardsh-agnes-studiodsh-youdaonotedsh-plugin-repo-snapshotdsh-netease-music-2dsh-lobsterai-daddydsh-cua-previewdsh-buddy-spikedsh-novel-appdsh-desktop-settingsdsh-zcode-connectoranoslide-pluginsdsh-destinywind-tpmdsh-wakervoice-inputdsh-draw-plugindsh-ipynb-previewdsh-ask-formdsh-remote-access-cidrdsh-genbox-plugindsh-wsl-projectsdsh-mcp-unified-paneldsh-archive-keeper-plugindsh-nutstore-backupdsh-kp-notesdsh-flow-3dsh-aocidsh-service-boardcad-ppt-skillsdsh-wbdsh-web-appdsh-text-explaindsh-ledger-memorydsh-artcraftdsh-remote-13zadloop-ultimate-toolkitdsh-ai-balldsh-mcp-manager-19dsh-deploy-webdsh-plugin-cdpdsh-upgrade-2dsh-envkitdsh-desktop-app-4dsh-pwa-launcherdsh-steal-codedsh-tools-5dsh-helper-plugin-workspace-browserdsh-console-plugindsh-olivia-bridgedsh-obsidian-sync-2dsh-git-serverdsh-android-scrcpyzcode-dispatchdsh-armor-switchdsh-tool-suitepi-control-chromedsh-skill-market-4dsh-chatsyncdsh-liquid-glass-theme-2dsh-remote-guidsh-plugins-151dsh-plugin-30dsh-skill-creator-5dsh-xl-free-modeldsh-browser-agent-4dsh-plugin-market-30dsh-maplestory-wzdsh-tool-mathfigdsh-phone-bridge-3dsh-latex-studiodsh-6dsh-brand-textmindie-agent-dshdsh-bili-scroll-2wa-agentdsh-opencode-free-3dsh-phone-remote-2dsh-android-phonedsh-dispatch-2dsh-pocket-oauth
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。动态审计的档位来自模型对源码上下文的判断（最高级别发现），不构成豁免。
历史日报归档
66 期2026-10-21220 新增0 严重69 需注意2026-10-200 新增0 严重0 需注意2026-10-190 新增0 严重0 需注意2026-10-18609 新增1 严重221 需注意2026-10-17306 新增0 严重0 需注意2026-10-160 新增0 严重0 需注意2026-10-15当前110 新增1 严重47 需注意2026-10-1499 新增1 严重33 需注意2026-10-13102 新增1 严重36 需注意2026-10-120 新增0 严重0 需注意2026-10-110 新增0 严重0 需注意2026-10-10104 新增0 严重40 需注意2026-10-098 新增0 严重1 需注意2026-10-08100 新增0 严重39 需注意2026-10-070 新增0 严重0 需注意2026-10-060 新增0 严重0 需注意2026-10-050 新增0 严重0 需注意2026-10-0472 新增0 严重30 需注意2026-10-0388 新增0 严重36 需注意2026-10-0299 新增1 严重47 需注意2026-10-010 新增0 严重0 需注意2026-09-30182 新增3 严重51 需注意2026-09-2969 新增0 严重22 需注意2026-09-2864 新增0 严重23 需注意2026-09-2763 新增0 严重23 需注意2026-09-2684 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-10-15 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
表里的「清单审计」是什么？
这里的清单审计指 vet 引擎对插件 JSON manifest 的语义分析，不是动态安全审计；它读的是安装脚本、生命周期钩子与文件 / 网络权限这类声明层信号。
静态扫描是唯一一层吗？
不是。另有一层模型驱动的动态安全审计：对静态判定已达到需注意及以上的条目读取源码上下文（不执行插件代码）给出结论，只覆盖这一子集而非全库，且只能上调、永不豁免；全站展示的结论取两者中更严的一档（max(静态, 动态)）。本日报反映的是静态那一层。最近一次运行：动态审计记录 1898 条，其中完成模型审计 1767 条；上调 258 条，低于静态判定 0 条。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于