jiejiushijiehaohao-creator/deepseek-preset-github-plugin-security-review ↗★ 0
dsh-preset-github-plugin-security-review
DSH agent preset: a two-role (recon scout -> security auditor) pipeline that statically reviews plugin source downloaded from GitHub. Never installs, never executes, and never runs any code from the reviewed repository. 适合在安装第三方插件前，需要进行安全合规性静态检查、防范恶意代码的用户。
Install
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:jiejiushijiehaohao-creator/deepseek-preset-github-plugin-security-reviewREADME
Read the full README ↗3. Usage
Give it either a local directory or a local ZIP:
review
\some-plugin ← already-extracted directory
review
\some-plugin.zip ← local ZIP (the scout extracts it to temp)
A ZIP direct URL also works (curl -L -o then extract) — but on a machine whose shell has no internet it will fail and report BLOCKED, so a local ZIP is preferred.
A GitHub web URL cannot be used directly: this pipeline forbids
git clone, anygitsubcommand, and any Git hook. Go the ZIP route.
The captain calls recon_scout, then security_auditor, then hands you: