taxueseek/dsh-plugin-guard

Name: taxueseek/dsh-plugin-guard
Author: taxueseek

Plugin插件 Native原生 ⭐ 2 MIT Approval & Security审批与安全

DSH 插件门控 + 诊所：安装前后静态审计、哈希锁定、对等搜索、机械化排毒。绝不执行目标插件。

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

dsh-plugin-guard is a DSH static-audit plugin that never executes the target. The Gate surface offers plugin_audit for pre-install review and plugin_verify for hash and capability lock; the Clinic surface offers plugin_peers for local fingerprinting and GitHub topic:dsh-plugin search, plus plugin_detox for mechanical code removal. Scoring starts at 100; P0 subtracts 40, P1 subtracts 12, P2 subtracts 3. Any P0 or a score below 40 blocks install. P0 auto-detection triggers only on auto-run combined with dangerous patterns. Remote hits return verdict=unknown, so audit before installing. Caveat: it is not output redaction, not general SAST, and does not prove safety; Detox does not preserve original behavior.

dsh-plugin-guard 是 DSH 静态审计插件,仅做静态分析,绝不执行目标插件。Gate 提供 plugin_audit 装前审计与 plugin_audit 哈希及能力锁定;Clinic 提供 plugin_peers 本地指纹与 GitHub 搜索,以及 plugin_detox 机械式裁剪。评分从 100 起,P0 减 40、P1 减 12、P2 减 3,触发 P0 或低于 40 直接阻断。P0 仅在自动执行与危险命令组合时自动检测。装前请先审计,远程命中仅返回 verdict=unknown。注意:不是输出脱敏,不是通用 SAST,也无法证明插件安全;Detox 不保留原有行为。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我了解并安装插件：【dsh-plugin-guard】【https://github.com/taxueseek/dsh-plugin-guard】

Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.把上面这条消息直接发给当前会话里的 DSH，让它帮你了解并安装。安装命令不一定准确，发给 DSH 更稳。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add github:taxueseek/dsh-plugin-guard

把 taxueseek/dsh-plugin-guard 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

1.2 KB · 缓存于 2026-08-30 13:19:52 · 1.2 KB

dsh-plugin-guard

One plugin, two surfaces. Static analysis only — never executes the target plugin.

Surface	Tool	Job
Gate	`plugin_audit`	Static audit before install
Gate	`plugin_verify`	Hash + capability lock after install
Clinic	`plugin_peers`	Local fingerprint peers; `query` searches GitHub `topic:dsh-plugin`
Clinic	`plugin_detox`	Mechanical amputation, not an equivalent rewrite

plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.

Install

dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh web

Scoring

Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.

P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.

Not

Not output redaction
Not general SAST
Does not prove a plugin is safe
Detox does not keep the original behavior

License

MIT

渲染基于仓库 taxueseek/dsh-plugin-guard 的 README.md。在 GitHub 查看原文 →

CLI Install命令行安装 Copy Install复制安装命令