Bundle
dsh-api-relay-audit
DeepSeek Harness bundle for running API Relay Audit locally
toby-bridges838
Browse
31 results
Bundle
@zseven-w/dsh-harbor
A read-only mirror for installed DeepSeek Harness plugins: capability inventory with evidence, cross-plugin conflicts, a diff of what changed since the last scan, and an upgrade preflight that tells you which profiles still boot on a newer DSH
ZSeven-W24
Bundle
@shaoshi/dshscan
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
shaoshi209
Bundle
@hubaking/dsh-community-plugins
DSH 社区插件生态指南 + 两个审计工具：注册「dsh-community-plugins」skill，让每个会话都知道如何发现、评估、安装社区插件；注册离线工具 dsh_plugin_audit，把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建；注册联网工具 dsh_plugin_inspect，在安装前下载 tarball、校验 integrity、在临时目录里审计后删除，不安装、不执行 lifecycle 脚本。只提供方法与事实，不推荐任何第三方插件或市场。轻量：纯 JavaScript、单一依赖、无构建步骤。
HubaKing5
Bundle
dsh-plugin-security-review
Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
ateen184
Bundle
dsh-capability-receipt
Content-addressed receipts for skills actually loaded by DeepSeek Harness
dongsheng1231323
Bundle
@jieai/dsh-plugin-vet
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
wulun8113
Bundle
dsh-release-proof
Reproducible multi-source release evidence for DeepSeek Harness
dongsheng1231322
Bundle
@mkaliezz/dsh-dependency-firewall
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
MkaliezZ1
Bundle
dsh-skillx
A safe external-skill discovery and adoption bundle for DeepSeek Harness
drowned-fish11
Bundle
dsh-provenance
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
Darren-Tang1
Bundle
cn-intel-mcp-dsh
China hard-tech supply chain intelligence for DeepSeek Harness: signal board, earnings tracker, track record, Q&A via cn-intel MCP
lory690601
Bundle
dsh-profile-lock-proof
Content-addressed proof that a DeepSeek Harness profile declaration, pnpm lock and installed bundles agree
dongsheng1231321
Bundle
dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
zoahdev1
Bundle
dsh-skillnotary
Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.
liyixuan2012111
Bundle
mcp-cap
What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.
liyixuan2012111
Bundle
upstream-radar
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
MicroMilo
Bundle
correctover
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Guigui Wang
Bundle
dsh-capcheck
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
heming-gmh
Bundle
dsh-xray-plugin
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
unStone
Bundle
dsh-plugin-gate
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff), structured reports (gate_report), 12 destructive-command patterns and workspace-boundary checks.
863683348
Bundle
dsh-reproducible-build-proof
Offline content-addressed proof that independent builds reproduced byte-identical specified artifacts
dongsheng123132
Bundle
dsh-trust-check
Static trust audit for DeepSeek Harness plugins: capabilities, injected prompts, token cost, provenance, and a reproducible 0-100 trust score
liuwenji007
Bundle
dsh-plugin-trust-center
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
TonyWang-hub