dshplugin-me/dsh-plugin-radar

README 摘要

dsh-plugin-radar Find · Vet · Install — DSH plugins, with a security scan before anything touches your profile. English 简体中文 Ask DSH "is there a plugin that can…" and this plugin searches the live dsh-plugin GitHub topic with server-side keyword filtering, cross-checks candidates against two curated registries, then runs a pre-install security scan — lifecycle scripts, external domains, subprocesses, credential reads, prompt injection — reports findings either way, and only installs after you say go. It also works in reverse: already eyeing a plugin? Ask "is XX safe to install?" and it runs the same checklist and hands you the report. Install As a DSH bundle (recommended) No global dsh on your PATH? npx -y @deepseek-ai/dsh plugin --profile web add … works the same. Running dsh from a source checkout instead? Use pnpm dsh plugin … from the checkout root. Swap web for whichever profile you boot. The pinned ref is deliberate: without it a git install runs whatever main points at right now, and a later push would silently change what mounts in your profile. Any commit sha works in place of the tag — if you want to pin something the maintainers cannot move. Plain JavaScript, zero build …

分类