MkaliezZ/dsh-plugin-firewall

MkaliezZ★ 0TypeScriptLast synced: 2026-08-15

Open on GitHub

Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.

README excerpt

dsh-plugin-firewall Offline-first static admission scanner for DeepSeek Harness community plugins. /plugin-firewall inspects a local plugin package before you trust it. v0.1 looks for package install scripts, git/URL dependencies, native addons, Cordis/profile patches, tool registration, process/network/filesystem/environment access indicators, and emits a deterministic risk receipt with a SHA-256 digest. v0.1 goals - no network calls or vulnerability database; - deterministic local analysis; - explicit LOW / MEDIUM / HIGH findings; - JSON-safe receipt with digest; - never executes the scanned plugin; - does not claim malware detection or complete supply-chain safety. Development License MIT

View full README on GitHub →
Agentsagent-toolingdeepseek-harnessdeveloper-toolsdsh-pluginsecuritytypescript

Category