@shaoshi/dshscan
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
16 results
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
Sprites remote development environments for DeepSeek Harness through Cordis and MCP.
Caddy-fronted administrator authentication bundle for DeepSeek Harness
AI approval answerer using the unified ctx.llm route with fail-closed local policy checks
Event-driven development automation, offline standards, CI adapters, and quality gates for Cordis plugins in DeepSeek Harness.
Harness Plugin Store Optimized: a customized fork of dsh-plugin-hub — configurable plugin download directory, bundle-layer conflict detection, automatic pnpm lookup, and upstream bug fixes
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
Record and compare project development environments without storing secret values.
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
End-to-end encrypted remote access to DeepSeek Harness and experimental Codex workspaces from desktop, web, and Android, with dsh-TUI Host support.
DeepSeek Harness (dsh) plugin adapter for litkit — academic literature search, citation audit, and download tools. Root npm package of the polyglot litkit-search monorepo, so `dsh plugin add github:bpc-oss/litkit-search` installs the adapter directly.
Read-only update auditing for DeepSeek Harness profile plugins across npm, GitHub, and local package sources.
Installing-time safety gate for the DSH plugin market — scans npm / GitHub plugins before the market executes them. · DSH 插件市场安装安全检查:安装前自动检测三方插件风险,安全直接放行,有风险弹窗由你决定。