Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
Author: truelove-dreamer · Security & Permissions · Catalog snapshot: 2026-09-04Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
Imported third-party catalog description; not a Registry verification conclusion.truelove-dreamer/dsh-plugin-vetting
5 stars · 2945 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-04No exact-version test is available.
No Registry security conclusion is available.
No functional smoke evidence is available.
Plugin permissions have not been resolved.
Version and integrity have not been resolved.
Describe your task in a DSH conversation and mention dsh-plugin-vetting. The plugin manager can find this candidate through Registry, then inspect its actual source and version locally.
dsh-plugin-vettingExact version not resolvedgithub:truelove-dreamer/dsh-plugin-vettingExact version not resolved