ACEMaravilla/dsh-plugin-market

README 摘要

dsh-plugin-market English 中文 Model-facing plugin marketplace for DeepSeek Harness: plugin search , plugin vet , plugin report , and plugin install — the discover → vet → report → install flow for community plugins. - plugin search — finds candidates on the official platforms (GitHub dsh-plugin topic, npm registry, awesome-list READMEs), ranks them by term-based relevance (0-100), and enriches the top 2-3 with README-derived functional summaries and install hints. - plugin vet — static security-risk assessment per candidate: install-time remote code, obfuscation, arbitrary code execution, credential reads, exfiltration, unsafe filesystem access, and supply-chain signals. Returns risk level ( low / medium / high / unknown ), safety score (0-100), and the findings. - plugin report — deterministic comparison report (function, install flow, relevance score, security) plus a user-questions-based choice when a provider is registered. - plugin install — runs dsh plugin --profile add through the shell seam after strict specifier validation, and returns the activation row for the profile composition. All network access goes through the ctx.web capability seam; installation uses the optional …

分类