SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Plugin & Supply-Chain Security Audit
在Plugin、Skill、包或依赖安装、激活前后进行静态Security审查和Source验证，包括恶意模式与投毒检测、能力披露、SBOM、漏洞库比对、哈希校验、风险评分和安装门禁。排除运行时行为防护。
Leaf membership
45 plugins
dsh-plugin-security-auditchendengyuanxm/dsh-plugin-security-auditCatalog AnalyzedStatic security audit for dynamic Cordis plugins in DeepSeek Harness (DSH): rule-based source scanning, risk reports injected into tool results, and user-approval escalation before activating high-risk plugin packages. 动态 Cordis Plugin静态Security审查。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-plugin-security-reviewateen18/dsh-plugin-security-reviewCatalog AnalyzedPre-install static security review and runtime guard for dsh plugins: deobfuscation decoding, supply-chain checks, web one-click review/install/uninstall, and optional runtime tool-call guard.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-plugin-security-reviewdsh-plugin-security-reviewCatalog AnalyzedStatic bundle form of the DSH plugin-install security gate: reviews cordis_define/cordis_run with a fail-safe policy, plus review/audit tools and a browser approval popup (agree / agree+whitelist / reject; agree+whitelist writes the plugin family into truCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact1.8.1Evidence updated2026-09-09Public signals331 downloadsdsh-plugin-sentinelBotonJ/dsh-plugin-sentinelCatalog AnalyzedStatic pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-plugin-trust-centerTonyWang-hub/dsh-plugin-trust-centerCatalog AnalyzedEvidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-plugin-trustlensMengshang-spec/dsh-plugin-trustlensCatalog AnalyzedRead-only DSH plugin auditor with static scanning, current-session model review, and confirmation gates.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-plugin-vet@jieai/dsh-plugin-vetCatalog AnalyzedPlugin trust pipeline for DeepSeek Harness: deterministic static scan with verdicts, opt-in runtime guard with honeypot lures, agent audit-protocol skill, and a browser shield status light. Alarm-only, never an enforcer.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.3.5Evidence updated2026-09-07Public signals3 stars · 4190 downloadsdsh-plugin-vettingdsh-plugin-vettingCatalog AnalyzedVets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.5.6Evidence updated2026-09-07Public signals5 stars · 2945 downloadsdsh-poison-guarddsh-poison-guardCatalog AnalyzedPre-install supply-chain poison scanner for DSH plugins: AST (JS-X-Ray) + deobfuscation + regex heuristics, exits non-zero on findings for CI gating.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.0Evidence updated2026-09-07Public signals2 stars · 659 downloadsdsh-poison-guard-actionzoahdev/dsh-poison-guard-actionCatalog AnalyzedGitHub Action: supply-chain poison scan for DeepSeek Harness plugins (AST + deobfuscation)CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-precheckclawk2026/dsh-precheckCatalog AnalyzedSecurity & Trust Checks for DeepSeek Harness PluginsCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-provenancedsh-provenanceCatalog AnalyzedPre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-07Public signals1 stars · 722 downloadsdsh-safe-gatequan-v/dsh-safe-gateCatalog Analyzeddsh 装前守门:OSV 供应链扫描 + Plugin契约检查。 Pre-flight safety gate for dsh plugins/MCP.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-security-gatewj2514939573-ui/dsh-security-gateCatalog AnalyzedSecurityGate（Plugin安检门）— inspect DSH plugins before install: dual-dimension static scan + LLM AI review + runtime watch + community ratings & bug bounty.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-security-guarddsh-security-guardCatalog AnalyzedStatic and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web panel, and allowlist.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifact0.1.0-rc.7Evidence updated2026-09-07Public signals1 stars · 929 downloadsdsh-sentinelscodypanda/dsh-sentinelCatalog AnalyzedDSH plugin from scodypanda/dsh-sentinelCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-sentinel-scannerdeepseek-harness-sentinelCatalog AnalyzedStatic security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.4.4Evidence updated2026-09-07Public signals6 stars · 1547 downloadsdsh-skill-pack-securityPerryLink/dsh-skill-pack-securityCatalog AnalyzedSecurity-audit methodology skill pack plus the plugin_vet supply-chain gate: eight agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) in Chinese and English editions, with an npm provider bundle that mounts the skills and registers the automated plugin_vet pre-install scanner.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals9 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.