Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1632 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-plugin-vettingdsh-plugin-vettingCatalog AnalyzedVets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.6dsh-perm-gatedsh-perm-gateCatalog AnalyzedP0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.2dsh-auto-classifierdsh-auto-classifierCatalog AnalyzedAutonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git checkpointing for unattended sessions.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.14dsh-shadow-auditor@goodandready/dsh-shadow-auditorCatalog AnalyzedBackground security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.15dsh-vetdsh-vetCatalog AnalyzedSecurity vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0dsh-tool-code-reviewdmsobtl/dsh-tool-code-reviewCatalog AnalyzedDSH Plugin：结构化代码审查 — Agent 读取 git diff，按 checklist 逐项审查，输出可Action的发现。Git & Code ReviewGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-auditdsh-plugin-auditCatalog AnalyzedSecurity audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party pluginsSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.4helm-dADWMC/helm-dCatalog AnalyzedDeepSeek Harness 破甲一体化Security analysisPlugin：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedhelm-d#helmdADWMC/helm-dCatalog AnalyzedSingle-bundle reverse-engineering and pentest security plugin: first-turn tool narrowing, domain routing, and 33 tools covering APK, web, native binary, protocol, malware and LLM samples — with unpacking, license-bypass and anti-analysis case playbooks, an H-CoT evaluation engine (semantic routing, /hcot command), a web workbench with a ledger-driven tool shelf, an on-disk case workflow (auto-persisted evidence chain, E-numbered validated findings, post-compaction resume), GitHub-based external tool discovery, and 361 on-demand reference docs.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-auto-approvedsh-auto-approveCatalog AnalyzedAdds an `auto` permission preset between workspace-write and danger-full-access: a classifier grants routine sandbox escalations once, while dangerous or uncertain requests still go to a human.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.2dshscan@shaoshi/dshscanCatalog AnalyzedSecurity scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit3 reported in bounded auditArtifact0.5.0dsh-sonarqubedsh-sonarqubeCatalog AnalyzedRead-only SonarQube Community Build tools: instance status, project Quality Gate for a branch or pull request, issue and Security Hotspot search, single hotspot detail, and coverage, duplication or caller-selected measures. Issue and hotspot results carry a normalized location with component key, file path, line and text range.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-approval-modeNEVSTOP-LAB/dsh-approval-modeCatalog AnalyzedAdds an approval-mode toggle next to the permission selector: default approval keeps per-call confirmation, bypass approval auto-approves every tool call while staying in Workspace Write.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-guardiancdxiaodong/dsh-guardianCatalog AnalyzedAgent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-auto-modeNuo-cl/dsh-auto-modeCatalog AnalyzedDSH plugin: auto mode that routes permission-gated tool calls through an LLM review before approving, blocking, or asking for confirmation.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedreview-gateJohnXu22786/review-gateCatalog AnalyzedTurns code review into a hard gate: deterministic severity rules, LLM-assisted findings, a team approval quorum and a durable compliance audit trail that must pass before a merge proceeds.Development & RuntimeGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-full-with-approvalzjuhbh/dsh-full-with-approvalCatalog AnalyzedFourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) with per-operation user approval for writes outside the workspace or to protected paths (.git/**, .env*); implemented purely as a bundle over the official tools/pre-execute ask hook, no core edits.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-fleet-auditLeslieWylie/dsh-fleet-auditCatalog AnalyzedRead-only agent-fleet credential hygiene audit: credential-file permissions, embedded credentials in git remotes (masked in output), and provider token literal counts; zero-dependency and deterministic.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation