dsh-plugin-sentinel
DSH 插件安检机 — install-time static security auditor for DeepSeek Harness plugin bundles. Zero dependencies, zero install scripts, zero build step.
156 results
DSH 插件安检机 — install-time static security auditor for DeepSeek Harness plugin bundles. Zero dependencies, zero install scripts, zero build step.
dsh plugins ported from eco-agent: permission gate, audit chain, memory tree
DSH hot-plug execution engine: a reliable install/enable/disable/rollback/audit service for plugin marketplaces, agents, and host plugins (execution layer, not a marketplace).
Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.
Static DSH plugin compatibility audit before installation, plus bounded Loader lifecycle observation
Ask DeepSeek to falsify a file or gate a PR. Receipt: PASS / PASS_WITH_DEBT / BLOCK. Adjudicator, not a second opinion. Green lint is not a ship.
Codex-style Guardian reviews, audit, and manual override for DeepSeek Harness
拒绝 AI 味的 UI 设计:21 主题 + 四动词(构建/audit 审计/redesign 重构/study 提取 DNA)+ 57 个 slop 测试门 + 预输出自我批评——拒绝所有 LLM 训练成的分布默认值。受 Nutlope/hallmark(25.8k★ MIT)启发。
VulnClaw + DeepSec 桥接插件:AI 安全 CLI(授权渗透测试 / Shield 代码审计)→ dsh 工具 + 设置页安全工具台 UI
Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.
Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.
DeepSeek Harness 多租户插件:认证反代网关(邮箱密码/LDAP/SSO)、角色权限(平台管理员/租户管理员/审计员/使用者)、token 配额与用量统计、审计日志
安装任何第三方 DeepSeek Harness (DSH) 插件或 agent preset 之前,审查它的源码, 判断是否安全、是否值得授予"宿主任意代码执行权"。当用户说"这个插件安全吗"、 "能不能装"、"审计/审查这个插件或 preset"、"dsh plugin add"、"帮我看看这个 第三方插件"、或贴出一个插件目录/仓库让评估,都要用它。即便用户没明说"安全"、 只要是在引入外部 DSH 代码,就应先做这次审计。
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)
Let a local DeepSeek Harness Agent use BailingHub to query data, update records, and run permitted actions in your online store, SaaS, or other admin system.
Fifth DeepSeek Harness mode with configurable Codex, Claude Code, or DSH audits, user-approved remediation turns, progressive Cordis/skill elevation, safety pauses, and Web/TUI review controls.
DeepSeek Harness bundle that registers the skills-summarize-audit skill pack on ctx.skills.
Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1
DSH agent-fleet hygiene audit: credential-file permissions, embedded credentials in git remotes (masked), provider token-prefix literals. Read-only, zero-dependency, deterministic.
DSH 插件审核器:在新插件加入 profile 前扫描组合兼容性——重复工具注册、entry id 冲突、peer 版本不匹配、记忆插件唯一性、渠道插件凭据,输出风险报告,预防启动崩溃。
Solve the AI goldfish brain: a personal memory layer for DeepSeek Harness — preferences, project conventions, workflows, and error lessons, stored locally as auditable, evidence-backed Markdown/JSON. 解决 AI 金鱼脑:偏好、项目约定、工作方式与纠错教训的本地可审计记忆层。
Database connector bundle for DeepSeek Harness (dsh): SQLite/PostgreSQL/MySQL connections, schema introspection, read-only safety, write approval gate, and a JSONL SQL audit trail.
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.