DSH Plugin Registry
中文EN
Submit plugin
Plugins/dsh-dolphin-security

dsh-dolphin-security

Automated evidence available

此为 DSH 生态Plugin。Dolphin - 主动巡检型Security防御Plugin，支持本地扫描与远程 SSH 巡逻。将渗透测试方法论（信息收集→漏洞探测→利用验证→报告）转化为主动防御巡检流程：基于 Semgrep 的扫描层与基于 SSH 的执行层相融合，可对本地目录做静态扫描，也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。

Author: ccr-wer · Security & Permissions · Catalog snapshot: 2026-09-19

Canonical semantic path

Security, Permissions & GovernanceVulnerability Scanning & Security Testing

One primary path; alternate capabilities remain separate.
development.static-analysisknowledge.report-generationremote.ssh-command-execution

What it may solve

此为 DSH 生态Plugin。Dolphin - 主动巡检型Security防御Plugin，支持本地扫描与远程 SSH 巡逻。将渗透测试方法论（信息收集→漏洞探测→利用验证→报告）转化为主动防御巡检流程：基于 Semgrep 的扫描层与基于 SSH 的执行层相融合，可对本地目录做静态扫描，也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。

Imported third-party catalog description; not a Registry verification conclusion.

Sources and public signals

ccr-wer/dsh-dolphin-security

— stars · 668 downloads

Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19

What can currently be confirmed

Active analysis coverage 1/5. Historical chains are retained but do not count toward current coverage.

Not analyzed

Source structure

Source structure has not been analyzed.

Not analyzed

Repository health

Repository metadata has not been analyzed.

Not analyzed

npm release

npm release metadata has not been analyzed.

Analysis complete

DSH compatibility

Conclusion: Compatibility verification passed. Installation, profile loading, and sustained startup all completed. Test environment: DSH 0.1.6-alpha.2, web profile.

Analysis complete

Dependency audit

Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.

Not analyzed

Functional verification

The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.

Analysis complete

Static risk scan

Conclusion: The scan observed 3 code capabilities: may read environment variables, may create or modify files, may start external processes. No predefined elevated-risk condition was triggered; this is not proof of safety.

Analysis complete

Package integrity

Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: dsh-dolphin-security@0.2.5; SHA-256: cad0a443d7c59a771252b2968ad8221ae246debcea8b1ce13cadfc2930ff2c7c.

Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.

Continue with the latest plugin manager

Describe your task in a DSH conversation and mention dsh-dolphin-security. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.

Install or update the plugin manager (latest)