dsh-cyber-sec

Name: dsh-cyber-sec
Author: cyzlmh

PluginConfirmed pluginCommunity

cyzlmh/dsh-cyber-sec · updated 14 days ago

View source ↗

Installation

dsh plugin --profile cyber-sec add ./dist/

dsh plugin --profile web add dsh-cyber-sec

dsh plugin --profile web add github:cyzlmh/dsh-cyber-sec

Plugins in this repository

@dsh-cyber-sec/bundlev0.0.1✓
cyber-sec profile bundle: container bash backend + evidence domain + bundled skills + 7 specialist delegations over dsh-base/dsh-headless
package.json
bundle/package.json
dsh.bundle.patch
bundle/cordis.patch.yml
Official core packages (3)
- @deepseek-ai/dsh-code-runtime-worker*shared
- @deepseek-ai/dsh-headless*shared
- @deepseek-ai/dsh-tool-subagent*shared
@dsh-cyber-sec/bundle-redteamv0.0.1
cyber-sec profile bundle (redteam opt-in): same composition layer as @dsh-cyber-sec/bundle but pins cyber-skills to the redteam profile (full skill set incl. high-risk). Install INSTEAD of bundle, never both.
package.json
bundle-redteam/package.json
dsh.bundle.patch
—
Official core packages (3)
- @deepseek-ai/dsh-code-runtime-worker*shared
- @deepseek-ai/dsh-headless*shared
- @deepseek-ai/dsh-tool-subagent*shared
@dsh-cyber-sec/pluginsv0.0.1
dsh-cyber-sec harness plugins: container bash executor, evidence store, bundled skills (compiled lib/, dsh deps via peerDependencies injected by host)
package.json
plugins/package.json
dsh.bundle.patch
—
Official core packages (9)
- @deepseek-ai/cordis*shared
- @deepseek-ai/dsh-bash-local*shared
- @deepseek-ai/dsh-sandbox*shared
- @deepseek-ai/dsh-session*shared
- @deepseek-ai/dsh-shell*shared
- @deepseek-ai/dsh-skill*shared
- @deepseek-ai/dsh-system-prompt*shared
- @deepseek-ai/dsh-tools*shared
- @deepseek-ai/schemastery*shared

Paths are pinned to commit 38bf8a07aa74

Overview

Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:30 AM

High risk

Checked commit: 38bf8a07aa74
Evidence Score: 85/100
Static risk: High risk
Files scanned: 5
Findings: 2

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance12/20

Compatibility evidence20/20

Security signals3/10

Compatibility confidence: Medium

Install-time scripts (1)

plugins/package.json#prepackpnpm run build

Findings (2)

Highinstall.script
plugins/package.jsoninstall-time
```
"prepack": "pnpm run build"
```

Highshell.rm-rf

plugins/package.json:34dangerous-shell

"build": "tsc -p tsconfig.json && rm -rf lib/cyber-skills/skills && cp -R cyber-skills/skills lib/cyber-skills/skills",

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0