dsh-malware-audit
基于 AST 的已装插件恶意行为扫描：识别动态 eval、跨插件写入、外泄型网络调用等模式，并给出可复核的报告。
Real AST-based scan of installed plugins for malicious-intent patterns (dynamic eval, cross-plugin writes, exfiltration-shaped network calls), with an optional periodic schedule and auto-quarantine on critical findings.
怎么安装
dsh plugin add github:rand0wn/dsh-malware-audit 简介
dsh-malware-audit A DeepSeek Harness (dsh) plugin that scans installed plugins' real syntax trees for patterns shaped like malicious intent — the one thing every other dsh audit tool explicitly declines to do — with an optional periodic schedule and opt-in auto-quarantine on critical findings. Why dsh plugins run with real filesystem and process access, and installing one is a one-line command. Existing audit tools (dsh-security-audit, dsh-plugin-audit) do this well for *capability* — they report that a plugin *can* touch the filesystem, network, or credentials, then explicitly stop short of j…
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 0
- 月下载
- –
- 最近更新
- 2026-08-21
- 创建于
- 2026-08-21
基础安全检查
- 检查结果
- curated 收录但无 npm 包/安装命令
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- cordis, deepseek-harness, dsh-plugin, security
同类推荐
loki-mode
asklokesh/claudeskill-loki-mode
多代理自主 SDLC 框架。从规格到部署应用。PRD、GitHub issue、OpenAPI/JSON/YAML 或一行简报。5 个 AI 提供商，8 个质量门。
deepseek-harness-desktop
dsh-tauri-desk/deepseek-harness-desktop
DeepSeek Harness Tauri 桌面版 | 仅 5MB 安装包，零环境配置，预置插件，支持 Windows / macOS / Linux。