dsh-reviewer-bot

Name: dsh-reviewer-bot
Author: chaojixinren

PluginConfirmed pluginCommunity

chaojixinren/dsh-reviewer-bot · updated 18 days ago

View source ↗

Installation

dsh plugin --profile <name> add @dshrb/bundle

dsh plugin --profile <name> add examples/

dsh plugin --profile web add @dshrb/root

dsh plugin --profile web add github:chaojixinren/dsh-reviewer-bot

Plugins in this repository

@dshrb/bundlev0.1.6✓
DSH bundle: installs DSH Reviewer Bot into a profile with `dsh plugin --profile <name> add`.
package.json
bundle/package.json
dsh.bundle.patch
bundle/cordis.patch.yml
Official core packages (1)
- @deepseek-ai/dsh0.1.0-rc.6shared
@dshrb/configv0.1.5
Shared dshrb runtime configuration owning the dshrb settings namespace.
package.json
packages/core/config/package.json
dsh.bundle.patch
—
Official core packages (4)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-settings0.1.0-rc.6shared
- @deepseek-ai/dsh-typert-protocol0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/progressv0.1.5
Sticky progress comment lifecycle reporter.
package.json
packages/core/progress/package.json
dsh.bundle.patch
—
Official core packages (3)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-session0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/resultsv0.1.0
DSH WebUI results panel: view and ingest dshrb review result-json in the Web UI.
package.json
packages/core/results/package.json
dsh.bundle.patch
—
Official core packages (3)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-typert-protocol0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/review-runtimev0.1.5
The eight-stage review pipeline orchestrator.
package.json
packages/core/review-runtime/package.json
dsh.bundle.patch
—
Official core packages (9)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-fs0.1.0-rc.6shared
- @deepseek-ai/dsh-llm0.1.0-rc.6shared
- @deepseek-ai/dsh-sandbox0.1.0-rc.6shared
- @deepseek-ai/dsh-sandbox-policy0.1.0-rc.6shared
- @deepseek-ai/dsh-subagent0.1.0-rc.6shared
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6shared
- @deepseek-ai/dsh-tools0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/runtime-bootstrapv0.1.5
Boots the Cordis container + plugin chain + LLM agent loop into a runnable entrypoint.
package.json
packages/core/runtime-bootstrap/package.json
dsh.bundle.patch
—
Official core packages (19)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-agent0.1.0-rc.6private copy
- @deepseek-ai/dsh-agent-default-model0.1.0-rc.6private copy
- @deepseek-ai/dsh-agent-loop0.1.0-rc.6private copy
- @deepseek-ai/dsh-credentials-local0.1.0-rc.6private copy
- @deepseek-ai/dsh-fs-sandbox0.1.0-rc.6private copy
- @deepseek-ai/dsh-llm0.1.0-rc.6private copy
- @deepseek-ai/dsh-llm-deepseek0.1.0-rc.6private copy
- @deepseek-ai/dsh-sandbox0.1.0-rc.6private copy
- @deepseek-ai/dsh-sandbox-policy0.1.0-rc.6private copy
- @deepseek-ai/dsh-session0.1.0-rc.6private copy
- @deepseek-ai/dsh-session-projection0.1.0-rc.6private copy
- @deepseek-ai/dsh-settings-file0.1.0-rc.6private copy
- @deepseek-ai/dsh-subagent0.1.0-rc.6private copy
- @deepseek-ai/dsh-subagent-spawn-in-process0.1.0-rc.6private copy
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6private copy
- @deepseek-ai/dsh-tools0.1.0-rc.6private copy
- @deepseek-ai/dsh-typert-registry0.1.0-rc.6private copy
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/trust-policyv0.1.5
Actor permission to TrustLevel resolution and tool execution gating.
package.json
packages/core/trust-policy/package.json
dsh.bundle.patch
—
Official core packages (4)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6shared
- @deepseek-ai/dsh-tools0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/signature-probev0.1.0
Upstream signature validation. Typechecks and loads against real DSH types to prove the extension-point contracts the other packages assume.
package.json
packages/probe/signature-probe/package.json
dsh.bundle.patch
—
Official core packages (3)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-tools0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy
@dshrb/tool-reviewv0.1.5
Model-facing review tools registered on ctx.tools.
package.json
packages/tools/tool-review/package.json
dsh.bundle.patch
—
Official core packages (4)
- @deepseek-ai/cordis4.0.1shared
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6shared
- @deepseek-ai/dsh-tools0.1.0-rc.6shared
- @deepseek-ai/schemastery3.18.1private copy

Paths are pinned to commit 90e1906b3e00

Overview

原生 DeepSeek Harness 插件形态的代码评审机器人：跨代码平台、规则可插拔、可本地重放。

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Aug 21, 2026, 5:29 PM

High risk

Checked commit: 90e1906b3e00
Evidence Score: 80/100
Static risk: High risk
Files scanned: 21
Findings: 38

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance17/20

Compatibility evidence5/20

Security signals8/10

Compatibility confidence: Limited

Findings (38)

Highshell.rm-rf
package.json:22dangerous-shell
```
"clean": "rm -rf packages/*/*/lib",
```
Mediumcredentials.env-secret
bundle/cordis.patch.yml:25credential-access
```
githubToken: !!js process.env.FORGE_TOKEN
```
Mediumcredentials.env-secret
bundle/cordis.patch.yml:26credential-access
```
gitlabToken: !!js process.env.FORGE_GITLAB_TOKEN
```
Mediumdeps.core-package-installed
packages/core/config/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/forge/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/progress/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/results/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/review-core/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/review-runtime/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/rule-registry/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-session": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-typert-registry": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-sandbox": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-fs-sandbox": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-sandbox-policy": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-tools": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-system-prompt": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-llm": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-llm-deepseek": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-credentials-local": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-settings-file": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-session-projection": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-subagent": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent-default-model": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent-loop": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent": "0.1.0-rc.6"
```
Mediumdeps.core-package-installed
packages/core/trust-policy/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/drivers/driver-action/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/drivers/driver-cli/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/drivers/driver-webhook/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/forge/forge-github/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/forge/forge-gitlab/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/forge/forge-local/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/probe/signature-probe/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/rules/rules-baseline/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
Mediumdeps.core-package-installed
packages/tools/tool-review/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0