SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Vulnerability Scanning & Security Testing
对代码、依赖、仓库、部署配置或本机环境执行只读漏洞扫描、Security审计、SAST、渗透测试、红队作业、资产测绘和流量分析，并输出风险报告或加固建议。排除Plugin安装审计、审批和运行时拦截。
Leaf membership
44 plugins
dsh-htb-skillsqingsiweisan/dsh-htb-skillsCatalog AnalyzedDSH plugin from qingsiweisan/dsh-htb-skillsCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-lovelyauditTokeii0/dsh-lovelyauditCatalog AnalyzedDSH web plugin: 黑盒/代审 sidebar workspace (P0–P7, per-finding SRC reports).CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals13 starsdsh-mapscanO3SET/dsh-mapscanCatalog AnalyzedDSH plugin from O3SET/dsh-mapscanCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-omvbx33661/dsh-omvCatalog AnalyzedEvidence-first vulnerability research workbench for DeepSeek Harness: native audit views, 29 OMV tools, Evidence.v1 findings, reproducible runs, Campaign workflows, and isolated PoC evidence.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-pentesthowmp/dsh-pentestCatalog AnalyzedAuthorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals375 starsdsh-pentest-bugtraceelliseang0000-lang/dsh-pentest-bugtraceCatalog AnalyzedBugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, runbook skill, and MCP bridge in one installable bundleCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-pentesterdsh-pentesterCatalog AnalyzedPTES-based penetration testing plugin with Root-Orchestrator architecture for DeepSeek Harness.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifact3.2.0Evidence updated2026-09-06Public signals11 stars · 1373 downloadsdsh-plugin-security-audittruelove-dreamer/dsh-plugin-security-auditCatalog AnalyzedDeepSeek Harness plugin: run a live security health check on the deploymentCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-plugin-warroom-garaklukethecat/dsh-plugin-warroom-garakCatalog AnalyzedDSH plugin from lukethecat/dsh-plugin-warroom-garakCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-redteam-modelSeaOf0/dsh-redteam-modelCatalog AnalyzedAuthorized-security DSH collection: nine work modes (redteam coordinator, pentest, code audit, binary analysis, attack-defense, AV evasion, incident response, cloud security, CTF solving) and fifteen runtime plugins, managed from a settings page with one-click deploy, install, update and uninstall.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals251 starsdsh-reverse-skill@dhicoc/dsh-reverse-skillCatalog AnalyzedComplete reverse-skill pack (85 SKILL.md) as a DeepSeek Harness Cordis plugin: reverse engineering, authorized pentesting and security-research skill router.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact1.0.5Evidence updated2026-09-06Public signals116 stars · 3268 downloadsdsh-route-fence-linterVladimir-Kryshchenko/dsh-route-fence-linterCatalog AnalyzedAudits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-secure-auditdsh-secure-auditCatalog AnalyzedRead-only security and compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and a local configuration audit with redacted, reproducible reports.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.9Evidence updated2026-09-06Public signals87 stars · 890 downloadsdsh-security-assurancebailong-Hakuryu/dsh-security-assuranceCatalog AnalyzedDeepSeek Harness 策略驱动的仓库Security评估Plugin，支持包生命周期评估、证据、发现、裁决、导出和 /security 指令。 | Policy-driven repository security assurance plugin for DeepSeek Harness with package lifecycle assessments, evidence, findings, verdicts, exports, and /security routing.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-security-auditomdsh-dev/dsh-security-auditCatalog AnalyzedLocal security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals14 starsdsh-security-doctorChenChen913/dsh-security-doctorCatalog AnalyzedOne-click local security checkup button for the DeepSeek Harness (DSH) Web UI: read-only checks (!!js config, third-party plugins, credential file perms, instruction files), severity-graded report, plus AI-usable security-review & secure-development guides. / DSH Security医生：一键本机Security体检PluginCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-security-guardruanhaodong-tt/dsh-security-guardCatalog AnalyzedRuntime security guard for DSH: loader import confinement, HTTP Host header validation, and source patch for VM sandbox escapes (4 CVEs). AI-assisted.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signalsNo public usage signalsdsh-vulnsec-bridgeMariNanari/dsh-vulnsec-bridgeCatalog Analyzedv0.2.1: VulnClaw + DeepSec bridge for DeepSeek Harness (dsh) — Security工具台CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.