dsh-auto-review

Name: dsh-auto-review
Author: PerryLink

插件已确认插件社区发布

PerryLink/dsh-auto-review · 今天更新

查看源码 ↗

安装方式

dsh plugin --profile web add "github:PerryLink/dsh-auto-review#main"

dsh plugin --profile web add dsh-auto-review

dsh plugin --profile web add ./dsh-auto-review-

dsh plugin --profile web add github:PerryLink/dsh-auto-review

仓库内包含的插件

dsh-auto-reviewv0.10.6✓
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.
homepage
https://github.com/PerryLink/dsh-auto-review#readme ↗
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
官方核心包 (31)
- @deepseek-ai/cordis^4.0.2共享
- @deepseek-ai/dsh-agent>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-brand>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-client-connection>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-client-locale>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-client-ui-conversation>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-client-ui-slots>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-commands>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-invariants>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-llm>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-session>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-session-projection>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-subagent>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-tools>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/dsh-user-approval>=0.1.2-rc.1 <0.2.0共享
- @deepseek-ai/schemastery^3.18.2共享
- @deepseek-ai/dsh-app-boot0.1.2-rc.1私有副本
- @deepseek-ai/dsh-credentials-local0.1.2-rc.1私有副本
- @deepseek-ai/dsh-fs-observation-policy0.1.2-rc.1私有副本
- @deepseek-ai/dsh-fs-sandbox0.1.2-rc.1私有副本
- @deepseek-ai/dsh-home-paths0.1.2-rc.1私有副本
- @deepseek-ai/dsh-llm-deepseek0.1.2-rc.1私有副本
- @deepseek-ai/dsh-sandbox-local0.1.2-rc.1私有副本
- @deepseek-ai/dsh-sandbox-policy0.1.2-rc.1私有副本
- @deepseek-ai/dsh-session-persistence-jsonl0.1.2-rc.1私有副本
- @deepseek-ai/dsh-settings-file0.1.2-rc.1私有副本
- @deepseek-ai/dsh-subagent-fork-in-process0.1.2-rc.1私有副本
- @deepseek-ai/dsh-subagent-spawn-in-process0.1.2-rc.1私有副本
- @deepseek-ai/dsh-subprocess-local0.1.2-rc.1私有副本
- @deepseek-ai/dsh-tool-fs0.1.2-rc.1私有副本
- @deepseek-ai/dsh-tool-fs-search0.1.2-rc.1私有副本
未命名插件
package.json
—
dsh.bundle.patch
demo/cordis.patch.yml

路径固定于提交 9411cbd8439e

概览

Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).

仓库检查结果

结果绑定到所列 commit，仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度，不是兼容性百分比，也不构成安全保证。

仓库静态检查

2026年9月8日 09:22

高风险

检查 Commit: 9411cbd8439e
证据分: 79/100
静态风险: 高风险
扫描文件: 4
检查发现: 18

证据分项

来源溯源25/25

安装文档25/25

维护状况18/20

兼容性证据8/20

安全信号3/10

兼容性置信度: 有限

安装期脚本 (1)

preparenode scripts/prepare.mjs

检查发现 (18)

高install.script
package.jsoninstall-time
```
"prepare": "node scripts/prepare.mjs"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-subprocess-local": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-tool-fs": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-tool-fs-search": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-sandbox-policy": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-sandbox-local": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-llm-deepseek": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-home-paths": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-fs-sandbox": "0.1.2-rc.1"
```

中deps.core-package-installed

package.jsondependencies

"@deepseek-ai/dsh-fs-observation-policy": "0.1.2-rc.1"

中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-credentials-local": "0.1.2-rc.1"
```
中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-app-boot": "0.1.2-rc.1"
```

中deps.core-package-installed

package.jsondependencies

"@deepseek-ai/dsh-session-persistence-jsonl": "0.1.2-rc.1"

中deps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-settings-file": "0.1.2-rc.1"
```

中deps.core-package-installed

package.jsondependencies

"@deepseek-ai/dsh-subagent-fork-in-process": "0.1.2-rc.1"

中deps.core-package-installed

package.jsondependencies

"@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.2-rc.1"

中obfuscation.child-process
scripts/prepare.mjs:7obfuscation
```
import { spawnSync } from 'node:child_process'
```

中obfuscation.child-process

scripts/prepare.mjs:24obfuscation

const result = spawnSync(process.execPath, [bin, ...args], { stdio: 'inherit' })

未执行的检查

依赖漏洞数据库扫描
实际安装测试
运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0