Introducing the DeepSeek Harness Plugin: dsh-poison-guard

To prevent supply chain poisoning, DSH Harness (DSH) provides a preinstalled scanner plugin, `dsh-poison-guard`. This tool statically analyzes plugin code and uses a three-layer mechanism to identify threats: AST analysis detects dangerous operations and data leakage; deobfuscation decodes common encodings; and regex-based heuristics match suspicious scripts. After installation, the `scan` command can be used to scan plugin directories, with exit codes supporting CI checks. Note that it performs static analysis only, may produce false positives, relies on Harness’s sandbox configuration to restrict permissions, and cannot defend against heavily obfuscated code.