Development & Runtime
dsh-plugin-guard
taxueseek/dsh-plugin-guard · ★ 2
taxueseek
DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.
Manifest details
安装
dsh plugin --profile web add github:taxueseek/dsh-plugin-guardGitHub 源码安装：首次需按提示配置 allowBuilds 构建授权后重试
For install and environment setup, plus plugin development tutorials, see DSH community docs ↗
README
One plugin, two surfaces. Static analysis only — never executes the target plugin.
| Surface | Tool | Job |
|---|---|---|
| Gate | plugin_audit |
Static audit before install |
| Gate | plugin_verify |
Hash + capability lock after install |
| Clinic | plugin_peers |
Local fingerprint peers; query searches GitHub topic:dsh-plugin |
| Clinic | plugin_detox |
Mechanical amputation, not an equivalent rewrite |
plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.
Install
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh web
Scoring
Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.
P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.
Not
- Not output redaction
- Not general SAST
- Does not prove a plugin is safe
- Detox does not keep the original behavior
License
MIT
Related plugins
DSH-better-sidebar
dsh-externaldsh-external/DSH-better-sidebar
右侧侧边栏增强：文件预览/终端/Git，可拖拽自定义位置
dsh plugin --profile web add github:dsh-external/DSH-better-sidebarmirage#dsh
strukto-aistrukto-ai/mirage/typescript/packages/dsh
把文件系统与 bash 提供者换成 mirage 虚拟工作区：文件工具与 shell 命令作用于挂载的资源（RAM、S3、Redis、Slack、Gmail、Notion、Postgres）而非宿主磁盘，支持按挂载点设置读/写/执行模式、按命令选择沙箱（进程内 monty、pyodide、quickjs；远程 docker、e2b、daytona），并可在虚拟终端中安装 CLI（git、gh、slack、linear、ntn、gws，或自行注册的程序树）作为命令头词。
dsh plugin --profile web add github:strukto-ai/mirage#path:/typescript/packages/dshdeepseek-harness-desktop
hairyfhairyf/deepseek-harness-desktop
DeepSeek Harness Tauri 桌面版 | Only 5mb installer, zero environment setup. Windows / macOS / Linux.
dsh plugin --profile web add github:hairyf/deepseek-harness-desktopcc-safety-net
kenryu42kenryu42/cc-safety-net
A coding agent CLI hook - block destructive commands and secret file access
dsh plugin --profile web add 'github:kenryu42/cc-safety-net#ae8af0330308ad0bc24b5389709060c7a07a6b8d'hol-guard
hashgraph-onlinehashgraph-online/hol-guard
开源AI代理防病毒：运行时拦截风险工具、秘密访问、提示注入、恶意软件包、MCP服务器、插件和技能。
dsh plugin --profile web add github:hashgraph-online/hol-guarddsh-mobile
saya-chsaya-ch/dsh-mobile
DeepSeek Harness 移动端适配与安全局域网访问插件，支持 Android App 和手机浏览器。
dsh plugin --profile web add github:saya-ch/dsh-mobile