dsh-plugin-sentinel

{
  "name": "dsh-plugin-sentinel",
  "owner": "BotonJ",
  "category": "dev",
  "description": "Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.",
  "descriptionZh": "插件安装前静态安全审计：生命周期脚本、动态执行、凭据外传组合特征与 patch 层风险；零依赖，tar 包全程内存解析不落盘。",
  "install": "dsh plugin --profile web add github:BotonJ/dsh-plugin-sentinel",
  "npm": null,
  "stars": 0,
  "added": "2026-08-15",
  "source": "registry"
}