dsh-plugin-guard
DSH 插件门禁 + 诊所：安装前后静态审计、哈希锁定、同类搜索、机械清理。绝不执行目标插件。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:taxueseek/dsh-plugin-guard#63b402d0cd589a87f3f9bb27ec3120ad20b2a0d5Plugin Guard 以 dsh-plugin-guard 发布，当前版本为 0.3.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
One plugin, two surfaces. Static analysis only — never executes the target plugin.
| Surface | Tool | Job |
|---|---|---|
| Gate | plugin_audit | Static audit before install |
| Gate | plugin_verify | Hash + capability lock after install |
| Clinic | plugin_peers | Local fingerprint peers; query searches GitHub topic:dsh-plugin |
| Clinic | plugin_detox | Mechanical amputation, not an equivalent rewrite |
plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh web
Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.
P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.
MIT