Bundle
dsh-api-relay-audit
DeepSeek Harness bundle for running API Relay Audit locally
toby-bridges829
Browse
31 results
Bundle
upstream-radar
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
MicroMilo313
Bundle
@zseven-w/dsh-harbor
A read-only mirror for installed DeepSeek Harness plugins: capability inventory with evidence, cross-plugin conflicts, and a diff of what changed since the last scan
ZSeven-W25
Bundle
@shaoshi/dshscan
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
shaoshi2010
Bundle
@hubaking/dsh-community-plugins
DSH 社区插件生态指南 + 两个审计工具：注册「dsh-community-plugins」skill，让每个会话都知道如何发现、评估、安装社区插件；注册离线工具 dsh_plugin_audit，把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建；注册联网工具 dsh_plugin_inspect，在安装前下载 tarball、校验 integrity、在临时目录里审计后删除，不安装、不执行 lifecycle 脚本。只提供方法与事实，不推荐任何第三方插件或市场。轻量：纯 JavaScript、单一依赖、无构建步骤。
HubaKing6
Bundle
dsh-capability-receipt
Content-addressed receipts for skills actually loaded by DeepSeek Harness
dongsheng1231324
Bundle
@jieai/dsh-plugin-vet
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
wulun8113
Bundle
dsh-release-proof
Reproducible multi-source release evidence for DeepSeek Harness
dongsheng1231322
Bundle
dsh-plugin-security-review
Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
ateen182
Bundle
dsh-plugin-gate
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources for malicious install scripts, credential theft, obfuscation, persistence and network callbacks before 'dsh plugin add', plus 12 destructive-command patterns and workspace-boundary checks against accidental deletion. | 安装安全闸门与数据保护闸：60 条静态签名规则（31 高危/24 中危/5 低危）扫描插件恶意行为、持久化与外传，12 种危险命令模式与边界检查拦截误删。
8636833481
Bundle
dsh-capcheck
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
heming-gmh1
Bundle
dsh-provenance
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
Darren-Tang1
Bundle
@mkaliezz/dsh-dependency-firewall
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
MkaliezZ1
Bundle
dsh-skillx
A safe external-skill discovery and adoption bundle for DeepSeek Harness
drowned-fish11
Bundle
dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
zoahdev1
Bundle
cn-intel-mcp-dsh
China hard-tech supply chain intelligence for DeepSeek Harness: signal board, earnings tracker, track record, Q&A via cn-intel MCP
lory690601
Bundle
dsh-profile-lock-proof
Content-addressed proof that a DeepSeek Harness profile declaration, pnpm lock and installed bundles agree
dongsheng1231321
Bundle
mcp-cap
What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.
liyixuan2012111
Bundle
correctover
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Guigui Wang
Bundle
dsh-xray-plugin
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
unStone
Bundle
dsh-reproducible-build-proof
Offline content-addressed proof that independent builds reproduced byte-identical specified artifacts
dongsheng123132
Bundle
dsh-plugin-trust-center
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
TonyWang-hub
Bundle
dsh-deployment-rollback-proof
Offline content-addressed proof that failed deployments converged to one last-known-good artifact
dongsheng123132
Bundle
dsh-artifact-promotion-proof
Offline content-addressed proof that one immutable artifact followed a declared promotion chain
dongsheng123132