dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zoahdev/dsh-poison-guard说明文档
阅读完整 README ↗Usage