Eligahyu/dsh-sentinel-scanner: Read-Only Security Scanning for DSH Plugins

Eligahyu/dsh-sentinel-scanner is a read-only static security scanning tool for DeepSeek Harness (DSH) plugins, designed to perform supply chain and security risk assessment before code execution. The tool detects risks such as command execution, credential access, data exfiltration, and obfuscation through 51 AST-based heuristic rules, outputting a risk score from 0 to 100 along with a security verdict, but never executes the scanned code. It offers multiple integration methods: as a DSH Agent Tool plugin, a standalone CLI (`dsh-sentinel`), a GitHub Action, or a JavaScript API. Core features include three scanning modes—source code, package artifacts, and profiles—with support for pre-publishing npm packages.