@jieai/dsh-plugin-vet：DSH 插件装前审核与运行时守卫
@jieai/dsh-plugin-vet 是由 wulun811 维护的 MIT 许可工具，专为 DeepSeek-Harness (DSH) 插件生态提供安全审计与运行时监护。鉴于 DSH 插件以进程权限运行，该插件旨在解决装前审计与运行时监控需求，但不提供插件市场或默认拦截处置功能。其核心能力分为两部分：装前审计通过确定性静态扫描生成评分卡，执行供应链检查（如 typosquat、OSV）、检测数据外泄与勒索软件行为，并建立完整性基线；运行期监护则启用 T1 哨兵（监控内存、文件描述符、子进程）及 T2 钩子（拦截文件系统、子进程、网络调用），支持 N7 确认阻塞机制。默认配置为仅报告模
Read More@shaoshi/dshscan: DSH Plugin Security Scanner
@shaoshi/dshscan is a security scanner designed for DSH plugins, addressing the security risks arising from plugins running with the current process privileges. This tool is open-sourced under the MIT license. Its core functionalities include dual-channel scanning (static and semantic), built-in DSH-specific attack surface rules (such as plugin tree injection, malicious browser-side code, etc.), and integration with npm dependency auditing. It supports various input forms, including plugin names, GitHub repositories, local directories, or ZIP packages. The output comprises JSON or HTML reports that include risk scores, severity levels, and security recommendations. The tool features offline static scanning capabilities, offers optional LLM-based semantic analysis, and supports batch scanning, custom rules, policy file configuration, and web dashboard visualization. Additionally, it provides a built-in Benchmark evaluation set to test recall rates and...
Read More