dsh-plugin-guard
DSH Desktop plugin safety guard: self-repairs plugin load crashes and runs 8 core safety checks (2 optional: deep-config & smoke), prompting you when a plugin changes. Non-commercial source-available.
DSH Desktop 插件安全防护:崩溃后自我修复 + 8 项核心安全检查(另有 2 项可选:深度组合校验、业务冒烟),写完插件自动提示。非商业源可用。
How to install
dsh plugin add github:DingZhiQi5596/dsh-plugin-guard About
dsh-plugin-guard **DSH Desktop 插件安全防护工具** —— 给 DeepSeek Harness 桌面端的本地插件加两道保险: 1. **启动崩溃自我修复**:应用因某个插件加载失败而崩溃后,自动读取 harness.log,识别崩溃原因并分派修复,修好并**验证通过后恢复挂载**。 2. **插件安全验证 + 写完插件自动提示**:对插件做安全检查(8 项核心,另有 2 项可选),全部通过才给出「✅ 可以安全重启」;每次你写完/改完插件,右下角会自动弹出验证提醒,点一下即检。 面向 DSH Desktop 的"本地插件"(profiles/<profile>/node_modules/ 下的目录 + cordis.patch.yml 挂载行)。纯本地,不上传任何数据。 --- 功能一览 | 能力 | 说明 | |---|---| | 启动崩溃自我修复 | 读日志尾部 → 按原因分派修复 → 完整验证 → 恢复挂载 / 安全隔离 | | 插件安全验证 | 8 项核心检查 + 2 项可选(见下),全绿才「可以安全重启」 | | 写完插件自动提示 | 变更检测(内容哈希),右下角胶囊提醒,点击即验证 | | 对话内工具 | plugin_verify / plugin_repair / plugin_guard_status 三个可调用工具 | 安全检查(…
Recommendation signals
Meta
- License
- NOASSERTION
- Language
- JavaScript
- GitHub stars
- 0
- mo. downloads
- –
- Last push
- 2026-08-24
- Created
- 2026-08-22
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
Related plugins
dsh-permission-rules
PerryLink/dsh-permission-rules
Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
dsh-plugin-vetting
truelove-dreamer/dsh-plugin-vetting
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
dsh-webui-auth
Yuuz12/dsh-webui-auth
WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.