dsh-plugin-finder：在 DSH 中搜索并审查社区插件
`dsh-plugin-finder` 是 DeepSeek Harness 的一个开源插件，旨在解决第三方插件发现与安全审查难题。它提供实时搜索和源码审计两大核心功能：`search_dsh_plugins` 可实时检索 GitHub 上的 DSH 插件，按 Star 数排序并展示简介及安装命令；`audit_dsh_plugin` 则对候选仓库进行只读审查，包括下载源码至沙盒（限 50MB）、检测安装清单、扫描七类危险代码模式，并生成包含回滚步骤的“试用转正式”安装计划。该插件严格遵循只读原则，不执行任何安装动作，搜索结果内存缓存 5 分钟以减少 API 调用压力。用户可通过命令安装或临时
Read Moredsh-security-audit: DSH Native Security Audit and Data Desensitization Risk Report
dsh-security-audit is a native security audit plugin (admin-security) for DSH, maintained by omdsh-dev. It scans configuration and credential metadata, plugin sources, session structures, and network exposure surfaces in a read-only manner, outputting desensitized and reproducible JSON risk reports. It provides six actions: scan_config, scan_plugins, scan_sessions, scan_network, report, and rules. It does not perform automatic repairs, connect to the internet, or execute audited plugins. It is compatible with DSH 0.1.0-rc.8 and can be installed via `dsh plugin add` from GitHub or npm pack.
Read Moredsh-secure-audit: DSH Read-Only Security and Compliance Audit Plugin
dsh-secure-audit is a read-only security plugin (admin-security) for DeepSeek Harness maintained by PensiveFei. It provides security_scan_text for prompt injection detection, security_redact_text/security_redact_json for PII and JSON redaction, security_audit for local configuration auditing, and security-review skill. The plugin does not write to or execute the audited system; reports are redacted and include reportSha256 self-verification. Installation: dsh plugin add dsh-secure-audit; requires Node ≥20 and @deepseek-ai/dsh-tools >=0.1.0-rc.7.
Read MoreConduct a read-only security audit of the local DeepSeek Harness using dsh-security-audit
`dsh-security-audit` is a native security audit plugin for DeepSeek Harness maintained by omdsh-dev. It performs read-only scans of configurations, credential metadata, plugin sources, session structures and network attack surfaces, and outputs desensitized and reproducible risk reports. This article verifies the installation commands, six actions, rule boundaries and precautions against the community directory page and GitHub README.
Read More1. Auditing-Security: Systematically Audit Code Repositories with Agent Skill
### Introduction to awesome-cursor-skills Selected Skill auditing-security: Write review steps including OWASP Top 10, key leakage, injection and dependency vulnerabilities into SKILL.md for agents such as Cursor to conduct systematic audits of business code according to the 7-step checklist. The content covers installation methods, prompt examples, and the complementary relationship with Skill supply chain security tools such as SkillScan.
Read More