dsh-plugin-dynamic-assembler: Natural Language-Driven Dynamic Assembly and Security Control
`dsh-plugin-dynamic-assembler` is a plugin for DeepSeek Harness designed to enable the "self-assembly" capability of agents. It supports runtime plugin discovery, official-plugin-first matching, and third-party control policies (with ask, allow, or deny options). It provides static security audit tools and requires user confirmation when loading sensitive plugins. After installation, it should be enabled in the configuration file. Through planning, execution, and uninstallation tools, agents can dynamically load or remove plugins based on natural language requirements. Users should be mindful of permission risks and Node.js version requirements when using it.
Read Moredsh-plugin-security-review: Adding a static security review to DSH dynamic plugin installation
`dsh-plugin-security-review` is a DSH plugin security review guard developed by ShanHaiFish, licensed under the MIT license. It performs static source code security reviews on dynamic plugins installed or executed via `cordis_define` and `cordis_run`. The tool provides two core functions, `plugin_security_review` and `plugin_security_audit`, to handle plugin operations based on a four-tier strategy of `BLOCK`, `ASK`, `WARN`, and `ALLOW`. Its main features include browser-side manual approval popups (Approve, Approve + Whitelist, Reject) and the ability to persist code fingerprints after manual approval, allowing subsequent identical fingerprints to be automatically permitted. Furthermore,
Read More