chengganping-ship-it/dsh-tool-codereview

Name: chengganping-ship-it/dsh-tool-codereview
Author: chengganping-ship-it

插件Plugin ⭐ 2 MIT cat_label.code-reviewcat_label.code-review cat_label.deepseek-harnesscat_label.deepseek-harness cat_label.owaspcat_label.owasp cat_label.sarifcat_label.sarif cat_label.security-scancat_label.security-scan cat_label.static-analysiscat_label.static-analysis

- codereview: Comprehensive code quality analysis - securityscan: OWASP Top 10 vulnerability scanning - dependencyaudit: CVE-based vulnerability detection - performancecheck: N+1, memory leak detection - codecheck: Quick pass/fail validation

catalog 简介 / catalog descriptioncatalog description：Professional Code Review & Security Scan plugin for DeepSeek Harness - SARIF output, OWASP Top 10, AI-enhanced analysis, auto-fixes

项目介绍Project Overview

由知微Agent(zhiwei)编辑Edited by Zhiwei Agent (zhiwei)

dsh-tool-codereview 是 DeepSeek Harness 的代码审查与安全扫描插件，提供代码质量分析、OWASP Top 10 漏洞扫描、依赖 CVE 审计、性能问题检测（如 N+1、内存泄漏）及快速通过/失败校验。适用于提交前审查、CI 检查或安全加固场景。结果依赖规则与模型判断，需人工复核，不能替代完整安全审计。

dsh-tool-codereview is a DeepSeek Harness plugin for AI-powered code review and security scanning. It provides code quality analysis, OWASP Top 10 vulnerability scanning, dependency CVE auditing, performance checks such as N+1 queries and memory leaks, and quick pass/fail validation. Use it before commits, in CI, or during security hardening. Findings depend on rules and model analysis, so review results manually; it does not replace a full security audit.

在 GitHub 查看View on GitHub

发给你的 DSH 安装Send to your DSH

请帮我了解并安装插件：【dsh-tool-codereview】【https://github.com/chengganping-ship-it/dsh-tool-codereview】

把上面这条消息直接发给当前会话里的 DSH，让它帮你了解并安装。安装命令不一定准确，发给 DSH 更稳。Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.

或使用命令行安装（适合开发者）Or use CLI install (for developers)

命令行安装CLI Install

dsh plugin --profile web add https://github.com/chengganping-ship-it/dsh-tool-codereview/archive/refs/tags/v0.3.0.tar.gz

把 chengganping-ship-it/dsh-tool-codereview 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

0.9 KB · 缓存于 2026-08-27 05:42:05 · 0.9 KB

dsh-tool-codereview

AI-Powered Code Review & Security Scan plugin for DeepSeek Harness

Features

code_review: Comprehensive code quality analysis
security_scan: OWASP Top 10 vulnerability scanning
dependency_audit: CVE-based vulnerability detection
performance_check: N+1, memory leak detection
code_check: Quick pass/fail validation

Installation

dsh plugin --profile web add https://github.com/chengganping-ship-it/dsh-tool-codereview/archive/refs/tags/v0.3.0.tar.gz

License

MIT

渲染基于仓库 chengganping-ship-it/dsh-tool-codereview 的 README.md。在 GitHub 查看原文 →

命令行安装CLI Install 复制安装命令Copy Install