What it may solve
Red-team engagement mode: send one target organization name and a planner session runs a five-role agent team (recon, asset triage, vulnerability discovery, exploitation, internal pivot) at up to three concurrent agents, preflight-checking skills and resources and asking for any missing key or VPS first; findings land in a local SQLite fact base with discovery timestamps, shown in a persistent right-side console (asset mapping with a discovery timeline, agent roster, session/tunnel state, five-stage attack chain, scoring targets, a report that spells out how each score was obtained — actions, exact commands, credential provenance, tunnel build commands — and a category-organised POC/EXP knowledge base); ships 13 native skills, 53 redteam_* tools and one-command self-update.
Imported third-party catalog description; not a Registry verification conclusion.Sources and public signals
Jueze-2019/dsh-redteam-mode
8 stars · 1146 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19What can currently be confirmed
Active analysis coverage 1/5. Historical chains are retained but do not count toward current coverage.
Not analyzedSource structure
Source structure has not been analyzed.
Not analyzedRepository health
Repository metadata has not been analyzed.
Not analyzednpm release
npm release metadata has not been analyzed.
Analysis completeDSH compatibility
Conclusion: Compatibility verification passed. Installation, profile loading, and sustained startup all completed. Test environment: DSH 0.1.6-alpha.2, web profile.
Analysis completeDependency audit
Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.
Not analyzedFunctional verification
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Analysis completeStatic risk scan
Conclusion: The scan observed 5 code capabilities: contains credential or token handling code, may read environment variables, may create or modify files, may access the network, may start external processes. No predefined elevated-risk condition was triggered; this is not proof of safety.
Analysis completePackage integrity
Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: dsh-redteam-mode@0.9.2; SHA-256: 9b204d2713b9b6d1a7517adb31f6c4cfddd8f7b47c9b12612c5d3c27f60413a8.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.
Continue with the latest plugin manager
Describe your task in a DSH conversation and mention dsh-redteam-mode#packages/redteam-bundle. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.
Install or update the plugin manager (latest)Sources available for local inspection
- npm package
dsh-redteam-modeAnalyzed 0.9.2 - GitHub source
github:Jueze-2019/dsh-redteam-modeExact version not resolved
View source catalog record · View GitHub repository