DeepSeek Harness plugin

dsh-sast-security

SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k MIT)启发。

Jump to install

Source facts

Repository
satan9394/dsh-sast-security
Latest update
Aug 19, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/satan9394/dsh-sast-security
Plugin: dsh-sast-security
Author: satan9394

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-sast-security

DSH(DeepSeek Harness)技能插件:SAST 工具配置

静态应用安全测试(Semgrep/SonarQube/CodeQL):自定义规则、CI/CD 集成、质量门与合规策略、误报调优与扫描性能、多工具纵深防御。受 wshobson/agents(38k★ MIT)启发的中文原创精简版。

安装

dsh plugin add dsh-sast-security

触发方式

描述中包含"SAST / 静态安全测试 / Semgrep / SonarQube / CodeQL / 安全扫描配置 / 漏洞检测"等关键词时自动触发。

能力

  • 三工具配置要点(Semgrep/SonarQube/CodeQL)
  • 自定义规则与误报调优
  • 质量门与 CI 集成
  • 与 DAST/依赖扫描互补

许可

MIT