Jinsong-Zhou/safe-find-dsh-plugins
简体中文 | English A DSH plugin that finds plugins for your task across the entire GitHub dsh-plugin topic, with a security scan before anything gets installed.
catalog 简介 / catalog descriptioncatalog description：Discover and install the best DeepSeek Harness plugins for a user's task
安装Install
dsh plugin --profile web add github:Jinsong-Zhou/safe-find-dsh-plugins把 Jinsong-Zhou/safe-find-dsh-plugins 加入你的 DSH 配置（web profile）即可启用。
READMEREADME
safe-find-dsh-plugins
简体中文 | English
A DSH plugin that finds plugins for your task across the entire GitHub
dsh-plugin topic, with a security
scan before anything gets installed.
Install
Send this repository link to DSH and say "install this plugin for me".
To install manually, copy the whole skills/safe-find-dsh-plugins/ directory
into $DSH_HOME/skills/, or into <project-root>/.agents/skills/ for one
project only. Once it's in place it just works — no other configuration.
What it does
Given your request, it first pulls every public repository under the topic (skipping archives and forks), ranks them against what you asked for, takes a close look at only the best few, works out how each one is meant to be installed, and hands you a shortlist of at most three candidates.
After you pick one, it doesn't install right away: it pins the candidate's exact commit, then runs a static security scan over that source — plugin code is never executed. A clean scan moves ahead; if risks turn up, every finding is laid out for you and the decision is yours; high-risk results, failed scans, or a missing scanner never install. What ends up in your environment is always the exact commit that was scanned — and this step is never skipped, even when you named the plugin yourself from the start.
The scanner is a separate dependency. Before installing a plugin for you the first time, it checks whether the scanner is present and hands you the install command if not.
Acknowledgements
- Forked from Nagi-ovo/dsh-find-plugins.
- Security scanning is powered by
NVIDIA SkillSpector:
uv tool install git+https://github.com/NVIDIA/skillspector.git.
License
MIT © 2026 Jinsong Zhou. See LICENSE.
相关推荐Related
- deepseek-ai/deepseek-harness DeepSeek Harness: Everything is a Plugin.
- deepseek-ai/deepseek-harness DeepSeek Harness (dsh) — 由 DeepSeek AI 开发的开源 agent harness（智能体框架）。一切皆插件：核心 + 插件 + 技能 = 可热插拔的 AI 编程工作台。DeepSeek Harness: …
-
ruvnet/ruflo
🌊 The original agent meta-harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build c…
-
amruthpillai/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source a…
-
volcengine/OpenViking
Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.
-
Molunerfinn/PicGo
:rocket: The Ultimate Image Uploader for Efficient Creators. Supports Obsidian, Typora, VS Code etc. and 60+ image hosti…
-
titanwings/colleague-skill
将冰冷的离别化为温暖的 Skill，欢迎加入数字生命1.0！Transforming cold farewells into warm skills? It's giving rebirth era. Welcome to Digital …
-
nocobase/nocobase
NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything fr…