安装方式
dsh plugin --profile cyber-sec add ./dist/复制
dsh plugin --profile web add dsh-cyber-sec复制
dsh plugin --profile web add github:cyzlmh/dsh-cyber-sec复制
仓库内包含的插件 @dsh-cyber-sec/bundle v0.0.1 ✓
cyber-sec profile bundle: container bash backend + evidence domain + bundled skills + 7 specialist delegations over dsh-base/dsh-headless
官方核心包 (3) @deepseek-ai/dsh-code-runtime-worker* 共享 @deepseek-ai/dsh-headless* 共享 @deepseek-ai/dsh-tool-subagent* 共享 @dsh-cyber-sec/bundle-redteam v0.0.1
cyber-sec profile bundle (redteam opt-in): same composition layer as @dsh-cyber-sec/bundle but pins cyber-skills to the redteam profile (full skill set incl. high-risk). Install INSTEAD of bundle, never both.
dsh.bundle.patch —官方核心包 (3) @deepseek-ai/dsh-code-runtime-worker* 共享 @deepseek-ai/dsh-headless* 共享 @deepseek-ai/dsh-tool-subagent* 共享 @dsh-cyber-sec/plugins v0.0.1
dsh-cyber-sec harness plugins: container bash executor, evidence store, bundled skills (compiled lib/, dsh deps via peerDependencies injected by host)
dsh.bundle.patch —官方核心包 (9) @deepseek-ai/cordis* 共享 @deepseek-ai/dsh-bash-local* 共享 @deepseek-ai/dsh-sandbox* 共享 @deepseek-ai/dsh-session* 共享 @deepseek-ai/dsh-shell* 共享 @deepseek-ai/dsh-skill* 共享 @deepseek-ai/dsh-system-prompt* 共享 @deepseek-ai/dsh-tools* 共享 @deepseek-ai/schemastery* 共享 路径固定于提交 38bf8a07aa74
概览 Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents
仓库检查结果 结果绑定到所列 commit,仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度,不是兼容性百分比,也不构成安全保证。
证据分 85/100
静态风险 高风险
扫描文件 5
检查发现 2 证据分项 来源溯源 25/25
安装文档 25/25
维护状况 12/20
兼容性证据 20/20
安全信号 3/10
兼容性置信度: 中等
安装期脚本 (1) plugins/package.json#prepackpnpm run build 检查发现 (2) 高 install.script
plugins/package.jsoninstall-time "prepack": "pnpm run build"高 shell.rm-rf
plugins/package.json:34dangerous-shell "build": "tsc -p tsconfig.json && rm -rf lib/cyber-skills/skills && cp -R cyber-skills/skills lib/cyber-skills/skills",扫描器 1.0.0 · 评分器 1.0.0