dsh-discovery: Entry point for read-only search and security review of DSH Community Plugins
dsh-discovery is a read-only search tool for DSH community plugins licensed under the MIT license, designed to address the screening and security review of third-party plugins prior to installation. Its core features include browsing plugins under the GitHub `dsh-plugin` topic, offering category classification, scenario filtering, and bilingual (Chinese-English) synonym search. From a security perspective, it performs static rule scanning for deterministic pre-screening and generates reports for LLMs to conduct a deep review of code, dependencies, and reputation within the session. Plugins are only installable after passing this review, with high-risk threats being rejected by default. Additionally, it supports Agent invocation for search and pre-screening tools, update checks for installed plugins (including security review), and a caching mechanism. The tool itself does not perform installation, update, or uninstallation operations, nor does it load remote code; it serves solely as a read-only entry point. Users should be aware that, despite pre-screening and LLM review, it is impossible to eliminate all risks.
Read More