dsh-block-placeholder-edits：拦截占位注释与整文件缩水写入
dsh-block-placeholder-edits 是 acus9345 维护的 DeepSeek Harness 社区插件，在每次 write/edit 落地前检测占位注释（如 // ... existing code ...）及大文件整写后行数骤减的模式，拒绝危险写入并返回问题行与修复建议。支持 web/headless/acp 各 profile 独立安装，可通过侧栏或 cordis.patch.yml 配置 mode、shrinkRatio、ignore 等。MIT 许可，适合智能体频繁改码时降低静默删代码风险。
Read Moredsh-install-review：DSH 插件装前审查
dsh-install-review 是 GIN0076 维护的 DSH 工作流插件，在安装第三方 Cordis 插件前执行 13～14 项只读检查，生成审查报告与可勾选变更方案，先备份 profile 相关文件再安装并做装后核验。支持 npm/GitHub 包标识输入、peer 豁免与换源、构建脚本批准、修订 JSON 导入及中文清单浏览。适配 DSH 0.2.0-rc.2，MIT 许可，零运行时依赖。本文介绍其定位、检查项、安装启用步骤与典型用法，并说明清单收录非安全背书、插件以当前进程权限运行，安装前仍需自行审阅源码与许可证。
Read MoreDSH Plugin Security Audit Tool: TrustLens
TrustLens is a plugin security review tool designed specifically for DSH. It detects common risk patterns in code through static scanning, performs semantic review using the AI model in the current session, and reports documentation conflicts. After installation, users can enter a plugin path in DSH settings to review it and enable it only after confirming it is safe. The tool does not execute the plugin being inspected; it provides only security assessment signals, helping developers reduce security risks before installation.
Read Moredsh-plugin-safety: Plugin Health Alerts and Automatic Repair
The DSH plugin `dsh-plugin-safety` is designed to address failure management issues in the plugin ecosystem, providing the final two links in fault prevention and control: pre-startup checks and runtime automatic repair. With zero third-party dependencies, its core features include automatically disabling the plugin and persisting alerts to disk when prechecks fail, persistently displaying alerts in the browser, and automatically creating a headless repair session on the Host side to attempt recovery when alerts are detected. The system uses file locks to prevent concurrent duplicate startup, with alert data stored in `notice.json`. After installation, `dsh-web` must be restarted. The precheck script can also be integrated into systemd's `ExecStartPre` to perform blocking or non-blocking checks before startup, enabling automated health maintenance for the plugin.
Read MoreDeepSeek Harness Plugin: dsh-plugin-guard (Static Audit and Isolation)
`dsh-plugin-guard` is a static security audit plugin for DeepSeek Harness, designed to address supply chain security risks of third-party plugins. It adopts a “gate” and “clinic” architecture, performing static auditing and hash locking before installation, and enforcing mechanical excision and capability restrictions after installation. Its core features include peer search, mechanical detoxification, and a P0-P2 risk-level-based scoring mechanism that can automatically block high-risk plugins. The tool does not execute target code or perform sanitization; developers must combine it with manual review to ensure security.
Read Moredsh-malware-audit: An AST-Based Malicious Intent Detection Plugin
`dsh-malware-audit` is a security plugin for DeepSeek Harness (dsh) that detects malicious intent in plugins through static code analysis (AST), rather than relying on signature databases. It must be enabled in the configuration after installation and supports both manual scans and scheduled scans. Scanning is limited to source files and is resource-constrained. If critical issues are found and automatic isolation is enabled, the plugin will be removed. This tool is intended to assist in identifying potential risks, not to fully replace antivirus software.
Read Moredsh-plugin-sentinel: Static Security Auditor for DeepSeek Harness Plugins
In the DeepSeek Harness (DSH) ecosystem, `dsh-plugin-sentinel` is a zero-dependency static audit tool that parses tar archives in memory to detect potential risks in community plugins before installation. It relies on no scripts or build processes, using only Node.js built-in modules to parse `.tgz` files in memory and prevent malicious code from being written to disk. It supports lexical stripping scans and composite rule detection, performing security checks on `package.json`, source code, `cordis.patch.yml`, and tarball structure, covering high-risk indicators such as process execution, outbound network access, credential access, and path traversal. Audit results are classified by severity (pass/review/block), allowing the model to automatically block high-risk plugins before installation.
Read Moresatan9394/dsh-codebase-design: A DSH plugin that requires verification before installation.
Preface: The philosophy of DSH is "everything is a plugin"; capabilities are accessed via plugins, and the community directory allows browsing and searching by entry. However, the quality of information in the directory entries varies: some plugins come with complete READMEs, installation commands, and examples, while others have only a one-line description, or documentation cannot even be found. This article introduces the latter: `satan9394/dsh-codebase-design`. As of the writing of this article (2026-09-07), its GitHub README scraping has failed, and verifiable information is extremely limited. Therefore, the focus of this article is not to list features, but to explain how to verify information in this situation before deciding whether to install. What is this? Currently, only the following points can be confirmed: - Repository URL: `https://gith`
Read MoreConduct Permission Profiling Before Installing Third-party DSH Plugins with dsh-plugin-audit
dsh-plugin-audit is a DeepSeek Harness development and runtime plugin maintained by jkrandom-sudo. It performs static permission profiling on third-party plugin source code, listing files, processes, hosts, environment variables and credential paths along with line numbers; the runtime sentry will request your approval first when tool invocations touch credentials or make outbound connections to unknown hosts. It is licensed under MIT, and the current version is 0.1.2.
Read More