readonly-security-audit

Name: readonly-security-audit
Author: my-dsh-plugin

PluginConfirmed pluginCommunity

my-dsh-plugin/readonly-security-audit · updated 15 days ago

View source ↗

Installation

dsh plugin add --profile

dsh plugin --profile web add dsh-readonly-security-audit

dsh plugin --profile web add github:my-dsh-plugin/readonly-security-audit

Plugins in this repository

dsh-readonly-security-auditv0.1.0✓
【实验性】只读安全审计模式插件（自动只读、工具级白名单、强制交付选择）· EXPERIMENTAL plugin for the read-only security audit mode (auto read-only, tool allowlist gate, mandatory delivery choice)；日常使用推荐 dsh-presets 仓库的原生纯预设版。
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
Official core packages (11)
- @deepseek-ai/cordis^4.0.1shared
- @deepseek-ai/dsh-agent^0.1.0-rc.5shared
- @deepseek-ai/dsh-commands^0.1.0-rc.5shared
- @deepseek-ai/dsh-sandbox^0.1.0-rc.5shared
- @deepseek-ai/dsh-session^0.1.0-rc.5shared
- @deepseek-ai/dsh-system-prompt^0.1.0-rc.5shared
- @deepseek-ai/dsh-user-approval^0.1.0-rc.5shared
- @deepseek-ai/dsh-llm^0.1.0-rc.5private copy
- @deepseek-ai/dsh-sandbox-policy^0.1.0-rc.5private copy
- @deepseek-ai/dsh-tools^0.1.0-rc.5private copy
- @deepseek-ai/dsh-user-questions^0.1.0-rc.5private copy

Paths are pinned to commit c19153846ebb

Overview

DeepSeek Harness 只读安全审计模式 · Read-only security audit mode for DeepSeek Harness

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:42 AM

Medium risk

Checked commit: c19153846ebb
Evidence Score: 80/100
Static risk: Medium risk
Files scanned: 2
Findings: 4

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance12/20

Compatibility evidence8/20

Security signals8/10

Compatibility confidence: Limited

Findings (4)

Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-tools": "^0.1.0-rc.5"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-user-questions": "^0.1.0-rc.5"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-llm": "^0.1.0-rc.5"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.5"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0