Installation
dsh plugin --profile web add github:omdsh-dev/dsh-security-auditCopy
dsh plugin --profile web add dsh-security-audit-*.tgzCopy
dsh plugin --profile web add "C:/path/to/dsh-security-audit"Copy
dsh plugin --profile web add @deepseek-ai/dsh-security-auditCopy
Plugins in this repository web-profile v0.0.1 ✓
web-profile v0.0.1 ✓
@deepseek-ai/dsh-security-audit v0.0.1 ✓
DSH local security audit tool: read-only scans of config, credential metadata, plugin provenance, session structure and network exposure; redacted, reproducible, locatable risk reports
Official core packages (3) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/dsh-invariants>=0.0.1-rc.1 <0.2.0 shared @deepseek-ai/dsh-tools>=0.0.1-rc.1 <0.2.0 shared Paths are pinned to commit d19de278a23b
Overview DSH 本机安全审计插件：配置/插件来源/会话/网络暴露面，只读脱敏风险报告
Repository check result Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.
Static repository check Sep 8, 2026, 9:25 AM High risk
Evidence Score 85/100
Static risk High risk
Files scanned 7
Findings 2 Evidence breakdown Source provenance 25/25
Install documentation 25/25
Maintenance 12/20
Compatibility evidence 20/20
Security signals 3/10
Compatibility confidence: Medium
Install-time scripts (2) prepacknpm run build fixtures/plugins/dsh-tool-eval-fixture/package.json#postinstallnode scripts/install.js Findings (2) Not run Dependency advisory database scan Installation execution test Runtime behavior verification Scanner 1.0.0 · Scorer 1.0.0
