dsh-plugin-security-review: Adding a static security review to DSH dynamic plugin installation
2026-09-03
DeepSeek Harness plugin
DeepSeek
dsh plugin
Security review
Dynamic plugin
dsh-plugin-security-review
`dsh-plugin-security-review` is a DSH plugin security review guard developed by ShanHaiFish, licensed under the MIT license. It performs static source code security reviews on dynamic plugins installed or executed via `cordis_define` and `cordis_run`. The tool provides two core functions, `plugin_security_review` and `plugin_security_audit`, to handle plugin operations based on a four-tier strategy of `BLOCK`, `ASK`, `WARN`, and `ALLOW`. Its main features include browser-side manual approval popups (Approve, Approve + Whitelist, Reject) and the ability to persist code fingerprints after manual approval, allowing subsequent identical fingerprints to be automatically permitted. Furthermore,
Read More