dsh-reviewer-bot

Name: dsh-reviewer-bot
Author: chaojixinren

插件已确认插件社区发布

chaojixinren/dsh-reviewer-bot · 18 天前更新

查看源码 ↗

安装方式

dsh plugin --profile <name> add @dshrb/bundle

dsh plugin --profile <name> add examples/

dsh plugin --profile web add @dshrb/root

dsh plugin --profile web add github:chaojixinren/dsh-reviewer-bot

仓库内包含的插件

@dshrb/bundlev0.1.6✓
DSH bundle: installs DSH Reviewer Bot into a profile with `dsh plugin --profile <name> add`.
package.json
bundle/package.json
dsh.bundle.patch
bundle/cordis.patch.yml
官方核心包 (1)
- @deepseek-ai/dsh0.1.0-rc.6共享
@dshrb/configv0.1.5
Shared dshrb runtime configuration owning the dshrb settings namespace.
package.json
packages/core/config/package.json
dsh.bundle.patch
—
官方核心包 (4)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-settings0.1.0-rc.6共享
- @deepseek-ai/dsh-typert-protocol0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/progressv0.1.5
Sticky progress comment lifecycle reporter.
package.json
packages/core/progress/package.json
dsh.bundle.patch
—
官方核心包 (3)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-session0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/resultsv0.1.0
DSH WebUI results panel: view and ingest dshrb review result-json in the Web UI.
package.json
packages/core/results/package.json
dsh.bundle.patch
—
官方核心包 (3)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-typert-protocol0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/review-runtimev0.1.5
The eight-stage review pipeline orchestrator.
package.json
packages/core/review-runtime/package.json
dsh.bundle.patch
—
官方核心包 (9)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-fs0.1.0-rc.6共享
- @deepseek-ai/dsh-llm0.1.0-rc.6共享
- @deepseek-ai/dsh-sandbox0.1.0-rc.6共享
- @deepseek-ai/dsh-sandbox-policy0.1.0-rc.6共享
- @deepseek-ai/dsh-subagent0.1.0-rc.6共享
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6共享
- @deepseek-ai/dsh-tools0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/runtime-bootstrapv0.1.5
Boots the Cordis container + plugin chain + LLM agent loop into a runnable entrypoint.
package.json
packages/core/runtime-bootstrap/package.json
dsh.bundle.patch
—
官方核心包 (19)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-agent0.1.0-rc.6私有副本
- @deepseek-ai/dsh-agent-default-model0.1.0-rc.6私有副本
- @deepseek-ai/dsh-agent-loop0.1.0-rc.6私有副本
- @deepseek-ai/dsh-credentials-local0.1.0-rc.6私有副本
- @deepseek-ai/dsh-fs-sandbox0.1.0-rc.6私有副本
- @deepseek-ai/dsh-llm0.1.0-rc.6私有副本
- @deepseek-ai/dsh-llm-deepseek0.1.0-rc.6私有副本
- @deepseek-ai/dsh-sandbox0.1.0-rc.6私有副本
- @deepseek-ai/dsh-sandbox-policy0.1.0-rc.6私有副本
- @deepseek-ai/dsh-session0.1.0-rc.6私有副本
- @deepseek-ai/dsh-session-projection0.1.0-rc.6私有副本
- @deepseek-ai/dsh-settings-file0.1.0-rc.6私有副本
- @deepseek-ai/dsh-subagent0.1.0-rc.6私有副本
- @deepseek-ai/dsh-subagent-spawn-in-process0.1.0-rc.6私有副本
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6私有副本
- @deepseek-ai/dsh-tools0.1.0-rc.6私有副本
- @deepseek-ai/dsh-typert-registry0.1.0-rc.6私有副本
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/trust-policyv0.1.5
Actor permission to TrustLevel resolution and tool execution gating.
package.json
packages/core/trust-policy/package.json
dsh.bundle.patch
—
官方核心包 (4)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6共享
- @deepseek-ai/dsh-tools0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/signature-probev0.1.0
Upstream signature validation. Typechecks and loads against real DSH types to prove the extension-point contracts the other packages assume.
package.json
packages/probe/signature-probe/package.json
dsh.bundle.patch
—
官方核心包 (3)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-tools0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本
@dshrb/tool-reviewv0.1.5
Model-facing review tools registered on ctx.tools.
package.json
packages/tools/tool-review/package.json
dsh.bundle.patch
—
官方核心包 (4)
- @deepseek-ai/cordis4.0.1共享
- @deepseek-ai/dsh-system-prompt0.1.0-rc.6共享
- @deepseek-ai/dsh-tools0.1.0-rc.6共享
- @deepseek-ai/schemastery3.18.1私有副本

路径固定于提交 90e1906b3e00

概览

原生 DeepSeek Harness 插件形态的代码评审机器人：跨代码平台、规则可插拔、可本地重放。

仓库检查结果

结果绑定到所列 commit，仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度，不是兼容性百分比，也不构成安全保证。

仓库静态检查

2026年8月21日 17:29

高风险

检查 Commit: 90e1906b3e00
证据分: 80/100
静态风险: 高风险
扫描文件: 21
检查发现: 38

证据分项

来源溯源25/25

安装文档25/25

维护状况17/20

兼容性证据5/20

安全信号8/10

兼容性置信度: 有限

检查发现 (38)

高shell.rm-rf
package.json:22dangerous-shell
```
"clean": "rm -rf packages/*/*/lib",
```
中credentials.env-secret
bundle/cordis.patch.yml:25credential-access
```
githubToken: !!js process.env.FORGE_TOKEN
```
中credentials.env-secret
bundle/cordis.patch.yml:26credential-access
```
gitlabToken: !!js process.env.FORGE_GITLAB_TOKEN
```
中deps.core-package-installed
packages/core/config/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/forge/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/progress/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/results/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/review-core/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/review-runtime/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/rule-registry/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-session": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-typert-registry": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-sandbox": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-fs-sandbox": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-sandbox-policy": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-tools": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-system-prompt": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-llm": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-llm-deepseek": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-credentials-local": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-settings-file": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-session-projection": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-subagent": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent-default-model": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent-loop": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/runtime-bootstrap/package.jsondependencies
```
"@deepseek-ai/dsh-agent": "0.1.0-rc.6"
```
中deps.core-package-installed
packages/core/trust-policy/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/drivers/driver-action/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/drivers/driver-cli/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/drivers/driver-webhook/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/forge/forge-github/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/forge/forge-gitlab/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/forge/forge-local/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/probe/signature-probe/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/rules/rules-baseline/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```
中deps.core-package-installed
packages/tools/tool-review/package.jsondependencies
```
"@deepseek-ai/schemastery": "3.18.1"
```

未执行的检查

依赖漏洞数据库扫描
实际安装测试
运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0