dsh-plugin-trustlens
DSH 插件安全审查：静态扫描 + 当前会话模型语义审查 + 用户确认
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Mengshang-spec/dsh-plugin-trustlens#216787ade8e4896355d3ae4d64f4c5f48627344aPlugin Trustlens 以 dsh-plugin-trustlens 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →dsh-plugin-trustlens is a DeepSeek Harness plugin that reviews installed plugins before a user enables or updates them.
It combines:
commentConflicts.The auditor never requires, imports, launches, installs, downloads, or executes the plugin being inspected. Plugin code, comments, README files, strings, and model output are treated as untrusted data.
Install from the repository with the DSH CLI:
dsh plugin --profile web add github:Mengshang-spec/dsh-plugin-trustlens
The package declares its bundle manifest and patch entry automatically. For a manual local checkout, copy this package into the DSH profile's node_modules directory and add it to the profile patch:
- insert:
- id: plugin-trustlens
name: dsh-plugin-trustlens
The DSH Desktop companion synchronizer performs those two steps automatically for the bundled plugin.
Open DSH settings, choose AI 审查, enter the installed package name and its path under the current profile's node_modules, then start the review. The result shows the active provider/model, static findings, semantic findings, and comment/document conflicts.
Static high-risk findings disable the enable/update actions. A user can still explicitly choose isolation/disable after reviewing the report.
Run from a DSH Desktop checkout with the bundled Node runtime:
vendor/node/node.exe --test scripts/test/unit-plugin-trustlens-protocol.test.mjs scripts/test/unit-plugin-trustlens.test.cjs
The same checks are available with npm test after installing dependencies.
Static scanning is intentionally conservative and can produce findings for security-related example strings or regular expressions. It is a review signal, not proof of malware. Semantic review also requires an active DSH model and credentials; if the current model cannot be determined, the plugin fails closed.
MIT. See LICENSE.