返回目录
安全与治理 索引目录

dsh-lab

hackerFish/dsh-lab

DSH 实验室:每个条目都经真机四关测试的 DeepSeek Harness 实测精选与中文指南(安装→冒烟→安全快检→兼容钉版)

Stars
2
Forks
0
Issues
0
更新
今天

PROJECT TOPICS

项目标签

PROJECT README

README

🐋 dsh-lab — Tested-Only Curation for DeepSeek Harness Plugins

Every listed plugin passed real machine tests. Full logs and reproduction commands are committed in-repo.

The DSH ecosystem has 1000+ community plugins, but listings disclaim endorsement, automated rankings don't install anything, and nobody answers the only question that matters: does it actually install and what's inside the code? dsh-lab only publishes conclusions we tested ourselves.

中文

Why dsh-lab

  • Curation ≠ verification: directory inclusion is not a security review.
  • Stars ≠ installability: popularity signals don't reflect compatibility or code behavior.
  • Version drift: DSH ships rc releases constantly; plugins break silently.

Our answer: four fixed gates, every entry, honest labels (✅ passed / ❌ failed with reason / ⏳ not executed with reason).

Gate What we do
1. Install Real dsh plugin --profile web add in an isolated DSH_HOME, full logs
2. Smoke Minimal headless run (needs model credentials; honest ⏳ until then)
3. Static scan Zero-dependency scanner over the installed code (network/subprocess/eval/credentials) with per-hit context judgement
4. Version pin Plugin version × DSH version recorded; re-test on change

Full protocol & reproduction: docs/METHODOLOGY.md

Coverage (10 reports, 2026-08-16, DSH 0.1.0-rc.6)

All ten tested plugins installed successfully and shipped purpose-consistent code: dsh-global-rules, dsh-mermaid, dsh-shortcuts, dsh-deeplink, dsh-navbar, dsh-spotlight, dsh-share, modlens, dsh-recommend, dsh-plugin-vetting. See lab/INDEX.md.

Also documented: 6 entries listed in community directories whose repos have vanished (installability reminder), 4 reproducible install frictions (pnpm 9 workspace-root check, git-protocol interception, registry timeouts, allowBuilds), and our own scanner false-positive corrections — kept in the record on purpose.

Guides (bilingual)

Roadmap

Phase 1 tested curation → Phase 2 plugin×DSH compatibility matrix (CI) → Phase 3 same-category plugin arena. See docs/ROADMAP.md.

Sibling repos

Disclaimer

Reports are point-in-time snapshots. Static scan ≠ security endorsement: no hit ≠ harmless, hit ≠ malicious. Not affiliated with DeepSeek.

License

MIT

CLASSIFICATION EVIDENCE

分类依据

项目类型索引目录
功能分类安全与治理
规则置信度

系统优先读取 GitHub Topics,再与站内分类词典和词根规则比对。