dsh-malware-audit
基于 AST 的已装插件恶意行为扫描：识别动态 eval、跨插件写入、外泄型网络调用等模式，并给出可复核的报告。
Real AST-based scan of installed plugins for malicious-intent patterns (dynamic eval, cross-plugin writes, exfiltration-shaped network calls), with an optional periodic schedule and auto-quarantine on critical findings.
怎么安装
dsh plugin add github:rand0wn/dsh-malware-audit 简介
dsh-malware-audit A DeepSeek Harness (dsh) plugin that scans installed plugins' real syntax trees for patterns shaped like malicious intent — the one thing every other dsh audit tool explicitly declines to do — with an optional periodic schedule and opt-in auto-quarantine on critical findings. Why dsh plugins run with real filesystem and process access, and installing one is a one-line command. Existing audit tools (dsh-security-audit, dsh-plugin-audit) do this well for *capability* — they report that a plugin *can* touch the filesystem, network, or credentials, then explicitly stop short of j…
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 0
- 月下载
- –
- 最近更新
- 2026-08-21
- 创建于
- 2026-08-21
基础安全检查
- 检查结果
- curated 收录但无 npm 包/安装命令
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- cordis, deepseek-harness, dsh-plugin, security
同类推荐
langfuse
langfuse/langfuse
🪢 开源AI工程平台：LLM评估、可观测性、指标、提示管理、游乐场、数据集。与OpenTelemetry、LangChain、OpenAI SDK、LiteLLM等集成。🍊YC W23