DeepSeek HarnessHub
플러그인 제출

jkrandom-sudo/dsh-plugin-audit ↗★ 5

dsh-plugin-audit

Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins

AI 분석

核心用途是评估和监控第三方插件的安全性。适合对本地安装的插件有安全顾虑，需要静态扫描网络暴露面或在运行时限制网络外发的用户。

other
패키지
dsh-plugin-audit
버전
0.1.4
라이선스
MIT
최근 업데이트
2026. 8. 28.

설치

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:jkrandom-sudo/dsh-plugin-audit

문서

전체 README 읽기 ↗

Configuration

The bundle patch inserts one row into the profile; edit it in the profile's cordis.patch.yml:

- id: dsh-plugin-audit
  name: 'dsh-plugin-audit'
  config:
    sentinelEnabled: true        # master switch; false = static audit only
    allowedHosts:                # pre-approved hosts for shell egress
      - github.com
      - api.github.com
      - raw.githubusercontent.com
      - registry.npmjs.org
      - '*.deepseek.com'         # leading *. = suffix rule (also matches the bare domain)

The static scanner takes no configuration and ignores allowedHosts — it reports every network surface it finds.