unStone/dsh-xray-plugin

README 摘要

dsh-xray-plugin Ask what a dsh plugin can actually do — without leaving your agent. English · 简体中文 Companion plugin for dsh-xray, which statically scans every repository under the dsh-plugin topic and publishes a capability card for each. Why A dsh plugin is arbitrary code inside your agent runtime. It can rewrite your system prompt, intercept API traffic, spawn subprocesses, read GITHUB TOKEN from your environment, or patch the runtime itself — and nothing in the install path tells you which. dsh has no plugin-level permission declaration, so there is nothing to read even if you look. This plugin puts the answer where the question comes up: in the agent, at the moment you are deciding. Tools Tool What it does dsh xray check Capability card for one plugin: injected services, hooks, runtime patches, credential-class env reads, install-time scripts — each with file:line evidence. dsh xray audit Summary across several plugins, e.g. the ones you have installed: how many carry powerful capability, which patch the runtime, which read credentials. Ask your agent naturally: Is tt-a1i/archify safe to install? Audit the plugins I have installed. Capability levels C0 no notable surface · C1 o…

分类