dsh-plugin-audit

What it does

Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计：静态权限画像（附文件/行号证据）+ 运行时哨兵，触及凭证或向未知主机外发数据时先请你批准

Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计：静态权限画像（附文件/行号证据）+ 运行时哨兵，触及凭证或向未知主机外发数据时先请你批准 Not yet verified — install and test it yourself.

“Untested” means our automated CI has not yet installed this plugin. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.

Install

This plugin is GitHub source (not published to npm) — install it straight from the repo:

dsh plugin --profile web add github:jkrandom-sudo/dsh-plugin-audit

1. Install pnpm once: npm install -g pnpm.
2. Add it from GitHub: dsh plugin --profile web add github:jkrandom-sudo/dsh-plugin-audit.
3. Restart dsh web.

Note: plugins that ship a prepare build script may prompt pnpm to allow the build — add the key it prints under allowBuilds in pnpm-workspace.yaml, then re-run.

Test report

Not yet verified — install and test it yourself.

Repository

github.com/jkrandom-sudo/dsh-plugin-audit ↗

Share this badge

Paste this into your README — it links back to this page and updates automatically when our test status changes:

[![dshbase listed](https://dshbase.com/badges/dsh-plugin-audit.svg)](https://dshbase.com/plugins/dsh-plugin-audit/)

Copy badge markdown

More in Security

Browse all 1912 plugins →