Skip to content
dsh.fish

Browse

17 results

Bundle

dsh-api-relay-audit

DeepSeek Harness bundle for running API Relay Audit locally

toby-bridges824
Bundle

@shaoshi/dshscan

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

shaoshi2010
Bundle

@deepseek-ai/dsh-session-health

DSH session health checker: frame-level diagnostics over multi-frame zstd session logs (torn/corrupt/empty detection), zero-dependency read-only scanner

omdsh-dev9
Bundle

dsh-plugin-radar

Find DSH plugins and security-scan them before install

dshplugin-me3
Bundle

@tindalosko/dsh-cheatengine

Official hybrid DSH plugin: Cheat Engine dynamic debugging toolkit with host ce_* tools and a client floating status panel.

TindalosKorone2
Skill

skill-security-guard

Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.

rrrrrredy2
Bundle

dsh-poison-guard

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.

zoahdev2
Bundle

dsh-capcheck

V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.

heming-gmh1
Bundle

dsh-security-scan

Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.

ben7am1n1
Bundle

dsh-a11y-scan

DSH native accessibility (WCAG) scanner: runs axe-core over local HTML files / build output / URLs and reports violations (rule id, impact, WCAG 2.1 mapping, element targeting, fix suggestions) as Markdown/HTML/JSON reports. Read-only, CI-able.

988hj7tczd-oss1
Bundle

correctover

AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.

Guigui Wang
Bundle

dsh-plugin-vetting

装插件前，先体检：第三方插件 = 进程内全权限代码，这个工具让'盲装'变成'知情安装'——恶意模式、越权路径、未检查依赖，一目了然。Static heuristic vetting for third-party DeepSeek Harness plugins: exfiltration, credential access, over-privileged paths, unvetted dependencies.

truelove-dreamer
Bundle

dsh-codebase-scanner

SQL 优化模式：EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents（38k★ MIT）启发。

satan9394
Bundle

dsh-dolphin-security

此为 DSH 生态插件。Dolphin - 主动巡检型安全防御插件，支持本地扫描与远程 SSH 巡逻。将渗透测试方法论（信息收集→漏洞探测→利用验证→报告）转化为主动防御巡检流程：基于 Semgrep 的扫描层与基于 SSH 的执行层相融合，可对本地目录做静态扫描，也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。

ccr-wer