@jieai/dsh-plugin-vet: DSH Plugin Pre-installation Audit and Runtime Guards

@jieai/dsh-plugin-vet is an MIT-licensed tool maintained by wulun811, specifically designed to provide security audits and runtime monitoring for the DeepSeek-Harness (DSH) plugin ecosystem. Given that DSH plugins run with process permissions, this plugin aims to address the needs of pre-installation audits and runtime monitoring but does not provide a plugin marketplace or default interception and mitigation functions. Its core capabilities are divided into two parts: pre-installation audits generate scorecards through deterministic static scanning, perform supply chain checks (such as typosquatting and OSV), detect data exfiltration and ransomware behavior, and establish integrity baselines; runtime monitoring enables T1 Sentinels (monitoring memory, file descriptors, and subprocesses) and T2 Hooks (intercepting filesystem, subprocess, and network calls), supporting the N7 confirm blocking mechanism. The default configuration is in report-only mode.