安全与治理
渠道适配
dsh-plugin-approval-alert
doncelee229-cmyk
DeepSeek Harness 审批/选择方案系统级通知提醒，显示工作区名、点击跳转、多语言。Approval & decision alerts with native notifications for DeepSeek Harnes…
approvaldeepseek-harnessdsh-pluginnotification
PROJECT TOPICS
项目标签
PROJECT README
README
dsh-plugin-guard
One plugin, two surfaces. Static analysis only — never executes the target plugin.
| Surface | Tool | Job |
|---|---|---|
| Gate | plugin_audit |
Static audit before install |
| Gate | plugin_verify |
Hash + capability lock after install |
| Clinic | plugin_peers |
Local fingerprint peers; query searches GitHub topic:dsh-plugin |
| Clinic | plugin_detox |
Mechanical amputation, not an equivalent rewrite |
plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.
Install
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh webScoring
Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.
P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.
Not
- Not output redaction
- Not general SAST
- Does not prove a plugin is safe
- Detox does not keep the original behavior
License
MIT
CLASSIFICATION EVIDENCE
分类依据
项目类型插件
功能分类安全与治理
规则置信度高
系统优先读取 GitHub Topics，再与站内分类词典和词根规则比对。
安全与治理
插件
dsh-tailscale-console
evanfang0054
为 DeepSeek Harness 提供基于 Tailscale 的安全远程访问运营面板：一键健康检查、HTTPS 入口开关、macOS 代理绕过、中继服务器运维、ACL 生成。Tailscale remote-access contro…
deepseek-harnessdevopsdshdsh-plugin
安全与治理
插件
keyringseam
fieldnote-ops
Independent macOS Keychain credential provider for DeepSeek Harness, with a signed and notarized universal helper.
credentialsdeepseek-harnessdsh-pluginkeychain