DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security Audit — DSH Plugin for DeepSeek Harness
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in
← Plugins

dsh-security-audit

Security Audit

Autonomous six-phase security audit engine for DSH: vendored cloudflare/security-audit-skill + sandboxed execution + subagent orchestration

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add dsh-security-audit@0.1.1
READMECompatibilityVersions

Compatibility and provenance

Security Audit is published as dsh-security-audit and currently resolves to version 0.1.1. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
any
Release source
npm
Registry updated
10/12/2026

Versions

0.1.1stable
10/12/2026
0.1.0stable
9/22/2026

Related plugins

Loading related plugins…

Latest
0.1.1
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
Unavailable
Files
Unavailable
Surface
any
License
Not declared
Source
npm
GitHub
★ 0
Weekly downloads
0
View source ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue

Related plugins

More verified plugins in security-access.

Cc Safety Netcc-safety-netA coding agent CLI hook - block destructive commands and secret file accessDoctor@linxin666/dsh-doctorTransactional rescue mode for DSH profiles with a supervised launcher, isolated recovery capsule, deterministic repairs, health monitoring, and a local Web recovery consoleMobiledsh-mobileDeepSeek Harness mobile adaptation and secure access plugin, supporting LAN, remote connections, Android App, and mobile browsers.Codex Subscriptiondsh-codex-subscriptionUse ChatGPT and Codex subscriptions in DeepSeek Harness with OAuth, quota, safe resets, web search, images, and Fast mode

README

dsh-security-audit

将 cloudflare/security-audit-skill 从 "prompt 技能 + 手工沙箱"升级为自治编排的 DSH plugin。

UX 目标：一句话发起 → 面板看进度 → 结束收报告。

设计文档见 docs/dsh-plugin-design.md（已对齐的全部决策记录）， DSH 插件 API 调研笔记见 docs/dsh-plugin-api-notes.md。

目录

dsh-cf-sas/
├── package.json            # dsh.bundle 声明
├── cordis.patch.yml        # 插件服务插入层
├── src/                    # 引擎、SandboxDriver、tools、面板渲染（源码）
├── lib/                    # 编译产物（插件实际加载的入口）
├── vendor/skills/security-audit/   # 上游 skill 原样 vendored（只读规程源 + validator）
├── assets/sandbox/         # 沙箱镜像与执行脚本（hypatia run-1 已验证的严格配置）
├── assets/install-scripts/ # probe 缺口的声明式安装脚本（可审计）
└── docs/

版本切分

版本范围
v1本地 Docker (mac/win) + Linux gVisor/runc 自动选择；单执行位置；probe→授权→修复；ledger/validator/晋升全代码化；面板三视图 + 报告三形态；subagent 编排引擎
v1.5远程 SSH 执行位置（用户自备主机）；git bundle 传输；全局出域开关生效
v2混合调度（unit 级能力匹配派发）；远端容器池并行；增量审计向导

原则

  • 上游 skill 原样 vendored、只读引用；产物契约与上游完全兼容。
  • 沙箱缺席是正常路径不是错误路径：控制不齐 → 相关检查降级 needs_validation。
  • 白名单产物晋升，永不裸拷贝（SKILL.md 的 10 步 race-safe 晋升 100% 代码化）。
  • 预算是硬闸门；SKILL.md 纪律翻译为引擎不变量，违反即 bug。