ateen18/dsh-plugin-security-review

README 摘要

dsh-plugin-security-review A security review plugin for DeepSeek Harness (dsh) plugins. Once installed, every other plugin is statically reviewed before it is installed or loaded: dangerous code, vulnerabilities, and supply-chain risks are analyzed, a review report is produced, and an install recommendation is given. At runtime it keeps auditing the installed roster and disables dangerous plugins. See README.zh.md for the Chinese quick start. Full user guides : - English: docs/USER GUIDE.en.md - 中文（简体）: docs/使用说明.md Three layers Layer When What it does 1. Install gate before install ( dsh-safe-plugin add ) downloads source without running any install scripts , analyzes it, prints the report; block refuses the install, warn needs confirmation, pass forwards to dsh plugin add --ignore-scripts 2. Runtime gate after dsh boots audits every out-of-tree plugin in the profile (cached); block ed plugins are disabled via loader.update(id,{disabled:true}) and written into a managed disabled: true block in the profile's cordis.patch.yml , so their code is never imported on the next boot 3. In-session tools during sessions security review / security review status tools review any plugin/source …

分类