deepseekplugins

DeepSeek Harness plugin

dsh-plugin-guard-taxuesee

DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.

Docs & Rendering
Jump to install

Source facts

Repository
taxueseek/dsh-plugin-guard
Latest update
Aug 16, 2026
Category
Docs & Rendering
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/taxueseek/dsh-plugin-guard
Plugin: dsh-plugin-guard-taxuesee
Author: taxueseek

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-plugin-guard

One plugin, two surfaces. Static analysis only — never executes the target plugin.

SurfaceToolJob
Gateplugin_auditStatic audit before install
Gateplugin_verifyHash + capability lock after install
Clinicplugin_peersLocal fingerprint peers; query searches GitHub topic:dsh-plugin
Clinicplugin_detoxMechanical amputation, not an equivalent rewrite

plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.

Install

dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh web

Scoring

Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.

P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.

Not

  • Not output redaction
  • Not general SAST
  • Does not prove a plugin is safe
  • Detox does not keep the original behavior

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category