dsh-plugin-vet

仓库内包含的插件

• @jieai/dsh-plugin-vetv0.2.6✓

  Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.

  homepage

  https://github.com/wulun811/dsh-plugin-vet#readme ↗

  package.json

  package.json

  dsh.bundle.patch

  cordis.patch.yml

  官方核心包 (6)

  • @deepseek-ai/cordis^4.0.1共享
  • @deepseek-ai/dsh-invariants^0.1.1-rc.1共享
  • @deepseek-ai/dsh-llm^0.1.1-rc.1共享
  • @deepseek-ai/dsh-session^0.1.1-rc.1共享
  • @deepseek-ai/dsh-tools^0.1.1-rc.1共享
  • @deepseek-ai/schemastery^3.18.1私有副本

路径固定于提交 6ab9ed9b988a

概览

Trust pipeline for deepseek-harness plugins: deterministic static scan (11 rules) + LLM-driven audit protocol + two-part scorecard, with optional runtime guard (T1 sentinel / T2 fs & child_process hooks) and honeypot decoys. Monitor-and-alert only — vet never blocks or kills on its own.