euthyna
面向 AI 编码代理的确定性安全审计事实与结论门禁:euthyna history 把每行被删代码归因到提交并标记安全修复类删除(--origins 追到最初引入者),euthyna coverage 报告哪些改动符号从未被测试调用,euthyna gate 用六道门禁逐条校验结论,拿不出证据的一律降级为观察。
Security-audit facts AI coding agents cannot compute, plus a verdict gate: euthyna history attributes deleted lines to commits and flags those from security fixes (--origins finds the first introducer), euthyna coverage reports which changed symbols no test ever invoked, and euthyna gate checks each finding against six gates, downgrading any without evidence to an observation.
怎么安装
dsh plugin add euthyna git clone https://github.com/slow-stack/euthyna ~/.claude/skills/euthyna npx -y euthyna 简介
**εὔθυνα** — in classical Athens, the audit every outgoing official had to submit. You did not get to simply walk away from office. You handed over your accounts and they were examined. Pass, and you left with your standing intact. Fail, and you faced trial. **euthyna is a code security audit framework for AI coding agents.** It is not another scanner. It does two things: it **produces the facts an agent cannot compute by reading code**, and it **forces every security claim the agent makes through gates before it counts as a finding**. --- 📖 The problem, in plain words When an AI coding agent…
推荐参考
信息
- 协议
- Apache-2.0
- 语言
- JavaScript
- GitHub 星标
- 1
- 月下载
- –
- 最近更新
- 2026-09-24
- 创建于
- 2026-09-19
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- benchmark, claude-code, code-audit, codex, dsh-plugin, git-history, hermes-skills, llm-security, security, security-audit, security-auditing-tool, security-scanner, static-analysis, test-coverage, vulnerability-analysis, zero-dependency
同类推荐
dsh-auto-mode
NanmiCoder/dsh-auto-mode
在 Workspace Write 与 Full access 之间增加 Auto 权限档:日常操作留在官方 workspace-write 沙箱内,由当前会话模型复核升权与破坏性调用,精确的越界访问按次放行一次,意图不明时询问,命中关键路径则拒绝。
dsh-passwords
slywalker2006/dsh-passwords
让 DeepSeek Harness 变成服务器级多租户平台:远程访问 + 自动 HTTPS、子用户权限与配额、沙盒强制、加密认证与审计日志。
sofagent
KongFangXun/sofagent/tree/main/engine/dsh-plugins/cordis-plugin-sofagent-audit
面向 AI 编程 agent 的提交时审计 harness——24 条 git diff 规则(密钥泄漏、越界改动、提示注入)、HMAC 签名审计链、快照回滚、84 工具 MCP server;dsh plugin add 即装。
dsh-vault
Ox0400/dsh-vault
Harness 的本地加密凭据保险库:Web 设置页与 vault_* 工具,可存取与复制密码、API 密钥、TOTP 与银行卡信息,支持健康审计、到期轮换、导入导出以及只读/询问访问模式。