dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
AI 분석
在安装第三方 DSH 插件前进行静态安全扫描。适合注重系统安全的用户，用于防范恶意脚本、凭据窃取及混淆代码等供应链攻击。
설치
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zoahdev/dsh-poison-guardUsage