{"schemaVersion":4,"generatedAt":"2026-09-29T00:00:19.935Z","automation":{"enabled":true,"schedule":"0 */12 * * *","state":"live","scanVersion":2,"lastRunAt":"2026-09-29T00:00:19.935Z","lastSuccessfulRunAt":"2026-09-29T00:00:19.935Z","checkedThisRun":0,"queuedThisRun":0,"discoveredThisRun":187,"admittedThisRun":0,"rejectedTotal":143,"error":null,"pipeline":{"available":true,"mode":"queue","backlog":0,"oldestQueuedAt":null,"estimatedMinutes":11520,"evidencePlugins":465,"evidenceVersions":571,"remainingPlugins":190,"coveragePercent":71,"jobs":{"queued":0,"running":0,"succeeded":465,"rejected":37,"blocked":106,"error":170}}},"sources":{"curated":{"url":"https://awesome-dsh-plugin.com/plugins.json","repository":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","state":"live","updated":"2026-08-14","count":204},"topic":{"url":"https://github.com/topics/dsh-plugin","query":"topic:dsh-plugin","state":"live","total":16489,"scanned":424,"matched":613,"error":null},"codex":{"url":"https://raw.githubusercontent.com/cclank/dsh-plugin-hub/main/data/codex-picks.json","repository":"https://github.com/cclank/dsh-plugin-hub","state":"live","updated":"2026-09-11T17:06:01.700Z","count":52,"matched":52,"error":null}},"summary":{"curated":203,"codexPicks":52,"listed":655,"autoDiscovered":452,"topicTotal":16489,"metadataMatches":613,"manifestMatches":613,"screeningClear":66,"screeningReview":567,"screeningBlocked":22,"owners":490,"stars":10523},"categories":{"ui":{"en":"UI Enhancements","zh":"UI 增强"},"theme":{"en":"Themes & Appearance","zh":"主题与外观"},"session":{"en":"Sessions & Messages","zh":"会话与消息"},"memory":{"en":"Memory","zh":"记忆"},"tools":{"en":"Tools & Capabilities","zh":"工具与能力"},"workflow":{"en":"Workflow & Automation","zh":"工作流与自动化"},"notify":{"en":"Notifications & Integrations","zh":"通知与集成"},"model":{"en":"Models & Providers","zh":"模型与账号接入"},"dev":{"en":"Development & Runtime","zh":"开发与运行时"},"fun":{"en":"Just for Fun","zh":"娱乐"}},"plugins":[{"id":"huiliyi37/dsh-tianshu-tui","order":0,"name":"dsh-tianshu-tui","owner":"huiliyi37","repo":"huiliyi37/dsh-tianshu-tui","url":"https://github.com/huiliyi37/dsh-tianshu-tui","category":"ui","description":{"en":"A terminal UI (TUI) for DeepSeek Harness.","zh":"DeepSeek Harness 的终端 UI（TUI）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":104,"forks":4,"openIssues":2,"watchers":104,"pushedAt":"2026-08-14T08:03:45Z","updatedAt":"2026-08-14T08:11:19Z","createdAt":"2026-08-13T04:20:37Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://github.com/huiliyi37/dsh-tianshu-tui","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@huiliyi37/dsh-tianshu-tui","version":"0.1.1-rc.6","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"openma-ai/deepseek-harness-tui","order":1,"name":"deepseek-harness-tui","owner":"openma-ai","repo":"openma-ai/deepseek-harness-tui","url":"https://github.com/openma-ai/deepseek-harness-tui","category":"ui","description":{"en":"A Rust/ratatui terminal client that speaks the DSH SDK JSON-RPC protocol directly and runs standalone or as a profile bundle.","zh":"Rust/ratatui 终端客户端，直接使用 DSH SDK JSON-RPC 协议，支持独立运行或作为 profile bundle 加载。"},"added":"2026-08-14","curated":true,"topic":true,"stars":8,"forks":1,"openIssues":0,"watchers":8,"pushedAt":"2026-08-14T08:01:37Z","updatedAt":"2026-08-14T08:02:19Z","createdAt":"2026-08-13T17:19:18Z","license":"MIT","language":"Rust","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"missing","branch":"main","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未核验到 dsh manifest"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-at-file","order":2,"name":"dsh-at-file","owner":"omdsh-dev","repo":"omdsh-dev/dsh-at-file","url":"https://github.com/omdsh-dev/dsh-at-file","category":"ui","description":{"en":"Codex-style `@file` mentions: search workspace files in the composer and attach their contents to prompts.","zh":"Codex 风格的 `@file` 文件引用，输入框里直接搜索并引用工作区文件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":89,"forks":3,"openIssues":0,"watchers":89,"pushedAt":"2026-08-14T07:27:34Z","updatedAt":"2026-08-14T08:15:23Z","createdAt":"2026-08-13T12:00:09Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-at-file","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null,"codexPick":{"repo":"omdsh-dev/dsh-at-file","pickedAt":"2026-08-14T03:10:26.926Z","reviewedCommit":"2c5653ebc3240626cdad41a9c01d15d22471aed2","category":"ui","summary":{"zh":"在 DSH 输入框中用 @ 搜索并引用当前工作区的文件或目录路径。","en":"Adds Codex-style @path search and references to the DSH composer."},"reason":{"zh":"交互直接、使用频率高；当前版本只注入工作区相对路径，由 Agent 按需读取文件。","en":"A frequent, direct workflow improvement; current releases inject a workspace-relative path and let the agent read on demand."},"safety":{"risk":"medium","zh":"会索引工作区路径名并提供打开路径能力；符号链接与越界路径会被拒绝。","en":"Indexes workspace path names and can open selected paths; symlinks and paths outside the workspace are rejected."}}},{"id":"alingalingling/ui-status-label","order":3,"name":"ui-status-label","owner":"alingalingling","repo":"alingalingling/ui-status-label","url":"https://github.com/alingalingling/ui-status-label","category":"ui","description":{"en":"Customize the \"deep diving\" thinking status label to anything you like.","zh":"把鲸鱼娘思考时的 \"deep diving\" 状态文案自定义成任意你想要的样子。"},"added":"2026-08-13","curated":true,"topic":true,"stars":26,"forks":0,"openIssues":1,"watchers":26,"pushedAt":"2026-08-13T16:17:36Z","updatedAt":"2026-08-14T07:30:52Z","createdAt":"2026-08-11T19:46:33Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-ui-status-label","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a1621413a4700cb489655ad3ebf7fa8484c3645f","installCommand":"dsh plugin --profile web add github:alingalingling/ui-status-label#a1621413a4700cb489655ad3ebf7fa8484c3645f","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:00:56.872Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:56.872Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"alingalingling/ui-status-label@a1621413a4700cb489655ad3ebf7fa8484c3645f#scan-2","versionCount":1,"latestCommit":"a1621413a4700cb489655ad3ebf7fa8484c3645f","latestCheckedAt":"2026-09-12T12:00:56.872Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zseven-w/dsh-openpencil","order":4,"name":"dsh-openpencil","owner":"ZSeven-W","repo":"ZSeven-W/dsh-openpencil","url":"https://github.com/ZSeven-W/dsh-openpencil","category":"ui","description":{"en":"OpenPencil design preview and editing plugin.","zh":"OpenPencil 设计预览与编辑插件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":56,"forks":1,"openIssues":0,"watchers":56,"pushedAt":"2026-08-13T14:54:25Z","updatedAt":"2026-08-14T07:41:59Z","createdAt":"2026-08-12T16:05:11Z","license":"MIT","language":"TypeScript","homepage":"https://op.zseven.tech","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@zseven-w/dsh-openpencil","version":"0.1.0-rc.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"nagi-ovo/dsh-visualize","order":5,"name":"dsh-visualize","owner":"Nagi-ovo","repo":"Nagi-ovo/dsh-visualize","url":"https://github.com/Nagi-ovo/dsh-visualize","category":"ui","description":{"en":"In-conversation generative UI: the model renders interactive HTML cards into the chat stream, with streaming preview and sandboxed rendering.","zh":"对话内生成式 UI：模型把交互式 HTML 卡片直接画进会话流，带流式预览与沙箱渲染。"},"added":"2026-08-13","curated":true,"topic":true,"stars":63,"forks":2,"openIssues":1,"watchers":63,"pushedAt":"2026-08-14T01:18:39Z","updatedAt":"2026-08-14T07:59:52Z","createdAt":"2026-08-13T13:11:49Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-visualize","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9667c0e9cf0ea463b9b45b2845de62da34fd918a","installCommand":"dsh plugin --profile web add github:Nagi-ovo/dsh-visualize#9667c0e9cf0ea463b9b45b2845de62da34fd918a","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T00:01:54.681Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T00:01:54.681Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"nagi-ovo/dsh-visualize@9667c0e9cf0ea463b9b45b2845de62da34fd918a#scan-2","versionCount":1,"latestCommit":"9667c0e9cf0ea463b9b45b2845de62da34fd918a","latestCheckedAt":"2026-09-12T00:01:54.681Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ccq1/dsh-side-panel","order":6,"name":"dsh-side-panel","owner":"ccq1","repo":"ccq1/dsh-side-panel","url":"https://github.com/ccq1/dsh-side-panel","category":"ui","description":{"en":"Side panel with file browser, terminal, and Git review for quick file previews.","zh":"侧边栏集成文件浏览器、终端和 Git 审查，方便预览文件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":15,"forks":2,"openIssues":3,"watchers":15,"pushedAt":"2026-08-12T18:36:15Z","updatedAt":"2026-08-14T07:37:26Z","createdAt":"2026-08-07T21:40:25Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-side-panel","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":12,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"dingyi222666/dsh-focus-chat","order":7,"name":"dsh-focus-chat","owner":"dingyi222666","repo":"dingyi222666/dsh-focus-chat","url":"https://github.com/dingyi222666/dsh-focus-chat","category":"ui","description":{"en":"A \"focus chat\" minimal view that shows only final outputs.","zh":"「聚焦会话」精简视图，只关注最终产出结果。"},"added":"2026-08-13","curated":true,"topic":true,"stars":11,"forks":0,"openIssues":1,"watchers":11,"pushedAt":"2026-08-13T23:02:59Z","updatedAt":"2026-08-14T07:52:48Z","createdAt":"2026-08-10T19:40:36Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dingyi222666/dsh-focus-chat","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-genui","order":8,"name":"dsh-genui","owner":"omdsh-dev","repo":"omdsh-dev/dsh-genui","url":"https://github.com/omdsh-dev/dsh-genui","category":"ui","description":{"en":"Interactive UI components rendered inline in replies: layout, charts, forms, quizzes, mermaid, 3D scenes, and an action event loop back to the model.","zh":"助手回复内渲染交互式 UI 组件：布局、图表、表单、测验、mermaid、3D 场景与回传事件循环。"},"added":"2026-08-13","curated":true,"topic":true,"stars":54,"forks":3,"openIssues":0,"watchers":54,"pushedAt":"2026-08-14T08:01:36Z","updatedAt":"2026-08-14T08:01:39Z","createdAt":"2026-08-13T13:07:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@omdsh-dev/dsh-genui","version":"0.8.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-annotation","order":9,"name":"dsh-annotation","owner":"omdsh-dev","repo":"omdsh-dev/dsh-annotation","url":"https://github.com/omdsh-dev/dsh-annotation","category":"ui","description":{"en":"Select text → annotate → send with your message; replies map back to each annotation.","zh":"选中文字→批注→随消息发送，回复按批注逐条对照。"},"added":"2026-08-13","curated":true,"topic":true,"stars":26,"forks":0,"openIssues":1,"watchers":26,"pushedAt":"2026-08-13T15:09:15Z","updatedAt":"2026-08-14T07:37:50Z","createdAt":"2026-08-10T17:36:49Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@omdsh-dev/dsh-annotation","version":"1.3.13","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"vlln/dsh-navbar","order":10,"name":"dsh-navbar","owner":"vlln","repo":"vlln/dsh-navbar","url":"https://github.com/vlln/dsh-navbar","category":"ui","description":{"en":"Conversation node navigation bar for quick jumps between user messages.","zh":"对话节点导航条，右缘节点串快速跳转 user 消息。"},"added":"2026-08-13","curated":true,"topic":true,"stars":11,"forks":1,"openIssues":1,"watchers":11,"pushedAt":"2026-08-13T14:22:13Z","updatedAt":"2026-08-14T08:08:31Z","createdAt":"2026-08-10T16:41:51Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@vlln/dsh-navbar","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e53adfc8c837ebcb4b6a52c2c4baf7cb6e8b795e","installCommand":"dsh plugin --profile web add github:vlln/dsh-navbar#e53adfc8c837ebcb4b6a52c2c4baf7cb6e8b795e","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:00:25.920Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-13T00:00:25.920Z","findings":[],"filesInspected":["package.json","lib/index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"vlln/dsh-navbar@e53adfc8c837ebcb4b6a52c2c4baf7cb6e8b795e#scan-2","versionCount":1,"latestCommit":"e53adfc8c837ebcb4b6a52c2c4baf7cb6e8b795e","latestCheckedAt":"2026-09-13T00:00:25.920Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"vlln/dsh-task-status","order":11,"name":"dsh-task-status","owner":"vlln","repo":"vlln/dsh-task-status","url":"https://github.com/vlln/dsh-task-status","category":"ui","description":{"en":"Background task status bar: progress plus live output tail on the chat page.","zh":"后台任务状态条：对话页任务进度 + 实时输出 tail。"},"added":"2026-08-13","curated":true,"topic":true,"stars":7,"forks":0,"openIssues":0,"watchers":7,"pushedAt":"2026-08-13T14:22:16Z","updatedAt":"2026-08-14T06:19:36Z","createdAt":"2026-08-10T16:41:56Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-task-status","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"renat3u/dsh-web-archive","order":12,"name":"dsh-web-archive","owner":"renat3u","repo":"renat3u/dsh-web-archive","url":"https://github.com/renat3u/dsh-web-archive","category":"ui","description":{"en":"Collapse noisy messages (Think, Bash, etc.) in conversations.","zh":"折叠对话中的 Think、Bash 等「无用消息」。"},"added":"2026-08-13","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":1,"watchers":4,"pushedAt":"2026-08-13T04:47:29Z","updatedAt":"2026-08-14T07:08:36Z","createdAt":"2026-08-08T07:06:45Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-web-archive","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"0xsline/dsh-spotlight","order":13,"name":"dsh-spotlight","owner":"0xsline","repo":"0xsline/dsh-spotlight","url":"https://github.com/0xsline/dsh-spotlight","category":"ui","description":{"en":"Keyboard-first command palette for the DSH Web UI.","zh":"键盘优先的命令面板（command palette）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-08-13T13:17:11Z","updatedAt":"2026-08-14T07:07:16Z","createdAt":"2026-08-13T13:16:27Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-spotlight","version":"0.0.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"bill9109/dsh-101","order":14,"name":"dsh-101","owner":"bill9109","repo":"bill9109/dsh-101","url":"https://github.com/bill9109/dsh-101","category":"ui","description":{"en":"Document reading mode for DSH.","zh":"DSH 文档阅读模式。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:59:33Z","updatedAt":"2026-08-14T07:59:36Z","createdAt":"2026-08-08T18:06:38Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@bill9109/dsh-101","version":"0.1.8","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ae6b4addadfda63e6751b1bf929665733ba60b6c","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:49.020Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-08T12:00:49.020Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"dynamic-code","severity":"high","label":{"zh":"发现动态代码执行入口","en":"Dynamic code execution signal found"},"files":["lib/index.js"]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["仓库根目录未发现依赖锁文件","发现动态代码执行入口","发现递归删除或直接删除文件的调用","发现本地文件写入能力","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"bill9109/dsh-101@ae6b4addadfda63e6751b1bf929665733ba60b6c#scan-2","versionCount":1,"latestCommit":"ae6b4addadfda63e6751b1bf929665733ba60b6c","latestCheckedAt":"2026-09-08T12:00:49.020Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bill9109/dsh-drag-and-drop","order":15,"name":"dsh-drag-and-drop","owner":"bill9109","repo":"bill9109/dsh-drag-and-drop","url":"https://github.com/bill9109/dsh-drag-and-drop","category":"ui","description":{"en":"Cross-platform file drag-and-drop with raw path insertion, no file copying.","zh":"跨平台文件拖拽与原始路径插入，无需复制文件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T07:58:51Z","updatedAt":"2026-08-14T07:58:57Z","createdAt":"2026-08-06T04:01:40Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-drag-and-drop","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"55ec0368c31339b6430bf6705af53738d4068a54","installCommand":"dsh plugin --profile web add github:bill9109/dsh-drag-and-drop#55ec0368c31339b6430bf6705af53738d4068a54","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:49.361Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:49.361Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"bill9109/dsh-drag-and-drop@55ec0368c31339b6430bf6705af53738d4068a54#scan-2","versionCount":1,"latestCommit":"55ec0368c31339b6430bf6705af53738d4068a54","latestCheckedAt":"2026-09-08T12:00:49.361Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"l541402398/dsh-file-uploads","order":16,"name":"dsh-file-uploads","owner":"l541402398","repo":"l541402398/dsh-file-uploads","url":"https://github.com/l541402398/dsh-file-uploads","category":"ui","description":{"en":"Upload arbitrary local files from the Web composer, show pending cards, and manage stored files in Settings.","zh":"从 Web 输入框上传任意本地文件，以待发送卡片展示，并在设置中管理已存文件。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-file-uploads","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"qyw233/dsh-deeplink","order":17,"name":"dsh-deeplink","owner":"qyw233","repo":"qyw233/dsh-deeplink","url":"https://github.com/qyw233/dsh-deeplink","category":"ui","description":{"en":"Deep links: open a specific session or workspace via `?session=` / `?workspace=`.","zh":"`?session=` / `?workspace=` 深链直达指定项目对话。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T14:00:30Z","updatedAt":"2026-08-13T16:47:03Z","createdAt":"2026-08-13T12:57:16Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-community/dsh-deeplink","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2ee3965e8a97a9510e9703f79ff027e350165d49","installCommand":"dsh plugin --profile web add github:qyw233/dsh-deeplink#2ee3965e8a97a9510e9703f79ff027e350165d49","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:02:04.748Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T00:02:04.748Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"qyw233/dsh-deeplink@2ee3965e8a97a9510e9703f79ff027e350165d49#scan-2","versionCount":1,"latestCommit":"2ee3965e8a97a9510e9703f79ff027e350165d49","latestCheckedAt":"2026-09-13T00:02:04.748Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lehhair/dsh-diff-viewer","order":18,"name":"dsh-diff-viewer","owner":"lehhair","repo":"lehhair/dsh-diff-viewer","url":"https://github.com/lehhair/dsh-diff-viewer","category":"ui","description":{"en":"PiUI-style diff viewer replacing the stock DiffBlock for write/edit tool calls.","zh":"PiUI 风格 diff 查看器，替换 write/edit 工具调用的默认 DiffBlock。"},"added":"2026-08-13","curated":true,"topic":true,"stars":7,"forks":0,"openIssues":1,"watchers":7,"pushedAt":"2026-08-15T00:29:08Z","updatedAt":"2026-08-15T00:29:26Z","createdAt":"2026-08-12T11:25:05Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-diff-viewer","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d576c00cc7db52695d69f86142d4454380fed236","installCommand":"dsh plugin --profile web add github:lehhair/dsh-diff-viewer#d576c00cc7db52695d69f86142d4454380fed236","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-01T12:01:06.671Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T12:01:06.671Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"lehhair/dsh-diff-viewer@d576c00cc7db52695d69f86142d4454380fed236#scan-2","versionCount":1,"latestCommit":"d576c00cc7db52695d69f86142d4454380fed236","latestCheckedAt":"2026-09-01T12:01:06.671Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"omdsh-dev/ex-setting","order":19,"name":"ex-setting","owner":"omdsh-dev","repo":"omdsh-dev/ex-setting","url":"https://github.com/omdsh-dev/ex-setting","category":"ui","description":{"en":"Settings extensions for DSH.","zh":"DSH 的设置扩展。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-16T11:55:23Z","updatedAt":"2026-08-16T11:55:30Z","createdAt":"2026-08-04T16:08:16Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-ex-setting","version":"0.0.2","lifecycleScripts":["prepare"],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"46130b8d5f0c3784cb1325412fea0b116b37e9ae","installCommand":"dsh plugin --profile web add github:omdsh-dev/ex-setting#46130b8d5f0c3784cb1325412fea0b116b37e9ae","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-16T12:01:12.385Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:12.385Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"omdsh-dev/ex-setting@46130b8d5f0c3784cb1325412fea0b116b37e9ae#scan-2","versionCount":1,"latestCommit":"46130b8d5f0c3784cb1325412fea0b116b37e9ae","latestCheckedAt":"2026-08-16T12:01:12.385Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"omdsh-dev/web-components","order":20,"name":"web-components","owner":"omdsh-dev","repo":"omdsh-dev/web-components","url":"https://github.com/omdsh-dev/web-components","category":"ui","description":{"en":"Web Components support.","zh":"Web Components 支持。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-09T10:59:54Z","updatedAt":"2026-08-13T16:46:15Z","createdAt":"2026-08-04T16:05:43Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-client-web-component","version":"0.0.2","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"vibeinging/dsh-turn-navigator","order":21,"name":"dsh-turn-navigator","owner":"vibeinging","repo":"vibeinging/dsh-turn-navigator","url":"https://github.com/vibeinging/dsh-turn-navigator","category":"ui","description":{"en":"Turn navigation for the DSH Web UI.","zh":"对话轮次导航。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-12T13:23:07Z","updatedAt":"2026-08-13T16:46:57Z","createdAt":"2026-08-12T12:23:13Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-turn-navigator","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"snowcrescenter-tech/dsh-milestone","order":22,"name":"dsh-milestone","owner":"SnowCrescenter-tech","repo":"SnowCrescenter-tech/dsh-milestone","url":"https://github.com/SnowCrescenter-tech/dsh-milestone","category":"ui","description":{"en":"Right-side dot-timeline rail: jump between user messages.","zh":"右侧圆点时间轴导航条，点击跳转到任意用户消息。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":1,"watchers":6,"pushedAt":"2026-08-14T03:57:35Z","updatedAt":"2026-08-14T07:07:57Z","createdAt":"2026-08-13T17:04:46Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-milestone","version":"0.6.6","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"73193b8a752231e3323deb11257f17db6e8b1b0e","installCommand":"dsh plugin --profile web add github:SnowCrescenter-tech/dsh-milestone#73193b8a752231e3323deb11257f17db6e8b1b0e","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-10T12:02:42.981Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-10T12:02:42.981Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"snowcrescenter-tech/dsh-milestone@73193b8a752231e3323deb11257f17db6e8b1b0e#scan-2","versionCount":1,"latestCommit":"73193b8a752231e3323deb11257f17db6e8b1b0e","latestCheckedAt":"2026-09-10T12:02:42.981Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ghost011118/dsh-balance-meter","order":23,"name":"dsh-balance-meter","owner":"Ghost011118","repo":"Ghost011118/dsh-balance-meter","url":"https://github.com/Ghost011118/dsh-balance-meter","category":"ui","description":{"en":"DeepSeek account balance and session cost in the composer dock, with auto-fetched official pricing and peak/off-peak support.","zh":"输入框 dock 显示 DeepSeek 账户余额与会话花费，自动拉取官方定价，支持高峰/低谷计价。"},"added":"2026-08-14","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":1,"watchers":9,"pushedAt":"2026-08-14T04:27:02Z","updatedAt":"2026-08-14T07:44:57Z","createdAt":"2026-08-13T18:54:17Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-balance-meter","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1a277e8eb9ee5ebbf8589e6bbb96bfe9ac282c11","installCommand":"dsh plugin --profile web add github:Ghost011118/dsh-balance-meter#1a277e8eb9ee5ebbf8589e6bbb96bfe9ac282c11","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:01:04.568Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-10T12:01:04.568Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"ghost011118/dsh-balance-meter@1a277e8eb9ee5ebbf8589e6bbb96bfe9ac282c11#scan-2","versionCount":1,"latestCommit":"1a277e8eb9ee5ebbf8589e6bbb96bfe9ac282c11","latestCheckedAt":"2026-09-10T12:01:04.568Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"v587d/dsh-opencode-go-usage","order":24,"name":"dsh-opencode-go-usage","owner":"v587d","repo":"v587d/dsh-opencode-go-usage","url":"https://github.com/v587d/dsh-opencode-go-usage","category":"ui","description":{"en":"OpenCode Go subscription usage (rolling/weekly/monthly windows with reset countdowns) in the composer dock, with a built-in credential editor.","zh":"在输入框上方 dock 显示 OpenCode Go 订阅用量（5h 滚动/每周/每月窗口与重置倒计时），内置凭据编辑器。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T08:11:28Z","updatedAt":"2026-08-14T08:11:42Z","createdAt":"2026-08-14T06:54:16Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ocgo-usage","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"682a7872e6a3bf9313f08b9337319678b8a25895","installCommand":"dsh plugin --profile web add github:v587d/dsh-opencode-go-usage#682a7872e6a3bf9313f08b9337319678b8a25895","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:54.478Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:54.478Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"v587d/dsh-opencode-go-usage@682a7872e6a3bf9313f08b9337319678b8a25895#scan-2","versionCount":1,"latestCommit":"682a7872e6a3bf9313f08b9337319678b8a25895","latestCheckedAt":"2026-09-08T00:00:54.478Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"han-1413141/dsh-cost-meter","order":25,"name":"dsh-cost-meter","owner":"Han-1413141","repo":"Han-1413141/dsh-cost-meter","url":"https://github.com/Han-1413141/dsh-cost-meter","category":"ui","description":{"en":"Per-session and daily API cost, budget with usage %, official balance, history dashboard, and one-click official price sync with peak/off-peak pricing.","zh":"会话与当日 API 费用统计、预算图框（已用%）、官方余额、历史看板，支持峰谷计价与官方价格一键同步。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T06:25:33Z","updatedAt":"2026-08-14T06:25:36Z","createdAt":"2026-08-13T14:57:55Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-cost-meter","version":"1.2.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"fishxcode/dsh-plugin-deepseek-balance","order":26,"name":"dsh-plugin-deepseek-balance","owner":"fishxcode","repo":"fishxcode/dsh-plugin-deepseek-balance","url":"https://github.com/fishxcode/dsh-plugin-deepseek-balance","category":"ui","description":{"en":"DeepSeek API balance, balance trend, and daily usage charts in DSH Web settings.","zh":"在 DSH Web 设置中展示 DeepSeek API 余额、余额趋势与每日用量图表。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"sev7een/ds-api-usage","order":27,"name":"ds-api-usage","owner":"Sev7een","repo":"Sev7een/ds-api-usage","url":"https://github.com/Sev7een/ds-api-usage","category":"ui","description":{"en":"DeepSeek API balance and 24-hour usage dashboard in Settings, with estimated spend, token counts, request counts, and an hourly timeline.","zh":"在设置页展示 DeepSeek API 余额与最近 24 小时用量，包括估算消费、Token、请求次数和按小时时间线。"},"added":"2026-08-14","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":0,"watchers":6,"pushedAt":"2026-08-13T16:03:47Z","updatedAt":"2026-08-13T17:53:53Z","createdAt":"2026-08-13T15:24:04Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-ds-api-usage","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js","client/bundle.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d7644200ed0530f60794a1b081b7176cb3ac93fd","installCommand":"dsh plugin --profile web add github:Sev7een/ds-api-usage#d7644200ed0530f60794a1b081b7176cb3ac93fd","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T12:04:38.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:04:38.827Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js","cordis.patch.yml"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/bundle.js"]}],"filesInspected":["package.json","src/index.js","client/bundle.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"sev7een/ds-api-usage@d7644200ed0530f60794a1b081b7176cb3ac93fd#scan-2","versionCount":1,"latestCommit":"d7644200ed0530f60794a1b081b7176cb3ac93fd","latestCheckedAt":"2026-09-12T12:04:38.827Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"nonewind/dsh-spend","order":28,"name":"dsh-spend","owner":"nonewind","repo":"nonewind/dsh-spend","url":"https://github.com/nonewind/dsh-spend","category":"ui","description":{"en":"Token usage and estimated spend for the dsh web UI: floating panel with per-model, per-day, and per-session stats.","zh":"DSH Web 用量与费用统计插件：右下角悬浮窗，按模型/按天/按会话多维聚合与预计花费。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T05:52:24Z","updatedAt":"2026-08-14T05:52:49Z","createdAt":"2026-08-14T03:53:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-spend","version":"0.6.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d621227bc878c748905743e1fde454979af10000","installCommand":"dsh plugin --profile web add github:nonewind/dsh-spend#d621227bc878c748905743e1fde454979af10000","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:00:31.901Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:31.901Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"nonewind/dsh-spend@d621227bc878c748905743e1fde454979af10000#scan-2","versionCount":1,"latestCommit":"d621227bc878c748905743e1fde454979af10000","latestCheckedAt":"2026-09-09T00:00:31.901Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"ccch1mneyyy/dsh-tui","order":29,"name":"dsh-TUI","owner":"ccch1mneyyy","repo":"ccch1mneyyy/dsh-TUI","url":"https://github.com/ccch1mneyyy/dsh-TUI","category":"ui","description":{"en":"Claude Code-style full-screen terminal UI: pixel-whale header, live status line, and streaming thought expansion.","zh":"Claude Code 风格全屏终端 UI：像素鲸鱼顶栏、实时工作状态行、思考流式展开。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1440,"forks":59,"openIssues":43,"watchers":1440,"pushedAt":"2026-08-16T11:59:26Z","updatedAt":"2026-08-16T11:59:07Z","createdAt":"2026-08-13T12:49:31Z","license":"MIT","language":"TypeScript","homepage":"https://dshtui.com/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-harness-tui/dsh-tui","version":"0.7.2","lifecycleScripts":["prepare"],"runtimeDependencies":48,"declaredPaths":["cordis.patch.yml","lib/types/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f7300836647093ef447a6850e10f5443a9d4c3c2","installCommand":"dsh plugin --profile web add github:ccch1mneyyy/dsh-TUI#f7300836647093ef447a6850e10f5443a9d4c3c2","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-16T12:01:15.314Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:15.314Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"ccch1mneyyy/dsh-tui@f7300836647093ef447a6850e10f5443a9d4c3c2#scan-2","versionCount":2,"latestCommit":"f7300836647093ef447a6850e10f5443a9d4c3c2","latestCheckedAt":"2026-08-16T12:01:15.314Z","diffSeverity":"low","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"ccch1mneyyy/dsh-tui","pickedAt":"2026-08-17T02:10:05.381Z","reviewedCommit":"9ac578f1db308214ced63ecc0b5d7cd19bbe8ffa","category":"ui","summary":{"zh":"为 DeepSeek Harness 提供成熟的终端界面，覆盖流式对话、会话恢复、工具审批、上下文指标和双栏 diff。","en":"A mature terminal interface for DeepSeek Harness with streaming chat, session resume, tool approvals, context metrics, and split diffs."},"reason":{"zh":"v0.8.0 新增宽屏双栏 diff、词级与语法高亮、可切换 diff 布局和插件设置屏；发布提交已签名，构建与 npm 发布 CI 通过。","en":"v0.8.0 adds wide-terminal split diffs, word and syntax highlighting, selectable diff layouts, and a plugin settings screen; the release commit is signed and its build and npm publish CI passed."},"safety":{"risk":"medium","zh":"中风险：它作为完整 TUI 读取共享会话与工作区、调用系统剪贴板工具，并可通过 /update 修改 dsh-tui Profile；运行时仅额外访问配置的 npm registry 检查更新，未发现独立遥测。macOS/Linux 默认 workspace-write + ask；Windows 默认 danger-full-access + never，Windows 用户应先收紧 Profile。","en":"Medium risk: as a full TUI it reads shared sessions and workspace state, invokes OS clipboard helpers, and can update the dsh-tui Profile through /update; the only additional runtime network access found is update checks against the configured npm registry, with no independent telemetry found. macOS/Linux default to workspace-write + ask, while Windows defaults to danger-full-access + never and should be tightened before use."}}},{"id":"omdsh-dev/dsh-better-sidebar","order":30,"name":"DSH-better-sidebar","owner":"omdsh-dev","repo":"omdsh-dev/DSH-better-sidebar","url":"https://github.com/omdsh-dev/DSH-better-sidebar","category":"ui","description":{"en":"Full sidebar workbench with file rendering and editing, terminal, Git, and subagents; third-party plugins can register new tabs.","zh":"侧边栏完整工作台：内置文件渲染编辑、终端、Git 与子代理，支持三方插件注册新 Tab。"},"added":"2026-08-14","curated":true,"topic":true,"stars":702,"forks":38,"openIssues":28,"watchers":702,"pushedAt":"2026-08-14T14:59:19Z","updatedAt":"2026-08-14T14:59:43Z","createdAt":"2026-08-07T16:04:00Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-better-sidebar","version":"0.18.0","lifecycleScripts":["prepare"],"runtimeDependencies":30,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f59ffd07417036baf3953310d42c7b40b280db78","installCommand":"dsh plugin --profile web add github:omdsh-dev/DSH-better-sidebar#f59ffd07417036baf3953310d42c7b40b280db78","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:35.181Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:35.181Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"omdsh-dev/dsh-better-sidebar@f59ffd07417036baf3953310d42c7b40b280db78#scan-2","versionCount":1,"latestCommit":"f59ffd07417036baf3953310d42c7b40b280db78","latestCheckedAt":"2026-09-04T00:00:35.181Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"han-1413141/dsh-sticky-disclosure","order":31,"name":"dsh-sticky-disclosure","owner":"Han-1413141","repo":"Han-1413141/dsh-sticky-disclosure","url":"https://github.com/Han-1413141/dsh-sticky-disclosure","category":"ui","description":{"en":"One-click collapse of every expanded section (Think rows, tool cards) with a live-count pill and a customizable hotkey.","zh":"一键收起会话中所有展开的区块（Think、工具卡等），常驻计数按钮 + 自定义快捷键。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T06:32:32Z","updatedAt":"2026-08-14T06:32:39Z","createdAt":"2026-08-13T14:58:52Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-sticky-disclosure","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"meredith2328/dsh-sticky-note","order":32,"name":"dsh-sticky-note","owner":"Meredith2328","repo":"Meredith2328/dsh-sticky-note","url":"https://github.com/Meredith2328/dsh-sticky-note","category":"ui","description":{"en":"Quick sticky notes on the composer toolbar: jot ideas or TODOs, auto-saved as Markdown, one click to send into the chat.","zh":"编辑框工具栏便签，随手记点子和 TODO，自动保存为 Markdown，一键发送到对话。"},"added":"2026-08-14","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":1,"watchers":3,"pushedAt":"2026-08-14T07:21:53Z","updatedAt":"2026-08-14T07:12:26Z","createdAt":"2026-08-13T19:36:46Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-sticky-note","version":"0.2.3","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"be79b18d044fc72ffd4ffe535178416decccc4e9","installCommand":"dsh plugin --profile web add github:Meredith2328/dsh-sticky-note#be79b18d044fc72ffd4ffe535178416decccc4e9","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:59.021Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:59.021Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"meredith2328/dsh-sticky-note@be79b18d044fc72ffd4ffe535178416decccc4e9#scan-2","versionCount":1,"latestCommit":"be79b18d044fc72ffd4ffe535178416decccc4e9","latestCheckedAt":"2026-09-08T12:00:59.021Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"luaphes/dsh-web-attention-badge","order":33,"name":"dsh-web-attention-badge","owner":"Luaphes","repo":"Luaphes/dsh-web-attention-badge","url":"https://github.com/Luaphes/dsh-web-attention-badge","category":"ui","description":{"en":"Attention reminders: frame badge, tab-title count, and a status-colored whale favicon for sessions waiting for input or finished unopened.","zh":"会话需要你时三处同时亮起：角标、标签页标题计数、按状态换色的鲸鱼 favicon。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T20:46:11Z","updatedAt":"2026-08-14T07:07:36Z","createdAt":"2026-08-13T19:08:13Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-web-attention-badge","version":"0.3.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"zhu1090093659/dsh-web-ui","order":34,"name":"dsh-web-ui","owner":"zhu1090093659","repo":"zhu1090093659/dsh-web-ui","url":"https://github.com/zhu1090093659/dsh-web-ui","category":"ui","description":{"en":"Plugin and skin collection for the DSH Web UI: task board, Git graph, right-side panel, remote mobile UI, pet, live token stats, and a skin center.","zh":"DSH Web UI 插件与皮肤合集：任务看板、git 图、右侧面板、远程移动端 UI、桌宠、实时 token 统计与皮肤中心。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1312,"forks":55,"openIssues":31,"watchers":1312,"pushedAt":"2026-08-14T07:15:13Z","updatedAt":"2026-08-14T08:17:41Z","createdAt":"2026-08-12T05:15:20Z","license":null,"language":"TypeScript","homepage":"https://gallery.dsh-market.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"package-only","branch":"main","kinds":[],"packageName":"dsh-web-ui","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"zealot00/dsh-pet","order":35,"name":"dsh-pet","owner":"zealot00","repo":"zealot00/dsh-pet","url":"https://github.com/zealot00/dsh-pet","category":"ui","description":{"en":"Desktop pet for the DSH Web UI: sprite-sheet animation, agent state linkage, drag, alarm (daily/one-shot) and pomodoro widgets, skin picker with preview.","zh":"DSH Web UI 桌面宠物：精灵图动画、agent 状态联动、拖拽、闹钟（每天/一次）与番茄钟，皮肤下拉选择 + 预览。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-local/dsh-pet","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"starfie1d1272/dsh-builtin-toggles","order":36,"name":"dsh-builtin-toggles","owner":"Starfie1d1272","repo":"Starfie1d1272/dsh-builtin-toggles","url":"https://github.com/Starfie1d1272/dsh-builtin-toggles","category":"ui","description":{"en":"Adds a built-in plugin catalog to DSH Web with search, status explanations, and safe toggles for audited UI plugins.","zh":"为 DSH Web 添加官方内置插件目录、搜索与状态说明，并提供经过审核的安全 UI 插件开关。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T07:02:43Z","updatedAt":"2026-08-14T07:14:19Z","createdAt":"2026-08-13T20:00:45Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-builtin-toggles","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-builtin-toggles","version":"0.3.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bc86c777564a6f192c01582698696d9dd7ac7014","installCommand":"dsh plugin --profile web add github:Starfie1d1272/dsh-builtin-toggles#bc86c777564a6f192c01582698696d9dd7ac7014","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T00:01:09.651Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:09.651Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"starfie1d1272/dsh-builtin-toggles@bc86c777564a6f192c01582698696d9dd7ac7014#scan-2","versionCount":1,"latestCommit":"bc86c777564a6f192c01582698696d9dd7ac7014","latestCheckedAt":"2026-09-03T00:01:09.651Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"jiangnanquan/dsh-ux","order":37,"name":"dsh-ux","owner":"jiangnanquan","repo":"jiangnanquan/dsh-ux","url":"https://github.com/jiangnanquan/dsh-ux","category":"ui","description":{"en":"Solarized light theme, compact layout, think/tool-chain collapse capsules, and balance, session cost, and usage dashboards for the DSH web UI.","zh":"Solarized 浅色主题、紧凑布局、思考/工具链折叠胶囊，以及余额、本轮成本与用量看板的 DSH Web 界面增强插件。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-enhance","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"a903067276-rgb/dsh-hud","order":38,"name":"dsh-hud","owner":"a903067276-rgb","repo":"a903067276-rgb/dsh-hud","url":"https://github.com/a903067276-rgb/dsh-hud","category":"ui","description":{"en":"HUD status panel: git status, MCP servers, skills, model and token usage in a floating side panel.","zh":"HUD 状态面板：Git 状态、MCP 服务器、技能列表、模型与 token 用量，悬浮侧栏一览无余。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-hud","version":"1.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a710f9ecc5f70bfb7170f7b86d3d1c20921f35ce","installCommand":"dsh plugin --profile web add github:a903067276-rgb/dsh-hud#a710f9ecc5f70bfb7170f7b86d3d1c20921f35ce","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:00:56.854Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-14T00:00:56.854Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"a903067276-rgb/dsh-hud@a710f9ecc5f70bfb7170f7b86d3d1c20921f35ce#scan-2","versionCount":1,"latestCommit":"a710f9ecc5f70bfb7170f7b86d3d1c20921f35ce","latestCheckedAt":"2026-09-14T00:00:56.854Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"wsxwj123/dsh-plugins","order":39,"name":"dsh-plugins","owner":"wsxwj123","repo":"wsxwj123/dsh-plugins","url":"https://github.com/wsxwj123/dsh-plugins/tree/main/packages/turn-scrubber","category":"ui","description":{"en":"Compact right-edge turn rail with hover summaries and click-to-jump navigation.","zh":"右侧紧凑回合刻度条，悬停显示回合摘要，点击跳转到对应用户回合。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"missing","branch":"main","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-15T09:00:06.827Z"},"screening":{"version":1,"scope":"manifest","state":"review","risk":"unknown","checkedAt":"2026-08-15T09:00:06.827Z","findings":[{"id":"current-inspection-error","severity":"medium","label":{"zh":"当前仓库无法完成检查，安装命令已暂时撤回","en":"The current repository inspection could not complete; the install command was withdrawn"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["当前仓库无法完成检查，安装命令已暂时撤回"]},"screenedCommit":null},{"id":"kingao294/dsh-skin","order":40,"name":"dsh-skin","owner":"KinGao294","repo":"KinGao294/dsh-skin","url":"https://github.com/KinGao294/dsh-skin","category":"theme","description":{"en":"Codex-style skin switcher plus a custom wallpaper layer with opacity and blur controls.","zh":"Codex 风格皮肤切换器 + 自定义壁纸层，可调透明度与模糊。"},"added":"2026-08-14","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":3,"watchers":3,"pushedAt":"2026-08-13T23:40:05Z","updatedAt":"2026-08-14T07:07:31Z","createdAt":"2026-08-13T23:34:59Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-skin","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"small-tailqwq/dsh-deep-whale","order":41,"name":"dsh-deep-whale","owner":"Small-tailqwq","repo":"Small-tailqwq/dsh-deep-whale","url":"https://github.com/Small-tailqwq/dsh-deep-whale","category":"theme","description":{"en":"Whale-girl skin series for the DSH Web UI (maid-atelier).","zh":"DSH Web 鲸鱼娘皮肤系列（深海女仆工坊 maid-atelier）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":378,"forks":11,"openIssues":8,"watchers":378,"pushedAt":"2026-08-14T06:26:57Z","updatedAt":"2026-08-14T08:16:44Z","createdAt":"2026-08-13T13:02:14Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"missing","branch":"main","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"anionex/dsh-turn-rewind","order":42,"name":"dsh-turn-rewind","owner":"Anionex","repo":"Anionex/dsh-turn-rewind","url":"https://github.com/Anionex/dsh-turn-rewind","category":"session","description":{"en":"Rewind conversation and workspace state, powered by a persistent Change Ledger.","zh":"对话回退：基于持久 Change Ledger 回滚会话与工作区状态。"},"added":"2026-08-13","curated":true,"topic":true,"stars":31,"forks":0,"openIssues":1,"watchers":31,"pushedAt":"2026-08-14T06:20:06Z","updatedAt":"2026-08-14T07:30:35Z","createdAt":"2026-08-13T12:36:53Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/turn-rewind","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"jesse-njx/dsh-crosstalk","order":43,"name":"dsh-crosstalk","owner":"Jesse-njx","repo":"Jesse-njx/dsh-crosstalk","url":"https://github.com/Jesse-njx/dsh-crosstalk","category":"session","description":{"en":"Cross-session messaging for DSH: any session on the machine can list and message any other, Claude Code-style, via a local heartbeat registry and inbox.","zh":"跨会话消息：本机任意会话都可像 Claude Code 一样列出并互发消息，基于本地心跳注册表与收件箱。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-crosstalk/bundle","version":"0.1.0","lifecycleScripts":["postinstall"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"24410fdda54b7e8230648e4394169156da85f564","installCommand":"dsh plugin --profile web add github:Jesse-njx/dsh-crosstalk#24410fdda54b7e8230648e4394169156da85f564","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:00:58.229Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-14T00:00:58.229Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：postinstall","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jesse-njx/dsh-crosstalk@24410fdda54b7e8230648e4394169156da85f564#scan-2","versionCount":1,"latestCommit":"24410fdda54b7e8230648e4394169156da85f564","latestCheckedAt":"2026-09-14T00:00:58.229Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"hellodigua/dsh-share","order":44,"name":"dsh-share","owner":"hellodigua","repo":"hellodigua/dsh-share","url":"https://github.com/hellodigua/dsh-share","category":"session","description":{"en":"Share your conversations with one click.","zh":"一键分享你的对话。"},"added":"2026-08-13","curated":true,"topic":true,"stars":14,"forks":0,"openIssues":0,"watchers":14,"pushedAt":"2026-08-14T06:53:27Z","updatedAt":"2026-08-14T06:53:31Z","createdAt":"2026-08-12T13:19:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-share","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4cca10110cc3cde7b58febfd2c1ffdbdc66c630d","installCommand":"dsh plugin --profile web add github:hellodigua/dsh-share#4cca10110cc3cde7b58febfd2c1ffdbdc66c630d","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-03T00:01:12.863Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:12.863Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"hellodigua/dsh-share@4cca10110cc3cde7b58febfd2c1ffdbdc66c630d#scan-2","versionCount":1,"latestCommit":"4cca10110cc3cde7b58febfd2c1ffdbdc66c630d","latestCheckedAt":"2026-09-03T00:01:12.863Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"moeblack/dsh-message-edit","order":45,"name":"dsh-message-edit","owner":"Moeblack","repo":"Moeblack/dsh-message-edit","url":"https://github.com/Moeblack/dsh-message-edit","category":"session","description":{"en":"Branch-based message editing, reroll, retry, and a version timeline.","zh":"基于分支的消息编辑、reroll、重试与版本时间线。"},"added":"2026-08-13","curated":true,"topic":true,"stars":16,"forks":0,"openIssues":2,"watchers":16,"pushedAt":"2026-08-14T06:12:15Z","updatedAt":"2026-08-14T08:17:09Z","createdAt":"2026-08-06T04:03:56Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-message-edit","version":"0.2.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b78a167064ca612f1c400060d2bfc1dc9bc46436","installCommand":"dsh plugin --profile web add github:Moeblack/dsh-message-edit#b78a167064ca612f1c400060d2bfc1dc9bc46436","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-09T00:00:31.696Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:31.696Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.mjs","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现主动网络请求能力"]},"passport":{"evidenceId":"moeblack/dsh-message-edit@b78a167064ca612f1c400060d2bfc1dc9bc46436#scan-2","versionCount":1,"latestCommit":"b78a167064ca612f1c400060d2bfc1dc9bc46436","latestCheckedAt":"2026-09-09T00:00:31.696Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"buyi-wsgzg/dsh-sidechain","order":46,"name":"dsh-sidechain","owner":"Buyi-wsgzg","repo":"Buyi-wsgzg/dsh-sidechain","url":"https://github.com/Buyi-wsgzg/dsh-sidechain","category":"session","description":{"en":"`/side` persistent side sessions and `/btw` one-shot side questions, run in a temporary fork without touching main history.","zh":"`/side` 持续性侧会话与 `/btw` 一次性侧问，在临时 fork 中运行、不写入主会话历史。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":1,"watchers":3,"pushedAt":"2026-08-14T03:40:19Z","updatedAt":"2026-08-14T03:40:24Z","createdAt":"2026-08-07T13:21:02Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-sidechain","version":"0.6.7","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"deca4cf874c38d322448b798a87aafb2ae0b3f30","installCommand":"dsh plugin --profile web add github:Buyi-wsgzg/dsh-sidechain#deca4cf874c38d322448b798a87aafb2ae0b3f30","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-10T12:02:43.386Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-10T12:02:43.386Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"buyi-wsgzg/dsh-sidechain@deca4cf874c38d322448b798a87aafb2ae0b3f30#scan-2","versionCount":1,"latestCommit":"deca4cf874c38d322448b798a87aafb2ae0b3f30","latestCheckedAt":"2026-09-10T12:02:43.386Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bill9109/dsh-conversation-share","order":47,"name":"dsh-conversation-share","owner":"bill9109","repo":"bill9109/dsh-conversation-share","url":"https://github.com/bill9109/dsh-conversation-share","category":"session","description":{"en":"Share any excerpt of a conversation.","zh":"分享任意段落的对话。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:56:01Z","updatedAt":"2026-08-14T07:56:11Z","createdAt":"2026-08-12T18:15:15Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-conversation-share","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6609d7ff25b0b1d4edfe0e4a960d908826a55a07","installCommand":"dsh plugin --profile web add github:bill9109/dsh-conversation-share#6609d7ff25b0b1d4edfe0e4a960d908826a55a07","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:53.274Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:53.274Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"bill9109/dsh-conversation-share@6609d7ff25b0b1d4edfe0e4a960d908826a55a07#scan-2","versionCount":1,"latestCommit":"6609d7ff25b0b1d4edfe0e4a960d908826a55a07","latestCheckedAt":"2026-09-08T12:00:53.274Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"yuezengwu/dsh-explain","order":48,"name":"dsh-explain","owner":"yuezengwu","repo":"yuezengwu/dsh-explain","url":"https://github.com/yuezengwu/dsh-explain","category":"session","description":{"en":"Local-first learning mode: cross-session learning threads with per-source explanations.","zh":"本地优先学习模式：跨会话全局学习线程、按来源讲解。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-13T14:47:21Z","updatedAt":"2026-08-14T02:52:01Z","createdAt":"2026-08-12T09:11:07Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-explain","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"moeblack/dsh-prompt-studio","order":49,"name":"dsh-prompt-studio","owner":"Moeblack","repo":"Moeblack/dsh-prompt-studio","url":"https://github.com/Moeblack/dsh-prompt-studio","category":"session","description":{"en":"Edit user and built-in system-prompt sections with live preview.","zh":"带实时预览的用户/内置 system prompt 分节编辑器。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-08-13T14:00:19Z","updatedAt":"2026-08-13T16:43:23Z","createdAt":"2026-08-05T22:08:53Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-prompt-studio","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"be5e97d6ea4e882067d9f3a6385f486f7f192e92","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:02:05.797Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-13T00:02:05.797Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"dynamic-code","severity":"high","label":{"zh":"发现动态代码执行入口","en":"Dynamic code execution signal found"},"files":["index.mjs"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.mjs","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["仓库根目录未发现依赖锁文件","发现动态代码执行入口","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"moeblack/dsh-prompt-studio@be5e97d6ea4e882067d9f3a6385f486f7f192e92#scan-2","versionCount":1,"latestCommit":"be5e97d6ea4e882067d9f3a6385f486f7f192e92","latestCheckedAt":"2026-09-13T00:02:05.797Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"czm15053/dsh-peer-link","order":50,"name":"dsh-peer-link","owner":"czm15053","repo":"czm15053/dsh-peer-link","url":"https://github.com/czm15053/dsh-peer-link","category":"session","description":{"en":"Let dsh and Claude Code sessions message each other directly; comes with a clickable peer list card (sort/search/send/refresh).","zh":"让 dsh 和 Claude Code 会话直接互发消息，附带可点击的会话列表卡片（搜索/刷新/弹窗发送）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T04:59:17Z","updatedAt":"2026-08-14T06:20:05Z","createdAt":"2026-08-14T04:36:35Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-peer-link","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a6c5aa872fcacc1ab3fababec00bed9222f09e0a","installCommand":"dsh plugin --profile web add github:czm15053/dsh-peer-link#a6c5aa872fcacc1ab3fababec00bed9222f09e0a","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:01:09.158Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-09T00:01:09.158Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"czm15053/dsh-peer-link@a6c5aa872fcacc1ab3fababec00bed9222f09e0a#scan-2","versionCount":1,"latestCommit":"a6c5aa872fcacc1ab3fababec00bed9222f09e0a","latestCheckedAt":"2026-09-09T00:01:09.158Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"nwflower/dsh-chat-import","order":51,"name":"dsh-chat-import","owner":"Nwflower","repo":"Nwflower/dsh-chat-import","url":"https://github.com/Nwflower/dsh-chat-import","category":"session","description":{"en":"Import Claude Code / Codex / ChatGPT / Cursor / Gemini / Reasonix / opencode chat histories as resumable DeepSeek Harness sessions.","zh":"把 Claude Code / Codex / ChatGPT / Cursor / Gemini / Reasonix / opencode 的聊天记录全保真导入为可续聊的 DSH 会话。"},"added":"2026-08-13","curated":true,"topic":true,"stars":14,"forks":2,"openIssues":1,"watchers":14,"pushedAt":"2026-08-14T07:02:55Z","updatedAt":"2026-08-14T07:54:38Z","createdAt":"2026-08-13T14:21:58Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-chat-import","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null,"codexPick":{"repo":"nwflower/dsh-chat-import","pickedAt":"2026-08-17T10:16:37.463Z","reviewedCommit":"f2a1abfde467596821c7e73b53e1124e2ec77f32","category":"session","summary":{"zh":"把 Claude Code、Codex、ChatGPT、Cursor、Gemini、Qoder 等 15 类 Agent 会话导入 DSH 继续对话，并支持导出、增量同步和跨机器 bundle。","en":"Imports histories from 15 agent ecosystems including Claude Code, Codex, ChatGPT, Cursor, Gemini, and Qoder into resumable DSH sessions, with export, incremental sync, and portable bundles."},"reason":{"zh":"v0.6.0 新增 Qoder CLI、Codex 资产迁移、doctor、MCP 镜像建议和哈希校验；发布包移除运行时 child_process，只有 fzstd 一个依赖。GitHub Release 与 npm 包内容一致，526 项测试和真实 DSH headless 冒烟 CI 通过。","en":"v0.6.0 adds Qoder CLI, Codex asset migration, doctor checks, MCP mirroring suggestions, and hash validation. The package removes runtime child_process and has one dependency, fzstd. GitHub Release and npm package contents match, with 526 tests and a real DSH headless smoke check passing in CI."},"safety":{"risk":"medium","zh":"中风险：会读取本机多种 Agent 历史并把内容写入 DSH，会话可能含密钥；导出和同步还能写回 Claude、Codex、Grok 路径，双向同步默认关闭。运行包无 install、postinstall、外部网络、遥测或 Shell，Web 路由自身未做认证或同源校验。建议仅在环回地址使用，先 preview 或 dry-run，备份源会话后再开启写回。","en":"Medium risk: it reads local histories from multiple agents and writes them into DSH, where transcripts may contain secrets; export and sync can also write back to Claude, Codex, and Grok paths, while bidirectional sync is off by default. The runtime package has no install or postinstall hook, external network egress, telemetry, or shell execution, but its Web routes add no authentication or same-origin check. Keep DSH on loopback, preview first, and back up source sessions before enabling write-back."}}},{"id":"nwflower/dsh-file-claim","order":52,"name":"dsh-file-claim","owner":"Nwflower","repo":"Nwflower/dsh-file-claim","url":"https://github.com/Nwflower/dsh-file-claim","category":"session","description":{"en":"File claim/release protection for parallel DSH sessions on the same workspace (heartbeat stale takeover, pending 3-way merge area).","zh":"同一工作区并行多会话的文件认领与写入保护（claim/release、心跳 stale 接管、pending 三路合并）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-file-claim","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"42f07e2171d3781edd932732d243646635f4c1a0","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:02:35.508Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-14T00:02:35.508Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["index.mjs"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["仓库未声明可识别许可证","发现递归删除或直接删除文件的调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"nwflower/dsh-file-claim@42f07e2171d3781edd932732d243646635f4c1a0#scan-2","versionCount":1,"latestCommit":"42f07e2171d3781edd932732d243646635f4c1a0","latestCheckedAt":"2026-09-14T00:02:35.508Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"chinesezjc/dsh-interconnect","order":53,"name":"dsh-interconnect","owner":"Chinesezjc","repo":"Chinesezjc/dsh-interconnect","url":"https://github.com/Chinesezjc/dsh-interconnect","category":"session","description":{"en":"Cross-instance message and event handoff between DSH instances via an interconnect server.","zh":"跨实例互联：经 interconnect 服务在多个 DSH 实例间转发消息与事件。"},"added":"2026-08-14","curated":true,"topic":true,"stars":22,"forks":2,"openIssues":0,"watchers":22,"pushedAt":"2026-08-14T06:32:47Z","updatedAt":"2026-08-14T08:12:07Z","createdAt":"2026-08-13T12:19:01Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-interconnect","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"wine-red/dsh-prompt-stash","order":54,"name":"dsh-prompt-stash","owner":"Wine-Red","repo":"Wine-Red/dsh-prompt-stash","url":"https://github.com/Wine-Red/dsh-prompt-stash","category":"session","description":{"en":"Local, per-session LIFO prompt stash for temporarily setting aside unfinished composer text and safely restoring it later.","zh":"本地、按会话隔离的 LIFO 输入暂存：临时收起未完成的输入，之后安全恢复并继续编辑。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:59:40Z","updatedAt":"2026-08-14T07:59:44Z","createdAt":"2026-08-13T21:12:03Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-prompt-stash","version":"0.2.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"770467287c0577af1d74220d77eda8a0cb5097f4","installCommand":"dsh plugin --profile web add github:Wine-Red/dsh-prompt-stash#770467287c0577af1d74220d77eda8a0cb5097f4","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:48.027Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-08T12:00:48.027Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"wine-red/dsh-prompt-stash@770467287c0577af1d74220d77eda8a0cb5097f4#scan-2","versionCount":1,"latestCommit":"770467287c0577af1d74220d77eda8a0cb5097f4","latestCheckedAt":"2026-09-08T12:00:48.027Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"loserfox/distill","order":55,"name":"distill","owner":"LoserFox","repo":"LoserFox/distill","url":"https://github.com/LoserFox/distill","category":"memory","description":{"en":"Automatic conversation distillation: background subagent reflection + skill create/update.","zh":"自动对话蒸馏：后台 subagent 反省 + 技能 create/update。"},"added":"2026-08-13","curated":true,"topic":true,"stars":14,"forks":0,"openIssues":2,"watchers":14,"pushedAt":"2026-08-13T13:11:31Z","updatedAt":"2026-08-14T07:23:36Z","createdAt":"2026-08-04T21:12:42Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@loserfox/distill","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-mnemon","order":56,"name":"dsh-mnemon","owner":"omdsh-dev","repo":"omdsh-dev/dsh-mnemon","url":"https://github.com/omdsh-dev/dsh-mnemon","category":"memory","description":{"en":"Deep Mnemon integration: local three-tier memory (Runtime Memory, retrievable Documents, supervised Memory Spaces).","zh":"Mnemon 深度集成：本地三层记忆（Runtime Memory、可检索 Documents、受监督 Memory Spaces）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":374,"forks":30,"openIssues":6,"watchers":0,"pushedAt":"2026-09-14T21:00:56Z","updatedAt":"2026-09-15T10:52:12Z","createdAt":"2026-08-10T04:38:03Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Grivn/dsh-mnemon#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mnemon","version":"0.5.9","lifecycleScripts":[],"runtimeDependencies":19,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1363ebffaf19c9ab4badf0137f6fe87acacaf989","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-mnemon#1363ebffaf19c9ab4badf0137f6fe87acacaf989","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-15T12:00:42.706Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-15T12:00:42.706Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"omdsh-dev/dsh-mnemon@1363ebffaf19c9ab4badf0137f6fe87acacaf989#scan-2","versionCount":1,"latestCommit":"1363ebffaf19c9ab4badf0137f6fe87acacaf989","latestCheckedAt":"2026-09-15T12:00:42.706Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"omdsh-dev/dsh-mnemon","pickedAt":"2026-09-04T04:45:28.908Z","reviewedCommit":"b17ef91b89147a63e7de0d8c454c1354d3ee4041","category":"session","summary":{"zh":"为 DSH 提供可组合的跨会话记忆：一个 Starter 安装 Sources、Strategies 与九个 Memory Space Provider，并保留原有侧栏、配置和存储格式。","en":"Composable cross-session memory for DSH: one Starter installs Sources, Strategies, and nine Memory Space Providers while preserving the existing sidebar, configuration, and storage formats."},"reason":{"zh":"v0.5.0 已由 RC 晋升为稳定版，发布流水线、真实升级、Headless、Windows 与 Node 20/22/24 均有验证；默认使用本地 Mnemon Native，三个增强策略保持关闭，适合需要跨任务项目记忆且希望以后按需切换 Provider 的用户。","en":"v0.5.0 is the stable promotion of the RC with verified publishing, real upgrades, Headless, Windows, and Node 20/22/24 gates. It defaults to local Mnemon Native and keeps all three enhancement strategies disabled, making it a strong fit for users who want durable project memory with optional provider choice."},"safety":{"risk":"medium","zh":"中风险：插件会读取并写入持久记忆；启用外部 Provider 时，记忆内容会发送到所配置的服务，部分 Provider 还会启动本地 CLI。Source、Provider 与 Strategy 代码运行在 DSH Host 内，Cordis 隔离不等同于进程沙箱。npm 包无 install/postinstall，默认 Provider 本地运行，外部 Provider 需主动配置，进程与网络 I/O 有超时和大小限制。请勿把密钥写入记忆，并仅启用可信扩展。","en":"Medium risk: the plugin reads and writes durable memory; enabled external Providers can send memory content to configured services, and some Providers spawn local CLIs. Source, Provider, and Strategy code runs inside the DSH Host, so Cordis isolation is not a process sandbox. The npm package has no install/postinstall hook, the default Provider is local, external Providers are opt-in, and process/network I/O is bounded. Do not store secrets in memory and enable only trusted extensions."}}},{"id":"modusensus/dsh-mneme","order":57,"name":"dsh-mneme","owner":"modusensus","repo":"modusensus/dsh-mneme","url":"https://github.com/modusensus/dsh-mneme","category":"memory","description":{"en":"Cross-session memory: SQLite with a human-editable Markdown mirror, background consolidation (dedup, merge, conflict resolution), and six memory tools.","zh":"跨会话记忆：SQLite + 可人工编辑的 Markdown 镜像，后台自动巩固（去重/合并/冲突裁决），提供 6 个记忆工具。"},"added":"2026-08-14","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T05:52:58Z","updatedAt":"2026-08-14T05:53:08Z","createdAt":"2026-08-13T15:18:08Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@modusensus/dsh-mneme","version":"0.7.16","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["dsh-mneme/cordis.patch.yml","dsh-mneme/lib/index.js","dsh-mneme/lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"add7c4510639c51f817af990136fd484686ecf34","installCommand":"dsh plugin --profile web add github:modusensus/dsh-mneme#add7c4510639c51f817af990136fd484686ecf34","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:02:42.075Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-10T12:02:42.075Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dsh-mneme/lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dsh-mneme/lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["dsh-mneme/lib/client.js"]}],"filesInspected":["package.json","dsh-mneme/lib/index.js","dsh-mneme/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"modusensus/dsh-mneme@add7c4510639c51f817af990136fd484686ecf34#scan-2","versionCount":1,"latestCommit":"add7c4510639c51f817af990136fd484686ecf34","latestCheckedAt":"2026-09-10T12:02:42.075Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"nowledge-co/nowledge-mem-deepseek-harness","order":58,"name":"nowledge-mem-deepseek-harness","owner":"nowledge-co","repo":"nowledge-co/nowledge-mem-deepseek-harness","url":"https://github.com/nowledge-co/nowledge-mem-deepseek-harness","category":"memory","description":{"en":"One memory layer for every AI tool and agent: Context Bundle injection, prompt-time recall, MCP tools, and turn-end DSH thread capture.","zh":"给所有 AI 工具和 Agent 共用的一层记忆：注入 Context Bundle、提示时检索、MCP 工具与回合结束 DSH 线程捕获。"},"added":"2026-08-14","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":1,"watchers":4,"pushedAt":"2026-08-13T13:54:56Z","updatedAt":"2026-08-14T04:56:15Z","createdAt":"2026-08-13T13:47:02Z","license":null,"language":"JavaScript","homepage":"https://mem.nowledge.co/integrations/deepseek-harness","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"nowledge-mem-deepseek-harness","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"17f64d0870727793dbc46fefc0e3d901ec336feb","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-13T00:02:07.321Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-13T00:02:07.321Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["src/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js","cordis.patch.yml"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现递归删除或直接删除文件的调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"nowledge-co/nowledge-mem-deepseek-harness@17f64d0870727793dbc46fefc0e3d901ec336feb#scan-2","versionCount":1,"latestCommit":"17f64d0870727793dbc46fefc0e3d901ec336feb","latestCheckedAt":"2026-09-13T00:02:07.321Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"jesse-njx/dsh-memory","order":59,"name":"dsh-memory","owner":"Jesse-njx","repo":"Jesse-njx/dsh-memory","url":"https://github.com/Jesse-njx/dsh-memory","category":"memory","description":{"en":"Cited memory over DSH's lossless session log: distilled facts carry `(sessionId, eventRange)` citations that expand back to the exact original log excerpt.","zh":"基于 DSH 无损会话日志的引用式记忆：蒸馏出的事实带 `(sessionId, eventRange)` 引用，可随时展开回原始日志片段。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":2,"watchers":2,"pushedAt":"2026-08-13T16:39:45Z","updatedAt":"2026-08-14T07:02:00Z","createdAt":"2026-08-13T16:33:27Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-memory/bundle","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2a1c9e561b8784bd390f1fd97f307c82abf96f9e","installCommand":"dsh plugin --profile web add github:Jesse-njx/dsh-memory#2a1c9e561b8784bd390f1fd97f307c82abf96f9e","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T12:00:53.144Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:53.144Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"jesse-njx/dsh-memory@2a1c9e561b8784bd390f1fd97f307c82abf96f9e#scan-2","versionCount":1,"latestCommit":"2a1c9e561b8784bd390f1fd97f307c82abf96f9e","latestCheckedAt":"2026-09-12T12:00:53.144Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"flymysql/dsh-memory","order":60,"name":"dsh-memory","owner":"flymysql","repo":"flymysql/dsh-memory","url":"https://github.com/flymysql/dsh-memory","category":"memory","description":{"en":"Cross-session memory vault: remember / recall / forget tools, per-turn prompt injection, and a settings-page entry browser.","zh":"跨会话记忆库：remember / recall / forget 工具、每轮提示注入与设置页条目浏览。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-memory-vault","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d6afee4bb594164193b7e262d6539d0c55b54a8b","installCommand":"dsh plugin --profile web add github:flymysql/dsh-memory#d6afee4bb594164193b7e262d6539d0c55b54a8b","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:02:35.429Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-14T00:02:35.429Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"flymysql/dsh-memory@d6afee4bb594164193b7e262d6539d0c55b54a8b#scan-2","versionCount":1,"latestCommit":"d6afee4bb594164193b7e262d6539d0c55b54a8b","latestCheckedAt":"2026-09-14T00:02:35.429Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"xplore-lab/dsh-plugin-asmemory","order":61,"name":"dsh-plugin-asmemory","owner":"Xplore-LAB","repo":"Xplore-LAB/dsh-plugin-asmemory","url":"https://github.com/Xplore-LAB/dsh-plugin-asmemory","category":"memory","description":{"en":"Action-state time memory: record typed states and actions, then analyze trends, anomalies, and causality.","zh":"动作-状态时序记忆：记录类型化的状态与动作，做趋势、异常与因果关联分析。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-plugin-asmemory","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.yml"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"perrylink/dsh-memento","order":62,"name":"dsh-memento","owner":"PerryLink","repo":"PerryLink/dsh-memento","url":"https://github.com/PerryLink/dsh-memento","category":"memory","description":{"en":"Bounded, layered, approval-gated, auditable cross-session memory: a typed `ctx.memory` seam with a zero-dependency SQLite provider, a `memory` tool, and frozen snapshot injection; every write passes the approval gate and stays reconstructable from the session log.","zh":"有界、分层、带审批门、可审计的跨会话记忆：`ctx.memory` 服务 + 零依赖 SQLite 存储 + `memory` 工具与冻结快照注入；写入必过审批门，模型可见内容可自会话日志重建。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T19:50:51Z","updatedAt":"2026-08-13T20:14:09Z","createdAt":"2026-08-13T19:29:14Z","license":"Apache-2.0","language":"JavaScript","homepage":"https://github.com/PerryLink/dsh-memento","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-memento","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"iccuse/dsh-file-memory","order":63,"name":"dsh-file-memory","owner":"ICCuse","repo":"ICCuse/dsh-file-memory","url":"https://github.com/ICCuse/dsh-file-memory","category":"memory","description":{"en":"File-backed working memory: memorize/recall key premises verbatim in a session notes file so they survive context compaction losslessly.","zh":"文件型工作记忆：memorize/recall 把关键前提逐字保存在会话笔记文件，无损挺过上下文压缩。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-file-memory","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"iccuse/dsh-knowledge","order":64,"name":"dsh-knowledge","owner":"ICCuse","repo":"ICCuse/dsh-knowledge","url":"https://github.com/ICCuse/dsh-knowledge","category":"memory","description":{"en":"Bridge into a global Markdown knowledge base shared with the Codex kb.cmd CLI: kb_add/kb_search/kb_show/kb_timeline tools with byte-compatible frontmatter.","zh":"全局知识库桥：kb_add/kb_search/kb_show/kb_timeline 读写与 Codex 共享的 D:\\knowledge（格式逐字节兼容）。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-knowledge","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"iccuse/dsh-premise-guard","order":65,"name":"dsh-premise-guard","owner":"ICCuse","repo":"ICCuse/dsh-premise-guard","url":"https://github.com/ICCuse/dsh-premise-guard","category":"memory","description":{"en":"Post-compaction premise-drift guard: injects a one-shot notice when a compaction summary drops a critical literal anchor.","zh":"压缩后前提漂移守卫：摘要丢失关键字面锚点时注入一次性提醒。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-premise-guard","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2161842c336d4d580ffcf928fad44cf307082084","installCommand":"dsh plugin --profile web add github:ICCuse/dsh-premise-guard#2161842c336d4d580ffcf928fad44cf307082084","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:02:39.985Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-14T00:02:39.985Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"iccuse/dsh-premise-guard@2161842c336d4d580ffcf928fad44cf307082084#scan-2","versionCount":1,"latestCommit":"2161842c336d4d580ffcf928fad44cf307082084","latestCheckedAt":"2026-09-14T00:02:39.985Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"lire1131/dsh-undo-plugin","order":66,"name":"dsh-undo-plugin","owner":"lire1131","repo":"lire1131/dsh-undo-plugin","url":"https://github.com/lire1131/dsh-undo-plugin","category":"tools","description":{"en":"Undo/redo & rollback system for DSH: every config change is auto-snapshotted; undo/redo/restore to any version from the WebUI or the offline CLI/GUI tools (works even when DSH fails to boot).","zh":"DSH 撤销/回退系统：配置变更自动存档，一键撤销/恢复/回退到任意版本，支持 WebUI 与离线 CLI/GUI 工具（DSH 启动失败也能救）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":10,"forks":1,"openIssues":0,"watchers":10,"pushedAt":"2026-08-15T14:59:47Z","updatedAt":"2026-08-15T14:59:52Z","createdAt":"2026-08-14T05:13:17Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-undo-savepoint","version":"0.4.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ebd6a12b3097b57e57393f0ea7bb8055426e091b","installCommand":"dsh plugin --profile web add github:lire1131/dsh-undo-plugin#ebd6a12b3097b57e57393f0ea7bb8055426e091b","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-29T00:00:28.979Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:28.979Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"lire1131/dsh-undo-plugin@ebd6a12b3097b57e57393f0ea7bb8055426e091b#scan-2","versionCount":1,"latestCommit":"ebd6a12b3097b57e57393f0ea7bb8055426e091b","latestCheckedAt":"2026-08-29T00:00:28.979Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"maxeaglet/dsh-bash-terminal","order":67,"name":"dsh-bash-terminal","owner":"MAXeaglet","repo":"MAXeaglet/dsh-bash-terminal","url":"https://github.com/MAXeaglet/dsh-bash-terminal","category":"tools","description":{"en":"One shell tool for PowerShell / Git Bash / WSL on Windows plus an interactive PTY terminal; the default terminal is chosen by the user in DSH settings.","zh":"一个 shell 工具：Windows 上统一执行 PowerShell / Git Bash / WSL，外加交互式 PTY 终端，默认终端由用户在设置中选择。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-08-14T06:30:33Z","updatedAt":"2026-08-14T06:30:58Z","createdAt":"2026-08-13T16:47:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-bash-terminal","version":"0.3.14","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","dist/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"anionex/dsh-vision-toolkit","order":68,"name":"dsh-vision-toolkit","owner":"Anionex","repo":"Anionex/dsh-vision-toolkit","url":"https://github.com/Anionex/dsh-vision-toolkit","category":"tools","description":{"en":"Vision tasks for text-only models: intent-aware image Q&A, long-screenshot OCR, UI reproduction, grounding, and pixel diff.","zh":"让纯文本模型更好地做视觉任务：带意图的图片问答、长截图 OCR、UI 还原等。"},"added":"2026-08-13","curated":true,"topic":true,"stars":267,"forks":17,"openIssues":3,"watchers":267,"pushedAt":"2026-08-14T07:14:24Z","updatedAt":"2026-08-14T08:13:46Z","createdAt":"2026-08-13T12:36:34Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-vision-toolkit","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null,"codexPick":{"repo":"anionex/dsh-vision-toolkit","pickedAt":"2026-08-16T21:59:08.679Z","reviewedCommit":"e50bb8d9da6022e993a1b00859d22afdc5621a7e","category":"tools","summary":{"zh":"为纯文本 DSH 模型补充图片问答、长图 OCR、目标定位、UI 还原和像素对比等视觉工作流。","en":"Adds image Q&A, long-screenshot OCR, grounding, UI restoration, and pixel-diff workflows to text-only DSH models."},"reason":{"zh":"Web 可直接粘贴图片并自动切换视觉变体，十个工具覆盖远程理解与本地处理；发布绑定源码、固定上游快照，并通过 Node 22/24、Worker 与 Profile 验收 CI。","en":"Supports direct image paste with automatic vision variants and ten remote/local tools; releases pin source and upstream snapshots and pass Node 22/24, Worker, and Profile acceptance CI."},"safety":{"risk":"medium","zh":"在线理解会把所选图片和任务提示发送至 vision.anionex.me，再转发给 Groq；首次运行会创建 Python 环境并安装固定版本依赖，确认更新时可调用 pnpm 修改当前 Profile。包无安装生命周期脚本，本地裁剪、描摹和像素对比不上传。敏感图片建议改用自有视觉端点。","en":"Remote understanding sends selected image bytes and task prompts to vision.anionex.me, which forwards them to Groq; first run creates a Python environment with pinned dependencies, and confirmed updates may invoke pnpm against the current Profile. The package has no install lifecycle scripts, while local crop, trace, and pixel diff stay on-device. Use a private vision endpoint for sensitive images."}}},{"id":"omdsh-dev/dsh-custom-tool","order":69,"name":"dsh-custom-tool","owner":"omdsh-dev","repo":"omdsh-dev/dsh-custom-tool","url":"https://github.com/omdsh-dev/dsh-custom-tool","category":"tools","description":{"en":"Create and manage sandboxed JavaScript tools with a Monaco editor and model-driven tool lifecycle.","zh":"用 Monaco 编辑器创建和管理沙箱化的自定义 JavaScript 工具。"},"added":"2026-08-13","curated":true,"topic":true,"stars":20,"forks":0,"openIssues":0,"watchers":20,"pushedAt":"2026-08-13T15:11:37Z","updatedAt":"2026-08-14T08:14:39Z","createdAt":"2026-08-13T12:00:05Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-custom-tool","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"anionex/dsh-computer-use","order":70,"name":"dsh-computer-use","owner":"Anionex","repo":"Anionex/dsh-computer-use","url":"https://github.com/Anionex/dsh-computer-use","category":"tools","description":{"en":"Accessibility-first macOS computer use: fresh observations, stale-state rejection, scoped permissions, and safe input.","zh":"macOS 电脑控制：Accessibility 观测、过期状态拒绝、作用域权限与安全输入。"},"added":"2026-08-13","curated":true,"topic":true,"stars":15,"forks":2,"openIssues":1,"watchers":15,"pushedAt":"2026-08-14T06:19:59Z","updatedAt":"2026-08-14T06:20:25Z","createdAt":"2026-08-13T12:54:24Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-computer-use","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-data-agent","order":71,"name":"dsh-data-agent","owner":"omdsh-dev","repo":"omdsh-dev/dsh-data-agent","url":"https://github.com/omdsh-dev/dsh-data-agent","category":"tools","description":{"en":"Let the AI connect to databases and write SQL for you.","zh":"让 AI 帮你连数据库、写 SQL。"},"added":"2026-08-13","curated":true,"topic":true,"stars":18,"forks":1,"openIssues":0,"watchers":18,"pushedAt":"2026-08-14T16:59:42Z","updatedAt":"2026-08-14T16:59:43Z","createdAt":"2026-08-11T16:06:56Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@yejiming/dsh-data-agent","version":"0.0.3","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T17:00:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:00:52.840Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-toolkit","order":72,"name":"dsh-toolkit","owner":"omdsh-dev","repo":"omdsh-dev/dsh-toolkit","url":"https://github.com/omdsh-dev/dsh-toolkit","category":"tools","description":{"en":"Zero-dependency toolkit: time / encoding / json / calculator / csv / regex / markdown / diff / stat / schema — ten deterministic tools in one install.","zh":"零依赖工具包：time / encoding / json / calculator / csv / regex / markdown / diff / stat / schema 十件套一键安装。"},"added":"2026-08-13","curated":true,"topic":true,"stars":14,"forks":0,"openIssues":3,"watchers":14,"pushedAt":"2026-08-14T03:11:18Z","updatedAt":"2026-08-14T07:39:18Z","createdAt":"2026-08-08T13:41:51Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-toolkit","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-csv","order":73,"name":"dsh-tool-csv","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-csv","url":"https://github.com/omdsh-dev/dsh-tool-csv","category":"tools","description":{"en":"Parse/query/aggregate/convert CSV (RFC 4180) with a zero-dependency state-machine parser.","zh":"CSV 解析/查询/统计/转换（RFC 4180），零依赖状态机解析器。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T03:10:56Z","updatedAt":"2026-08-14T03:11:03Z","createdAt":"2026-08-07T15:24:27Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-csv","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-calculator","order":74,"name":"dsh-tool-calculator","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-calculator","url":"https://github.com/omdsh-dev/dsh-tool-calculator","category":"tools","description":{"en":"Safe math expression evaluator, zero-dependency recursive-descent parser.","zh":"安全的数学表达式求值器，零依赖递归下降解析器。"},"added":"2026-08-13","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-14T03:10:54Z","updatedAt":"2026-08-14T05:28:38Z","createdAt":"2026-08-05T01:46:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-calculator","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-diff","order":75,"name":"dsh-tool-diff","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-diff","url":"https://github.com/omdsh-dev/dsh-tool-diff","category":"tools","description":{"en":"Structured comparison and unified diffs for text/JSON/CSV/Markdown.","zh":"文本/JSON/CSV/Markdown 结构化比较与 unified diff。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:10:59Z","updatedAt":"2026-08-14T03:11:03Z","createdAt":"2026-08-09T05:38:31Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-diff","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-encoding","order":76,"name":"dsh-tool-encoding","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-encoding","url":"https://github.com/omdsh-dev/dsh-tool-encoding","category":"tools","description":{"en":"base64/url/hex encoding, common hashes, and UUID generation.","zh":"base64/url/hex 编解码、常用哈希、UUID 生成。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-08-14T03:11:01Z","updatedAt":"2026-08-14T03:11:05Z","createdAt":"2026-08-06T02:03:21Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-encoding","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-json","order":77,"name":"dsh-tool-json","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-json","url":"https://github.com/omdsh-dev/dsh-tool-json","category":"tools","description":{"en":"JSON queries with a JMESPath subset.","zh":"JMESPath 子集 JSON 查询。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:11:04Z","updatedAt":"2026-08-14T03:11:09Z","createdAt":"2026-08-05T04:17:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-json","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-markdown","order":78,"name":"dsh-tool-markdown","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-markdown","url":"https://github.com/omdsh-dev/dsh-tool-markdown","category":"tools","description":{"en":"HTML↔Markdown conversion, GFM table normalization, and TOC generation.","zh":"HTML↔Markdown 转换、GFM 表格规范化、目录生成。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:11:06Z","updatedAt":"2026-08-14T03:11:11Z","createdAt":"2026-08-08T13:41:54Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-markdown","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-regex","order":79,"name":"dsh-tool-regex","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-regex","url":"https://github.com/omdsh-dev/dsh-tool-regex","category":"tools","description":{"en":"Test/extract/safe-replace/statically explain regexes without executing code.","zh":"正则测试/提取/安全替换/静态解释（不执行代码）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:11:09Z","updatedAt":"2026-08-14T03:11:17Z","createdAt":"2026-08-07T15:24:30Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-regex","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-schema","order":80,"name":"dsh-tool-schema","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-schema","url":"https://github.com/omdsh-dev/dsh-tool-schema","category":"tools","description":{"en":"JSON Schema validation: validate/paths/explain/normalize.","zh":"JSON Schema 验证：validate/paths/explain/normalize。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:11:16Z","updatedAt":"2026-08-14T03:11:20Z","createdAt":"2026-08-10T07:02:50Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-schema","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-stat","order":81,"name":"dsh-tool-stat","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-stat","url":"https://github.com/omdsh-dev/dsh-tool-stat","category":"tools","description":{"en":"Descriptive statistics, percentiles, frequency distributions, and correlation.","zh":"描述统计/百分位数/频数分布/相关性。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T03:11:13Z","updatedAt":"2026-08-14T05:14:57Z","createdAt":"2026-08-10T07:02:47Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-stat","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-tool-time","order":82,"name":"dsh-tool-time","owner":"omdsh-dev","repo":"omdsh-dev/dsh-tool-time","url":"https://github.com/omdsh-dev/dsh-tool-time","category":"tools","description":{"en":"Strict ISO 8601 parsing, IANA timezone conversion, and UTC calendar arithmetic.","zh":"严格 ISO 8601 解析、IANA 时区转换、UTC 日历运算。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T03:11:11Z","updatedAt":"2026-08-14T03:11:18Z","createdAt":"2026-08-06T02:03:19Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-time","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-kb-sieve","order":83,"name":"dsh-kb-sieve","owner":"omdsh-dev","repo":"omdsh-dev/dsh-kb-sieve","url":"https://github.com/omdsh-dev/dsh-kb-sieve","category":"tools","description":{"en":"Build auditable KB packs (SQLite FTS5) from md/txt/docx/pdf with deterministic retrieval and original-text reading.","zh":"从 md/txt/docx/pdf 构建可审计知识库包（SQLite FTS5），确定性检索与原文阅读。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-12T06:59:40Z","updatedAt":"2026-08-13T16:46:54Z","createdAt":"2026-08-11T15:39:28Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-external/dsh-kb-sieve","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/types/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"huanlinoto/dsh-plugin-mineru","order":84,"name":"dsh-plugin-mineru","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-mineru","url":"https://github.com/HuanLinOTO/dsh-plugin-mineru","category":"tools","description":{"en":"Expose MineRU document parsing tools to the model.","zh":"向模型暴露 MineRU 文档解析工具。"},"added":"2026-08-13","curated":true,"topic":true,"stars":7,"forks":1,"openIssues":1,"watchers":7,"pushedAt":"2026-08-14T06:26:11Z","updatedAt":"2026-08-14T06:26:22Z","createdAt":"2026-08-09T08:41:45Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-mineru","version":"0.2.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"jesse-njx/dsh-cowork","order":85,"name":"dsh-cowork","owner":"Jesse-njx","repo":"Jesse-njx/dsh-cowork","url":"https://github.com/Jesse-njx/dsh-cowork","category":"tools","description":{"en":"Bounded, cell-addressed `doc_read`/`doc_write` for xlsx / pdf / docx / pptx / ipynb, plus an MCP server and CLI.","zh":"doc_read/doc_write：以有界、单元格寻址的方式读写 xlsx / pdf / docx / pptx / ipynb，另附 MCP 服务器与 CLI。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-08-13T16:58:50Z","updatedAt":"2026-08-13T16:58:58Z","createdAt":"2026-08-13T16:09:04Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"package-only","branch":"main","kinds":[],"packageName":"dsh-cowork","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未核验到 dsh manifest","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"jesse-njx/dsh-skillport","order":86,"name":"dsh-skillport","owner":"Jesse-njx","repo":"Jesse-njx/dsh-skillport","url":"https://github.com/Jesse-njx/dsh-skillport","category":"tools","description":{"en":"Bring your existing Agent Skills (SKILL.md) library to DSH: discover skills across Claude/Codex/Cursor/Gemini paths, inject a progressive-disclosure index, and load bodies on demand.","zh":"把已有的 Agent Skills（SKILL.md）技能库带进 DSH：扫描 Claude/Codex/Cursor/Gemini 技能目录、注入渐进式索引，按需加载技能正文。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T17:07:52Z","updatedAt":"2026-08-13T17:23:14Z","createdAt":"2026-08-13T17:03:24Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-skillport/bundle","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"sakikotgw/pack-agent","order":87,"name":"pack-agent","owner":"sakikoTGW","repo":"sakikoTGW/pack-agent","url":"https://github.com/sakikoTGW/pack-agent","category":"tools","description":{"en":"Project .pack.json/.pack.zip into .agent-pack/modpacks/ and expose skills via a workspace allow-list.","zh":"把 .pack.json/.pack.zip 投影到 .agent-pack/modpacks/，按工作区白名单暴露 skill。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T08:17:07Z","updatedAt":"2026-08-14T08:17:20Z","createdAt":"2026-06-24T17:04:31Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@sakikotgw/pack-agent","version":"0.4.1","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["dsh-plugin/cordis.root.yml","src/index.ts"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"vibeinging/dsh-tool-search","order":88,"name":"dsh-tool-search","owner":"vibeinging","repo":"vibeinging/dsh-tool-search","url":"https://github.com/vibeinging/dsh-tool-search","category":"tools","description":{"en":"Per-agent on-demand tool discovery and progressive schema disclosure.","zh":"按 agent 的按需工具发现与渐进式 schema 披露。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-12T13:18:45Z","updatedAt":"2026-08-13T16:45:20Z","createdAt":"2026-08-11T07:10:42Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-tool-search","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"thu-maic/dsh-openmaic","order":89,"name":"dsh-openmaic","owner":"THU-MAIC","repo":"THU-MAIC/dsh-openmaic","url":"https://github.com/THU-MAIC/dsh-openmaic","category":"tools","description":{"en":"OpenMAIC: classrooms, slides, interactive widgets, and Socratic teaching.","zh":"OpenMAIC 教学：课堂、幻灯片、交互组件与苏格拉底式教学。"},"added":"2026-08-13","curated":true,"topic":true,"stars":5,"forks":2,"openIssues":0,"watchers":5,"pushedAt":"2026-08-13T13:27:52Z","updatedAt":"2026-08-14T03:26:57Z","createdAt":"2026-08-13T13:27:33Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@openmaic/dsh-openmaic","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"lzszq/dsh-scholar","order":90,"name":"dsh-scholar","owner":"lzszq","repo":"lzszq/dsh-scholar","url":"https://github.com/lzszq/dsh-scholar","category":"tools","description":{"en":"Academic assistant plugin.","zh":"学术助手插件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":8,"forks":1,"openIssues":1,"watchers":8,"pushedAt":"2026-08-14T07:49:52Z","updatedAt":"2026-08-14T07:18:46Z","createdAt":"2026-08-06T16:04:20Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-scholar/research-plugin","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4def972e2c0941fddab8d6e0ac27ec8b34c3fe9f","installCommand":"dsh plugin --profile web add github:lzszq/dsh-scholar#4def972e2c0941fddab8d6e0ac27ec8b34c3fe9f","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:54.735Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:54.735Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"lzszq/dsh-scholar@4def972e2c0941fddab8d6e0ac27ec8b34c3fe9f#scan-2","versionCount":1,"latestCommit":"4def972e2c0941fddab8d6e0ac27ec8b34c3fe9f","latestCheckedAt":"2026-09-08T12:00:54.735Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"ylwl1997/noatmark-dsh-plugin","order":91,"name":"noatmark-dsh-plugin","owner":"ylwl1997","repo":"ylwl1997/noatmark-dsh-plugin","url":"https://github.com/ylwl1997/noatmark-dsh-plugin","category":"tools","description":{"en":"Text hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.","zh":"文本卫生 dsh 插件：净化不可信文本、扫描隐形字符、清洗 LLM 格式、转义 CSV 公式注入。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:13:43Z","updatedAt":"2026-08-14T07:13:50Z","createdAt":"2026-08-14T01:41:28Z","license":null,"language":"TypeScript","homepage":"https://dshbase.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"noatmark-dsh-plugin","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"jihongboo/dsh-apple-mode","order":92,"name":"dsh-apple-mode","owner":"jihongboo","repo":"jihongboo/dsh-apple-mode","url":"https://github.com/jihongboo/dsh-apple-mode","category":"tools","description":{"en":"Xcode AI integration for DSH: 26 Xcode MCP tools (mcpbridge) + Apple platform skills + Xcode Intelligence-style persona (agent preset or global bundle).","zh":"DSH 的 Xcode AI 集成：26 个 Xcode MCP 工具（mcpbridge）+ Apple 平台技能 + Xcode Intelligence 风格 persona（agent preset 或全局 bundle）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T17:35:12Z","updatedAt":"2026-08-13T17:35:30Z","createdAt":"2026-08-13T17:12:08Z","license":"MIT","language":"Shell","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-apple-mode","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"zk-andy/dsh-continual-evolve","order":93,"name":"dsh-continual-evolve","owner":"ZK-Andy","repo":"ZK-Andy/dsh-continual-evolve","url":"https://github.com/ZK-Andy/dsh-continual-evolve","category":"tools","description":{"en":"Continual self-evolution: versioned, auditable, rollback-safe harness state (prompts, memory, skills, subagent specs) refined from session trajectories, with review gates and hot-reloaded skills.","zh":"持续自进化：从会话轨迹沉淀版本化、可审计、可回滚的 harness 状态（提示词/记忆/技能/子代理规格），带审查门禁与技能热加载。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-continual-evolve","version":"0.6.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d38dea080b54fa53cdc6c136df74791394394466","installCommand":"dsh plugin --profile web add github:ZK-Andy/dsh-continual-evolve#d38dea080b54fa53cdc6c136df74791394394466","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:00:55.961Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:00:55.961Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"zk-andy/dsh-continual-evolve@d38dea080b54fa53cdc6c136df74791394394466#scan-2","versionCount":1,"latestCommit":"d38dea080b54fa53cdc6c136df74791394394466","latestCheckedAt":"2026-09-11T00:00:55.961Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zp-home/dsh-recommend","order":94,"name":"dsh-recommend","owner":"zp-home","repo":"zp-home/dsh-recommend","url":"https://github.com/zp-home/dsh-recommend","category":"tools","description":{"en":"Transparent rankings and recommendations for the DSH plugin ecosystem: daily auto-fetched topic data, an open scoring model, and rank/search/recommend tools with a settings-page leaderboard.","zh":"DSH 插件透明排行与推荐：每日自动抓取 `dsh-plugin` 话题生态，公开评分模型，提供 rank/search/recommend 工具与设置页榜单。"},"added":"2026-08-14","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":0,"watchers":6,"pushedAt":"2026-08-14T07:50:35Z","updatedAt":"2026-08-14T07:50:40Z","createdAt":"2026-08-13T21:56:48Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/zp-home/dsh-recommend","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-recommend","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/host/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"liustack/modlens","order":95,"name":"modlens","owner":"liustack","repo":"liustack/modlens","url":"https://github.com/liustack/modlens","category":"tools","description":{"en":"Vision bridge for text-only models: paste an image, get structured JSON evidence (OCR, layout, semantics).","zh":"为纯文本模型架起视觉桥梁：粘贴图片，输出结构化 JSON 证据（OCR、版面、语义）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1274,"forks":37,"openIssues":3,"watchers":1274,"pushedAt":"2026-08-14T19:59:22Z","updatedAt":"2026-08-14T19:59:41Z","createdAt":"2026-02-22T07:12:00Z","license":"MIT","language":"TypeScript","homepage":"https://liustack.dev","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@liustack/modlens","version":"3.25.4","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","dsh/index.js","dsh/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"926a6beea81ca6ea1fecc267bc1b02d880572669","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:03.863Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-02T12:01:03.863Z","findings":[{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["dsh/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh/index.js","dsh/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["dsh/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dsh/client.js"]}],"filesInspected":["package.json","dsh/index.js","dsh/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"caution","reasons":["发现递归删除或直接删除文件的调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"liustack/modlens@926a6beea81ca6ea1fecc267bc1b02d880572669#scan-2","versionCount":1,"latestCommit":"926a6beea81ca6ea1fecc267bc1b02d880572669","latestCheckedAt":"2026-09-02T12:01:03.863Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"dsh-market/dsh-market","order":96,"name":"dsh-market","owner":"dsh-market","repo":"dsh-market/dsh-market","url":"https://github.com/dsh-market/dsh-market","category":"tools","description":{"en":"The plugin market inside DSH: a Settings page to browse and search the full community catalog by category, with confirmed one-click installs and an installed-plugins view.","zh":"装在 DSH 里的插件市场：设置页内逛/搜全部社区插件，按分类筛选，确认后一键安装，已装插件一目了然。"},"added":"2026-08-14","curated":true,"topic":true,"stars":43,"forks":7,"openIssues":10,"watchers":43,"pushedAt":"2026-08-14T17:59:35Z","updatedAt":"2026-08-14T17:59:42Z","createdAt":"2026-08-14T04:58:15Z","license":null,"language":"TypeScript","homepage":"https://dshmarket.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dshmarket","version":"1.2.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T18:00:45.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T18:00:52.457Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null,"codexPick":{"repo":"dsh-market/dsh-market","pickedAt":"2026-08-17T04:13:05.964Z","reviewedCommit":"805d1a716aaa3ea09d111b150645fd88b3e8b51d","category":"tools","summary":{"zh":"在 DeepSeek Harness 设置页内浏览、安装、更新、启停和备份插件；v1.11.0 新增加载层诊断与持久化热启停。","en":"Browse, install, update, toggle, and back up plugins inside DeepSeek Harness Settings; v1.11.0 adds loading-layer diagnostics and persistent hot toggles."},"reason":{"zh":"新版让插件实际加载状态更透明：以 loader inventory 为准，检查错误的宿主共享依赖，并通过官方 user patch 层热启停；npm 包带 provenance，Ubuntu、Windows、Web E2E 和 pnpm 兼容 CI 全部通过。","en":"The release makes real plugin state more transparent by prioritizing loader inventory, diagnosing misplaced shared host dependencies, and toggling through the official user patch layer; the npm package has provenance and its Ubuntu, Windows, Web E2E, and pnpm compatibility CI all pass."},"safety":{"risk":"medium","zh":"中风险：它是插件控制面，可调用 dsh/pnpm 安装、更新和卸载，改写 Profile user patch，配置 pnpm，重启 DSH，并导出、恢复或经 WebDAV 上传可能含凭据的 Profile 备份。安装源限于精选注册表，构建脚本默认拦截并需显式放行；变更接口校验同源，重启和备份下载进一步限制为环回请求，日志会脱敏。上传备份前仍应人工检查内容与目标。","en":"Medium risk: this is a plugin control plane that can invoke dsh/pnpm installs, updates, and removals, edit the Profile user patch, provision pnpm, restart DSH, and export, restore, or upload Profile backups that may contain credentials. Sources are limited to the curated registry, build scripts are blocked by default until explicitly approved, mutating routes enforce same origin, restart and backup downloads are loopback-restricted, and logs are redacted. Review backup contents and destination before WebDAV upload."}}},{"id":"awesome-dsh-plugin/dsh-find-plugin","order":97,"name":"dsh-find-plugin","owner":"awesome-dsh-plugin","repo":"awesome-dsh-plugin/dsh-find-plugin","url":"https://github.com/awesome-dsh-plugin/dsh-find-plugin","category":"tools","description":{"en":"Find plugins without leaving the agent: search this curated registry by keyword or category, with ready-to-run install commands.","zh":"会话内直接找插件：按关键词/分类搜索本精选 registry，返回描述与可直接执行的安装命令。"},"added":"2026-08-14","curated":true,"topic":true,"stars":7,"forks":0,"openIssues":0,"watchers":7,"pushedAt":"2026-08-14T05:44:07Z","updatedAt":"2026-08-14T07:53:49Z","createdAt":"2026-08-14T01:46:59Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-find-plugin","version":"0.3.7","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e7a27eb01606e6deccdaacccb8e0cfd992c0bcdc","installCommand":"dsh plugin --profile web add github:awesome-dsh-plugin/dsh-find-plugin#e7a27eb01606e6deccdaacccb8e0cfd992c0bcdc","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:02:40.855Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-10T12:02:40.855Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"awesome-dsh-plugin/dsh-find-plugin@e7a27eb01606e6deccdaacccb8e0cfd992c0bcdc#scan-2","versionCount":1,"latestCommit":"e7a27eb01606e6deccdaacccb8e0cfd992c0bcdc","latestCheckedAt":"2026-09-10T12:02:40.855Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"lonelymoon87/dsh-code-intel","order":98,"name":"dsh-code-intel","owner":"lonelymoon87","repo":"lonelymoon87/dsh-code-intel","url":"https://github.com/lonelymoon87/dsh-code-intel","category":"tools","description":{"en":"Indexes workspace symbols with Tree-sitter and provides lexical or optional embedding-assisted code search.","zh":"用 Tree-sitter 建立工作区符号索引，提供词法或可选 embedding 辅助的代码检索。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T02:54:22Z","updatedAt":"2026-08-14T02:51:53Z","createdAt":"2026-08-13T18:18:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-code-intel","version":"0.1.2","lifecycleScripts":["prepare"],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"lynx-gt/dsh-subagent-tools","order":99,"name":"dsh-subagent-tools","owner":"lynx-gt","repo":"lynx-gt/dsh-subagent-tools","url":"https://github.com/lynx-gt/dsh-subagent-tools","category":"tools","description":{"en":"Per-call model, provider, persona, and toolFilter overrides for subagent delegation, with @preset: references and provider/model composite ids.","zh":"子代理委派的按调用覆盖：model/provider/persona/toolFilter、@preset: 引用与 provider/model 组合 id。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T02:18:18Z","updatedAt":"2026-08-14T02:24:31Z","createdAt":"2026-08-14T02:02:27Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-subagent-tools","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"lynx-gt/dsh-subagent-cwd","order":100,"name":"dsh-subagent-cwd","owner":"lynx-gt","repo":"lynx-gt/dsh-subagent-cwd","url":"https://github.com/lynx-gt/dsh-subagent-cwd","category":"tools","description":{"en":"Extends dsh-subagent-tools with a per-call cwd for subagents, shipped with the two in-process provider patches it requires.","zh":"在 dsh-subagent-tools 基础上增加子代理按调用 cwd，附带所需的两个 in-process provider 补丁。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T02:18:22Z","updatedAt":"2026-08-14T02:24:31Z","createdAt":"2026-08-14T02:02:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-subagent-cwd","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9a2de96b13ace17f8cf5228db2bf018e63b46b51","installCommand":"dsh plugin --profile web add github:lynx-gt/dsh-subagent-cwd#9a2de96b13ace17f8cf5228db2bf018e63b46b51","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T00:01:51.530Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T00:01:51.530Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"lynx-gt/dsh-subagent-cwd@9a2de96b13ace17f8cf5228db2bf018e63b46b51#scan-2","versionCount":1,"latestCommit":"9a2de96b13ace17f8cf5228db2bf018e63b46b51","latestCheckedAt":"2026-09-12T00:01:51.530Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"jesse-njx/dsh-voice","order":101,"name":"dsh-voice","owner":"Jesse-njx","repo":"Jesse-njx/dsh-voice","url":"https://github.com/Jesse-njx/dsh-voice","category":"tools","description":{"en":"Voice notes in, spoken answers out: dictate audio that becomes user messages (transcribe), have the agent read replies aloud (speak), local-first under ~/.dsh/voice.","zh":"语音输入、语音输出：把口述音频转写为用户消息（transcribe），让 agent 朗读回复（speak），本地优先，音频存于 ~/.dsh/voice。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-13T18:02:41Z","updatedAt":"2026-08-13T18:03:45Z","createdAt":"2026-08-13T18:00:48Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-voice/bundle","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"jesse-njx/dsh-docker","order":102,"name":"dsh-docker","owner":"Jesse-njx","repo":"Jesse-njx/dsh-docker","url":"https://github.com/Jesse-njx/dsh-docker","category":"tools","description":{"en":"Typed, guarded container control: ps/logs/inspect/exec/start/stop and compose up/down with JSON output, project-aware targeting, and approval-gated destructive ops.","zh":"类型安全、带护栏的容器控制：ps/logs/inspect/exec/start/stop 与 compose up/down，JSON 输出、项目感知定位、破坏性操作需审批。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-docker/bundle","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"63d634491e7600f12d0cdfae2e62091571ef6b87","installCommand":"dsh plugin --profile web add github:Jesse-njx/dsh-docker#63d634491e7600f12d0cdfae2e62091571ef6b87","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:00:56.115Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:00:56.115Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"jesse-njx/dsh-docker@63d634491e7600f12d0cdfae2e62091571ef6b87#scan-2","versionCount":1,"latestCommit":"63d634491e7600f12d0cdfae2e62091571ef6b87","latestCheckedAt":"2026-09-11T00:00:56.115Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"hccccc01333/dsh-excel-chat","order":103,"name":"dsh-excel-chat","owner":"hccccc01333","repo":"hccccc01333/dsh-excel-chat","url":"https://github.com/hccccc01333/dsh-excel-chat","category":"tools","description":{"en":"Talk to Excel in DeepSeek Harness: create, edit, repair, and verify spreadsheets by conversation, with automatic formula health checks after every edit.","zh":"在 DeepSeek Harness 里对话完成 Excel 工作：建表、编辑、修复公式、图表校验，每次编辑后自动体检公式。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T08:12:06Z","updatedAt":"2026-08-14T08:12:12Z","createdAt":"2026-08-14T01:23:15Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"package-only","branch":"master","kinds":[],"packageName":"vera","version":"0.25.0","lifecycleScripts":[],"runtimeDependencies":7,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"evilirving/dsh-context-proxy","order":104,"name":"dsh-context-proxy","owner":"EvilIrving","repo":"EvilIrving/dsh-context-proxy","url":"https://github.com/EvilIrving/dsh-context-proxy","category":"tools","description":{"en":"Thin on-demand context retrieval: context_query / context_slice / context_grep tools that read already-persisted history back with replay-safe citations.","zh":"按需取回薄层：context_query / context_slice / context_grep 三个工具读取已持久化的历史，引用可回放。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-context-proxy","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1e1965f51ace195272697ff55b9dc8d43798e6a6","installCommand":"dsh plugin --profile web add github:EvilIrving/dsh-context-proxy#1e1965f51ace195272697ff55b9dc8d43798e6a6","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:00:57.750Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:00:57.750Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"evilirving/dsh-context-proxy@1e1965f51ace195272697ff55b9dc8d43798e6a6#scan-2","versionCount":1,"latestCommit":"1e1965f51ace195272697ff55b9dc8d43798e6a6","latestCheckedAt":"2026-09-11T00:00:57.750Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zhaoolee/notes","order":105,"name":"notes","owner":"zhaoolee","repo":"zhaoolee/notes","url":"https://github.com/zhaoolee/notes","category":"tools","description":{"en":"Export DSH conversations as Smartisan Notes-style PNGs, or create and update Markdown notes in a configured account-scoped workspace.","zh":"将 DSH 对话导出为锤子便签风格 PNG，或在配置的账号工作区中新建和更新 Markdown 便签。"},"added":"2026-08-14","curated":true,"topic":true,"stars":137,"forks":3,"openIssues":0,"watchers":137,"pushedAt":"2026-08-14T03:11:25Z","updatedAt":"2026-08-14T06:17:33Z","createdAt":"2026-03-15T04:47:17Z","license":null,"language":"TypeScript","homepage":"https://notes.fangyuanxiaozhan.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"package-only","branch":"main","kinds":[],"packageName":"notes","version":"1.6.1","lifecycleScripts":[],"runtimeDependencies":12,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"zimai233/dsh-figma-to-lottie","order":106,"name":"dsh-figma-to-lottie","owner":"zimai233","repo":"zimai233/dsh-figma-to-lottie","url":"https://github.com/zimai233/dsh-figma-to-lottie","category":"tools","description":{"en":"Compile SVG paths and keyframe specs into self-contained Lottie JSON animation files.","zh":"将 SVG 路径与关键帧参数编译成自包含的 Lottie JSON 动画文件。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T04:37:52Z","updatedAt":"2026-08-14T04:53:49Z","createdAt":"2026-08-14T03:59:39Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-figma-to-lottie","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8e21469374ebe4241b515f95552b1d8db8b79bb8","installCommand":"dsh plugin --profile web add github:zimai233/dsh-figma-to-lottie#8e21469374ebe4241b515f95552b1d8db8b79bb8","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:00:40.656Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:40.656Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"passport":{"evidenceId":"zimai233/dsh-figma-to-lottie@8e21469374ebe4241b515f95552b1d8db8b79bb8#scan-2","versionCount":1,"latestCommit":"8e21469374ebe4241b515f95552b1d8db8b79bb8","latestCheckedAt":"2026-09-09T00:00:40.656Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zimai233/dsh-exam-countdown","order":107,"name":"dsh-exam-countdown","owner":"zimai233","repo":"zimai233/dsh-exam-countdown","url":"https://github.com/zimai233/dsh-exam-countdown","category":"tools","description":{"en":"Query 64 Chinese exams (高考/考研/四六级/CPA/法考…) with rule-aware date math (2nd-Saturday, 1st-Sunday) and countdowns.","zh":"查询 64 场中国考试（高考/考研/四六级/CPA/法考…）的规则日期（第二个周六、第一个周日）与倒计时。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"master","maintenance":"unknown","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-exam-countdown","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"54492515553fcf38a48f372e381bbf3252abcc38","installCommand":"dsh plugin --profile web add github:zimai233/dsh-exam-countdown#54492515553fcf38a48f372e381bbf3252abcc38","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:01:00.346Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:01:00.346Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"zimai233/dsh-exam-countdown@54492515553fcf38a48f372e381bbf3252abcc38#scan-2","versionCount":1,"latestCommit":"54492515553fcf38a48f372e381bbf3252abcc38","latestCheckedAt":"2026-09-11T00:01:00.346Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"zimai233/dsh-wash-calendar","order":108,"name":"dsh-wash-calendar","owner":"zimai233","repo":"zimai233/dsh-wash-calendar","url":"https://github.com/zimai233/dsh-wash-calendar","category":"tools","description":{"en":"Recurring-habit scheduling from pure date math: next occurrence, range schedules, and overdue advice.","zh":"基于纯日期数学的周期习惯排程：下次发生日、区间排程与逾期提醒。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T03:59:57Z","updatedAt":"2026-08-14T04:00:38Z","createdAt":"2026-08-14T03:59:53Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-wash-calendar","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3622edd766f0c2c8319f64ab6891221c96865ac2","installCommand":"dsh plugin --profile web add github:zimai233/dsh-wash-calendar#3622edd766f0c2c8319f64ab6891221c96865ac2","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:01:07.041Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-10T12:01:07.041Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"zimai233/dsh-wash-calendar@3622edd766f0c2c8319f64ab6891221c96865ac2#scan-2","versionCount":1,"latestCommit":"3622edd766f0c2c8319f64ab6891221c96865ac2","latestCheckedAt":"2026-09-10T12:01:07.041Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zimai233/dsh-adhd-copilot","order":109,"name":"dsh-adhd-copilot","owner":"zimai233","repo":"zimai233/dsh-adhd-copilot","url":"https://github.com/zimai233/dsh-adhd-copilot","category":"tools","description":{"en":"ADHD behavioral coaching skill: task breakdown, overwhelm management, launch rituals, and failure recovery.","zh":"ADHD 行为辅导技能：任务拆解、事项过载管理、启动仪式与失败重启。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"master","maintenance":"unknown","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-adhd-copilot","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6527cb64b11b7265ba576e195bd008a5aa066be5","installCommand":"dsh plugin --profile web add github:zimai233/dsh-adhd-copilot#6527cb64b11b7265ba576e195bd008a5aa066be5","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:01:00.485Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:01:00.485Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"zimai233/dsh-adhd-copilot@6527cb64b11b7265ba576e195bd008a5aa066be5#scan-2","versionCount":1,"latestCommit":"6527cb64b11b7265ba576e195bd008a5aa066be5","latestCheckedAt":"2026-09-11T00:01:00.485Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zimai233/dsh-image-search","order":110,"name":"dsh-image-search","owner":"zimai233","repo":"zimai233/dsh-image-search","url":"https://github.com/zimai233/dsh-image-search","category":"tools","description":{"en":"Multi-engine reverse image search aggregator: Google Lens, Baidu, Yandex, TinEye, SauceNAO, IQDB, Ascii2d.","zh":"多引擎反向识图聚合：Google Lens、百度、Yandex、TinEye、SauceNAO、IQDB、Ascii2d。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"master","maintenance":"unknown","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-image-search","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"95ac2b739f7464386cb28c2b758cbc9382befe5a","installCommand":"dsh plugin --profile web add github:zimai233/dsh-image-search#95ac2b739f7464386cb28c2b758cbc9382befe5a","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-11T00:01:01.586Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:01:01.586Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"zimai233/dsh-image-search@95ac2b739f7464386cb28c2b758cbc9382befe5a#scan-2","versionCount":1,"latestCommit":"95ac2b739f7464386cb28c2b758cbc9382befe5a","latestCheckedAt":"2026-09-11T00:01:01.586Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zimai233/dsh-video-downloader","order":111,"name":"dsh-video-downloader","owner":"zimai233","repo":"zimai233/dsh-video-downloader","url":"https://github.com/zimai233/dsh-video-downloader","category":"tools","description":{"en":"Detect and download media from Bilibili/YouTube/Douyin/Xiaohongshu with quality and format analysis.","zh":"检测并下载 B站/YouTube/抖音/小红书视频媒体，带清晰度与格式分析。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"master","maintenance":"unknown","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-video-downloader","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"48107ee57bc115af0165c20b464ef7adcfa6fc59","installCommand":"dsh plugin --profile web add github:zimai233/dsh-video-downloader#48107ee57bc115af0165c20b464ef7adcfa6fc59","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-14T00:02:39.457Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-14T00:02:39.457Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"zimai233/dsh-video-downloader@48107ee57bc115af0165c20b464ef7adcfa6fc59#scan-2","versionCount":1,"latestCommit":"48107ee57bc115af0165c20b464ef7adcfa6fc59","latestCheckedAt":"2026-09-14T00:02:39.457Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"luke-yong/dsh-plugin-knowledge-graph","order":112,"name":"dsh-plugin-knowledge-graph","owner":"Luke-Yong","repo":"Luke-Yong/dsh-plugin-knowledge-graph","url":"https://github.com/Luke-Yong/dsh-plugin-knowledge-graph","category":"tools","description":{"en":"A read_graph tool backed by a codebase knowledge graph (CONTAINS / EXPORTS / IMPORTS / IMPORTS_SYMBOL relations).","zh":"基于代码库知识图谱的 read_graph 工具（CONTAINS / EXPORTS / IMPORTS / IMPORTS_SYMBOL 关系）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T04:05:44Z","updatedAt":"2026-08-14T05:06:42Z","createdAt":"2026-08-14T03:59:05Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-plugin-knowledge-graph","version":"0.2.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"30bb1305027bcba773dc241834935f290d7336f0","installCommand":"dsh plugin --profile web add github:Luke-Yong/dsh-plugin-knowledge-graph#30bb1305027bcba773dc241834935f290d7336f0","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:01:07.159Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-10T12:01:07.159Z","findings":[],"filesInspected":["package.json","dist/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"luke-yong/dsh-plugin-knowledge-graph@30bb1305027bcba773dc241834935f290d7336f0#scan-2","versionCount":1,"latestCommit":"30bb1305027bcba773dc241834935f290d7336f0","latestCheckedAt":"2026-09-10T12:01:07.159Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"liustack/modsearch","order":113,"name":"modsearch","owner":"liustack","repo":"liustack/modsearch","url":"https://github.com/liustack/modsearch","category":"tools","description":{"en":"Web search bridge for text-only agents: ask the web or X, get structured JSON evidence (search, fetch, citations).","zh":"纯文本 agent 的联网搜索桥：搜索网页与 X，返回结构化 JSON 证据（search/fetch/引用）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":76,"forks":4,"openIssues":2,"watchers":76,"pushedAt":"2026-08-13T21:49:49Z","updatedAt":"2026-08-14T06:19:35Z","createdAt":"2026-02-22T07:12:53Z","license":"MIT","language":"TypeScript","homepage":"https://liustack.dev","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@liustack/modsearch","version":"5.3.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","dsh/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null,"codexPick":{"repo":"liustack/modsearch","pickedAt":"2026-08-20T16:39:06.221Z","reviewedCommit":"515313ee5f5629dc3955f73ad5012163969e142f","category":"tools","summary":{"zh":"给 DSH 原生 web_search 接入可回退的多引擎检索链，并新增 X 搜索、单页抓取和 Web 设置卡。","en":"Adds a fallback-capable multi-engine chain behind DSH web_search, plus X search, focused page reading, and a Web settings card."},"reason":{"zh":"v5.7.0 让 DSH Web 用户可以直接配置搜索引擎和密钥；Release tag、npm gitHead 与核实提交一致，包带 SLSA provenance，Ubuntu、macOS、Windows 的 Node 22/24 测试与 lint 全部通过。适合需要联网查证、X 检索和页面阅读的人。","en":"v5.7.0 lets DSH Web users configure search engines and keys directly. The release tag and npm gitHead match the reviewed commit, the package has SLSA provenance, and lint plus Node 22/24 tests pass on Ubuntu, macOS, and Windows. It suits users who need sourced web research, X search, and page reading."},"safety":{"risk":"medium","zh":"中风险：默认 Firecrawl 会接收查询和公开 URL；Tavily、Exa、Firecrawl 自定义端点会接收查询与对应密钥，可选 Antigravity 和 Grok 路线会启动本机 CLI。设置路由仅接受同源回环请求，浏览器拿不到已保存密钥，配置按 0600 原子写入；本地抓取默认拦截私网并固定 DNS 解析。可选 Antigravity 文档含 curl 管道脚本，运行还使用跳过权限检查参数，未经单独审计不要启用；先用 Firecrawl 或 local，避免提交敏感查询。","en":"Medium risk: default Firecrawl receives queries and public URLs; custom Tavily, Exa, and Firecrawl endpoints receive queries and their keys, while optional Antigravity and Grok routes spawn local CLIs. The settings route accepts same-origin loopback requests only, the browser never receives saved keys, config is atomically written as 0600, and local fetch blocks private networks with DNS pinning by default. Antigravity docs include a curl pipeline installer and its runtime uses a skip-permissions flag, so do not enable it without a separate audit; start with Firecrawl or local and avoid sensitive queries."}}},{"id":"taxueseek/argo","order":114,"name":"argo","owner":"taxueseek","repo":"taxueseek/argo","url":"https://github.com/taxueseek/argo","category":"tools","description":{"en":"Search built for agents: multilingual coverage across web, academic, code, shopping, finance, news, and encyclopedias.","zh":"专为 agent 打造的搜索工具：多语言，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。"},"added":"2026-08-14","curated":true,"topic":true,"stars":63,"forks":2,"openIssues":0,"watchers":63,"pushedAt":"2026-08-13T13:58:54Z","updatedAt":"2026-08-14T08:03:28Z","createdAt":"2026-07-18T15:06:11Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"argo-search","version":"2.8.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"588bbbfba6254151b6ede86616d036c631d8a7b2","installCommand":"dsh plugin --profile web add github:taxueseek/argo#588bbbfba6254151b6ede86616d036c631d8a7b2","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-13T00:02:06.187Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T00:02:06.187Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"taxueseek/argo@588bbbfba6254151b6ede86616d036c631d8a7b2#scan-2","versionCount":1,"latestCommit":"588bbbfba6254151b6ede86616d036c631d8a7b2","latestCheckedAt":"2026-09-13T00:02:06.187Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tonydua/dsh-web-search-exa","order":115,"name":"dsh-web-search-exa","owner":"TonyDua","repo":"TonyDua/dsh-web-search-exa","url":"https://github.com/TonyDua/dsh-web-search-exa","category":"tools","description":{"en":"Zero-config Exa web search provider for the ctx.web seam: anonymous MCP fallback without an API key, plus keyed REST search.","zh":"ctx.web 接缝的零配置 Exa 网页搜索提供方：无 API key 时走匿名 MCP 兜底，配 key 时走 REST 搜索。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T07:08:24Z","updatedAt":"2026-08-14T07:08:41Z","createdAt":"2026-08-14T05:02:56Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@tonydua/dsh-web-search-exa","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"lum1104/dsh-browser","order":116,"name":"dsh-browser","owner":"Lum1104","repo":"Lum1104/dsh-browser","url":"https://github.com/Lum1104/dsh-browser","category":"tools","description":{"en":"Chrome sidebar extension that lets DSH operate your browser directly, no vision capabilities required.","zh":"Chrome 侧边栏扩展，让 DSH 直接操控你的浏览器，无需视觉能力。"},"added":"2026-08-14","curated":true,"topic":true,"stars":65,"forks":2,"openIssues":0,"watchers":65,"pushedAt":"2026-08-14T04:27:30Z","updatedAt":"2026-08-14T08:14:48Z","createdAt":"2026-08-06T09:05:10Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"package-only","branch":"main","kinds":[],"packageName":"dsh-browser","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未核验到 dsh manifest"]},"screenedCommit":null},{"id":"sanqi-normal/dsh-webui-market-plugin","order":117,"name":"dsh-webui-market-plugin","owner":"Sanqi-normal","repo":"Sanqi-normal/dsh-webui-market-plugin","url":"https://github.com/Sanqi-normal/dsh-webui-market-plugin","category":"tools","description":{"en":"In-harness plugin market for the dsh web GUI: browse the awesome-dsh-plugin.com catalog and install/uninstall plugins into a profile from Settings → Plugins → Plugin Market.","zh":"dsh Web GUI 内的社区插件市场：浏览 awesome-dsh-plugin.com 目录，从 设置 → 插件 → 插件市场 安装/卸载插件到 profile。"},"added":"2026-08-14","curated":true,"topic":true,"stars":52,"forks":2,"openIssues":1,"watchers":52,"pushedAt":"2026-08-15T17:59:39Z","updatedAt":"2026-08-15T18:00:00Z","createdAt":"2026-08-13T18:59:30Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@sanqi-normal/dsh-webui-market-plugin","version":"0.5.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/host.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f0cfc501a9e66b3c77da37e346d311d092cb1e41","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-28T00:00:22.081Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-08-28T00:00:22.081Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["lib/host.js"]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/host.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/host.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/host.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/host.js"]}],"filesInspected":["package.json","lib/host.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"caution","reasons":["仓库根目录未发现依赖锁文件","发现递归删除或直接删除文件的调用","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"sanqi-normal/dsh-webui-market-plugin@f0cfc501a9e66b3c77da37e346d311d092cb1e41#scan-2","versionCount":1,"latestCommit":"f0cfc501a9e66b3c77da37e346d311d092cb1e41","latestCheckedAt":"2026-08-28T00:00:22.081Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"huey1in/trio","order":118,"name":"trio","owner":"huey1in","repo":"huey1in/trio","url":"https://github.com/huey1in/trio","category":"tools","description":{"en":"Browser automation (Playwright) with a live view, an MCP server exposing DSH agents to any MCP client, and GitHub issue/PR/webhook review tools.","zh":"浏览器自动化（Playwright，带实时画面）+ MCP Server（把 DSH agent 暴露给任何 MCP 客户端）+ GitHub issue/PR/webhook 评审工具。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T08:02:57Z","updatedAt":"2026-08-14T08:03:11Z","createdAt":"2026-08-14T05:56:10Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-trio","version":"0.5.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.mjs"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"icetomoyo/dsh_workflow","order":119,"name":"dsh_workflow","owner":"icetomoyo","repo":"icetomoyo/dsh_workflow","url":"https://github.com/icetomoyo/dsh_workflow","category":"workflow","description":{"en":"UltraCode-style multi-agent orchestration: a generatable, savable, governable, observable, resumable workflow layer.","zh":"把 UltraCode 式多 Agent 调度带给 DSH：可生成、可保存、可治理、可观察、可恢复的 Workflow 层。"},"added":"2026-08-13","curated":true,"topic":true,"stars":49,"forks":0,"openIssues":0,"watchers":49,"pushedAt":"2026-08-13T23:53:40Z","updatedAt":"2026-08-14T06:16:01Z","createdAt":"2026-08-12T16:39:26Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-external/workflow","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"nanmicoder/dsh-agent-teams","order":120,"name":"dsh-agent-teams","owner":"NanmiCoder","repo":"NanmiCoder/dsh-agent-teams","url":"https://github.com/NanmiCoder/dsh-agent-teams","category":"workflow","description":{"en":"AgentTeams multi-agent teams.","zh":"AgentTeams 多智能体团队。"},"added":"2026-08-13","curated":true,"topic":true,"stars":184,"forks":17,"openIssues":2,"watchers":184,"pushedAt":"2026-08-14T05:36:20Z","updatedAt":"2026-08-14T08:13:25Z","createdAt":"2026-08-12T13:41:50Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@nanmicoder/dsh-agent-teams","version":"0.1.16-rc.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1caff61f4c0909711b515ebc56187055556186cd","installCommand":"dsh plugin --profile web add github:NanmiCoder/dsh-agent-teams#1caff61f4c0909711b515ebc56187055556186cd","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-09T00:00:34.275Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:34.275Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"nanmicoder/dsh-agent-teams@1caff61f4c0909711b515ebc56187055556186cd#scan-2","versionCount":1,"latestCommit":"1caff61f4c0909711b515ebc56187055556186cd","latestCheckedAt":"2026-09-09T00:00:34.275Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"titanwings/dsh-automation","order":121,"name":"dsh-automation","owner":"titanwings","repo":"titanwings/dsh-automation","url":"https://github.com/titanwings/dsh-automation","category":"workflow","description":{"en":"Scheduled coding runs in fresh agent sessions with auditable history.","zh":"定时任务：让 Coding 任务按计划在全新 Agent Session 中运行，保留可审计历史。"},"added":"2026-08-13","curated":true,"topic":true,"stars":24,"forks":1,"openIssues":0,"watchers":24,"pushedAt":"2026-08-14T06:43:27Z","updatedAt":"2026-08-14T07:42:18Z","createdAt":"2026-08-13T13:30:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-automation","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"sev7een/dsh-plugin-automations","order":122,"name":"dsh-plugin-automations","owner":"Sev7een","repo":"Sev7een/dsh-plugin-automations","url":"https://github.com/Sev7een/dsh-plugin-automations","category":"workflow","description":{"en":"Settings-based scheduled tasks that run on time or during DeepSeek off-peak hours, with one-time and daily schedules backed by durable task state.","zh":"设置页定时任务：支持准点或 DeepSeek 谷时段执行、单次/每日重复，并持久化任务状态。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T06:50:55Z","updatedAt":"2026-08-14T06:58:13Z","createdAt":"2026-08-14T06:45:27Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-automations","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","client/bundle.js"],"invalidDeclaredPaths":[]},"screenedCommit":"971a53e5eaa1af7edd5b6bb1714001ade6cd8775","installCommand":"dsh plugin --profile web add github:Sev7een/dsh-plugin-automations#971a53e5eaa1af7edd5b6bb1714001ade6cd8775","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T00:01:14.298Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:14.298Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/bundle.js"]}],"filesInspected":["package.json","lib/index.js","client/bundle.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现主动网络请求能力"]},"passport":{"evidenceId":"sev7een/dsh-plugin-automations@971a53e5eaa1af7edd5b6bb1714001ade6cd8775#scan-2","versionCount":1,"latestCommit":"971a53e5eaa1af7edd5b6bb1714001ade6cd8775","latestCheckedAt":"2026-09-03T00:01:14.298Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"jesse-njx/dsh-routines","order":123,"name":"dsh-routines","owner":"Jesse-njx","repo":"Jesse-njx/dsh-routines","url":"https://github.com/Jesse-njx/dsh-routines","category":"workflow","description":{"en":"Scheduled agents on a cron: run a prompt on a schedule and get the digest where you already are, with overlap/missed-run/timeout safety defaults.","zh":"定时 Agent：按 cron 计划运行 prompt，把摘要送到你已有的地方，内置重叠/漏跑/超时安全策略。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-08-13T16:59:52Z","updatedAt":"2026-08-13T17:23:26Z","createdAt":"2026-08-13T16:53:31Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-routines/bundle","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cb47bf3579fd7018e78c0933855e263685ad6fb9","installCommand":"dsh plugin --profile web add github:Jesse-njx/dsh-routines#cb47bf3579fd7018e78c0933855e263685ad6fb9","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T12:04:31.073Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:04:31.073Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"jesse-njx/dsh-routines@cb47bf3579fd7018e78c0933855e263685ad6fb9#scan-2","versionCount":1,"latestCommit":"cb47bf3579fd7018e78c0933855e263685ad6fb9","latestCheckedAt":"2026-09-12T12:04:31.073Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"titanwings/dsh-plannotator","order":124,"name":"dsh-plannotator","owner":"titanwings","repo":"titanwings/dsh-plannotator","url":"https://github.com/titanwings/dsh-plannotator","category":"workflow","description":{"en":"Plan review with anchored annotations and structured feedback back to the agent.","zh":"计划批注：选中计划原文逐条批注，结构化反馈送回 Agent。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-13T16:20:46Z","updatedAt":"2026-08-14T08:01:25Z","createdAt":"2026-08-13T13:30:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-plannotator","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"053c982f96b77fd750360ee66384bf90d5c1e603","installCommand":"dsh plugin --profile web add github:titanwings/dsh-plannotator#053c982f96b77fd750360ee66384bf90d5c1e603","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:00:56.775Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:56.775Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"titanwings/dsh-plannotator@053c982f96b77fd750360ee66384bf90d5c1e603#scan-2","versionCount":1,"latestCommit":"053c982f96b77fd750360ee66384bf90d5c1e603","latestCheckedAt":"2026-09-12T12:00:56.775Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"vlln/dsh-loop","order":125,"name":"dsh-loop","owner":"vlln","repo":"vlln/dsh-loop","url":"https://github.com/vlln/dsh-loop","category":"workflow","description":{"en":"Recurring loops: `/loop` command + loop tool + activity status bar.","zh":"定时循环：`/loop` 命令 + loop 工具 + 活动状态条。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-13T14:22:09Z","updatedAt":"2026-08-13T16:42:46Z","createdAt":"2026-08-10T16:41:46Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@vlln/dsh-loop","version":"0.4.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"de50862f881e5249cc583f732c1f304f7c186a8e","installCommand":"dsh plugin --profile web add github:vlln/dsh-loop#de50862f881e5249cc583f732c1f304f7c186a8e","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:02:05.113Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T00:02:05.113Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力"]},"passport":{"evidenceId":"vlln/dsh-loop@de50862f881e5249cc583f732c1f304f7c186a8e#scan-2","versionCount":1,"latestCommit":"de50862f881e5249cc583f732c1f304f7c186a8e","latestCheckedAt":"2026-09-13T00:02:05.113Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"fuhefei/dsh-sentinel","order":126,"name":"dsh-sentinel","owner":"fuhefei","repo":"fuhefei/dsh-sentinel","url":"https://github.com/fuhefei/dsh-sentinel","category":"workflow","description":{"en":"Condition-driven wakeup: durable file/command/http/process/webhook watches that wake the agent.","zh":"条件驱动唤醒：file/command/http/process/webhook 持久监视，触发即唤醒 agent。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":1,"openIssues":1,"watchers":6,"pushedAt":"2026-08-14T18:00:29Z","updatedAt":"2026-08-14T17:44:52Z","createdAt":"2026-08-13T13:01:21Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-sentinel","version":"0.9.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T18:00:45.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T18:00:50.472Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-deep-research","order":127,"name":"dsh-deep-research","owner":"omdsh-dev","repo":"omdsh-dev/dsh-deep-research","url":"https://github.com/omdsh-dev/dsh-deep-research","category":"workflow","description":{"en":"Adaptive deep-research orchestrator built on the official workflow engine.","zh":"自适应深度研究编排器（基于官方 workflow 引擎）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":2,"watchers":6,"pushedAt":"2026-08-12T07:12:36Z","updatedAt":"2026-08-14T05:02:33Z","createdAt":"2026-08-06T05:23:41Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-external/dsh-deep-research","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/types/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c0b329e02cd0195f810a7c3608cb58701a7fe0f1","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-deep-research#c0b329e02cd0195f810a7c3608cb58701a7fe0f1","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:00:59.343Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-13T12:00:59.343Z","findings":[],"filesInspected":["package.json","lib/types/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"omdsh-dev/dsh-deep-research@c0b329e02cd0195f810a7c3608cb58701a7fe0f1#scan-2","versionCount":1,"latestCommit":"c0b329e02cd0195f810a7c3608cb58701a7fe0f1","latestCheckedAt":"2026-09-13T12:00:59.343Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"omdsh-dev/dsh-inspect","order":128,"name":"dsh-inspect","owner":"omdsh-dev","repo":"omdsh-dev/dsh-inspect","url":"https://github.com/omdsh-dev/dsh-inspect","category":"workflow","description":{"en":"Adversarial checkup → fix → review loop toolset.","zh":"发现问题→修复交付→质量复查的对抗式闭环工具集。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":3,"watchers":2,"pushedAt":"2026-08-12T07:03:13Z","updatedAt":"2026-08-13T16:52:14Z","createdAt":"2026-08-06T14:47:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-external/dsh-inspect","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/types/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a99192eda30115dd3d4d3c5991572f5a37175996","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-inspect#a99192eda30115dd3d4d3c5991572f5a37175996","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:01:01.709Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-13T12:01:01.709Z","findings":[],"filesInspected":["package.json","lib/types/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"omdsh-dev/dsh-inspect@a99192eda30115dd3d4d3c5991572f5a37175996#scan-2","versionCount":1,"latestCommit":"a99192eda30115dd3d4d3c5991572f5a37175996","latestCheckedAt":"2026-09-13T12:01:01.709Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"fakechris/dsh-track","order":129,"name":"dsh-track","owner":"fakechris","repo":"fakechris/dsh-track","url":"https://github.com/fakechris/dsh-track","category":"workflow","description":{"en":"Embedded task management engine: decision-point protocol, idea capture wall, Linear-style issue store.","zh":"嵌入式任务管理引擎：决策点协议、念头捕获墙、Linear 形 issue 存储。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T07:58:06Z","updatedAt":"2026-08-14T07:58:21Z","createdAt":"2026-08-09T15:35:20Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@fakechris/dsh-track","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fd000f69da4ab79973a1ffe6e168da74fca6355e","installCommand":"dsh plugin --profile web add github:fakechris/dsh-track#fd000f69da4ab79973a1ffe6e168da74fca6355e","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:50.467Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:50.467Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"fakechris/dsh-track@fd000f69da4ab79973a1ffe6e168da74fca6355e#scan-2","versionCount":1,"latestCommit":"fd000f69da4ab79973a1ffe6e168da74fca6355e","latestCheckedAt":"2026-09-08T12:00:50.467Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"btspoony/dsh-advisor","order":130,"name":"dsh-advisor","owner":"btspoony","repo":"btspoony/dsh-advisor","url":"https://github.com/btspoony/dsh-advisor","category":"workflow","description":{"en":"Pair a second model that passively reviews each turn and injects notes.","zh":"搭配一个副模型，每轮被动审查并注入见解。"},"added":"2026-08-13","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-advisor","version":"0.4.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4113b4f1900d5d981c3460f3c12d616f1dd42cb2","installCommand":"dsh plugin --profile web add github:btspoony/dsh-advisor#4113b4f1900d5d981c3460f3c12d616f1dd42cb2","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-11T00:01:02.369Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-11T00:01:02.369Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"btspoony/dsh-advisor@4113b4f1900d5d981c3460f3c12d616f1dd42cb2#scan-2","versionCount":1,"latestCommit":"4113b4f1900d5d981c3460f3c12d616f1dd42cb2","latestCheckedAt":"2026-09-11T00:01:02.369Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lonelymoon87/dsh-specflow","order":131,"name":"dsh-specflow","owner":"lonelymoon87","repo":"lonelymoon87/dsh-specflow","url":"https://github.com/lonelymoon87/dsh-specflow","category":"workflow","description":{"en":"Adds specification artifacts, skills, commands, goal-backed implementation, and task-progress context.","zh":"增加规格工件、技能、命令、由 goal 驱动的实施流程和任务进度上下文。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"biociao/dsh-science","order":132,"name":"dsh-science","owner":"biociao","repo":"biociao/dsh-science","url":"https://github.com/biociao/dsh-science","category":"workflow","description":{"en":"Claude Science-style research workbench: ReAct research-loop engine (research_* tools), versioned artifacts with provenance (artifact_* tools), and 10 science skills for genomics/pathogens/bioinformatics.","zh":"面向 DSH 的 Claude Science 式科研工作台：ReAct 研究循环引擎（research_* 工具）、带溯源的版本化工件（artifact_* 工具）与面向基因组/病原体/生物信息的 10 个科研技能。"},"added":"2026-08-14","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T03:18:38Z","updatedAt":"2026-08-14T06:52:54Z","createdAt":"2026-08-14T03:05:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-science","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"evilirving/dsh-proof","order":133,"name":"dsh-proof","owner":"EvilIrving","repo":"EvilIrving/dsh-proof","url":"https://github.com/EvilIrving/dsh-proof","category":"workflow","description":{"en":"Independent read-only acceptance layer: spawns a read-only verifier before each top-level turn closes and steers non-pass gaps back into the agent.","zh":"独立只读验收层：顶层 turn 收尾前 spawn 只读 verifier，未通过时把缺口注回主 agent。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T03:20:43Z","updatedAt":"2026-08-14T07:48:11Z","createdAt":"2026-08-14T03:20:36Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-proof","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7e5fb648ac9361e6705b4e139dda9da8fdb5eaac","installCommand":"dsh plugin --profile web add github:EvilIrving/dsh-proof#7e5fb648ac9361e6705b4e139dda9da8fdb5eaac","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:02:44.707Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-10T12:02:44.707Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"evilirving/dsh-proof@7e5fb648ac9361e6705b4e139dda9da8fdb5eaac#scan-2","versionCount":1,"latestCommit":"7e5fb648ac9361e6705b4e139dda9da8fdb5eaac","latestCheckedAt":"2026-09-10T12:02:44.707Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"perrylink/dsh-doublecheck","order":134,"name":"dsh-doublecheck","owner":"PerryLink","repo":"PerryLink/dsh-doublecheck","url":"https://github.com/PerryLink/dsh-doublecheck","category":"workflow","description":{"en":"Engineering-discipline guard: grill the requirements before the first edit, enforce red/green test evidence gates, and audit the delivery with a forked adversary (grill-requirements skill + tool-policy gates).","zh":"工程纪律守门：动笔前审讯需求，红绿测试证据门，交付后对抗评审（grill-requirements 技能 + 工具策略门）。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-08-14T08:06:49Z","updatedAt":"2026-08-14T08:06:55Z","createdAt":"2026-08-14T03:33:58Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-doublecheck","version":"0.9.7","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ec586786da95a7cdca2e8d3c19312045611cf42f","installCommand":"dsh plugin --profile web add github:PerryLink/dsh-doublecheck#ec586786da95a7cdca2e8d3c19312045611cf42f","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:53.894Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:53.894Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"perrylink/dsh-doublecheck@ec586786da95a7cdca2e8d3c19312045611cf42f#scan-2","versionCount":1,"latestCommit":"ec586786da95a7cdca2e8d3c19312045611cf42f","latestCheckedAt":"2026-09-08T00:00:53.894Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"btspoony/mstar-harness","order":135,"name":"mstar-harness","owner":"btspoony","repo":"btspoony/mstar-harness","url":"https://github.com/btspoony/mstar-harness","category":"workflow","description":{"en":"Skill-driven harness/loop engineering workflow agent plugin.","zh":"技能驱动的 harness/loop 工程化工作流插件。"},"added":"2026-08-14","curated":true,"topic":true,"stars":41,"forks":2,"openIssues":0,"watchers":41,"pushedAt":"2026-08-14T01:46:14Z","updatedAt":"2026-08-14T04:46:51Z","createdAt":"2026-03-06T16:47:43Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"package-only","branch":"main","kinds":[],"packageName":"morning-star","version":"2.2.0","lifecycleScripts":["postinstall"],"runtimeDependencies":1,"declaredPaths":["packages/opencode/src/mstar.ts"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未核验到 dsh manifest","安装生命周期脚本：postinstall"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-open-in-vscode","order":136,"name":"dsh-open-in-vscode","owner":"omdsh-dev","repo":"omdsh-dev/dsh-open-in-vscode","url":"https://github.com/omdsh-dev/dsh-open-in-vscode","category":"notify","description":{"en":"Open DSH workspace directories in VS Code directly from the web GUI.","zh":"从 Web GUI 一键在 VS Code 中打开工作区目录。"},"added":"2026-08-13","curated":true,"topic":true,"stars":37,"forks":3,"openIssues":0,"watchers":37,"pushedAt":"2026-08-13T16:13:51Z","updatedAt":"2026-08-14T06:38:11Z","createdAt":"2026-08-13T12:00:02Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-open-in-vscode","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8aed144abdc158a332aa73bce42fc217d962f751","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-open-in-vscode#8aed144abdc158a332aa73bce42fc217d962f751","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:00:57.929Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:57.929Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"omdsh-dev/dsh-open-in-vscode@8aed144abdc158a332aa73bce42fc217d962f751#scan-2","versionCount":1,"latestCommit":"8aed144abdc158a332aa73bce42fc217d962f751","latestCheckedAt":"2026-09-12T12:00:57.929Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"omdsh-dev/dsh-notification","order":137,"name":"dsh-notification","owner":"omdsh-dev","repo":"omdsh-dev/dsh-notification","url":"https://github.com/omdsh-dev/dsh-notification","category":"notify","description":{"en":"Desktop notifications for turn completions, with per-outcome controls and keyword rules.","zh":"回合完成桌面通知，按结果分控 + 关键词过滤。"},"added":"2026-08-13","curated":true,"topic":true,"stars":31,"forks":3,"openIssues":1,"watchers":31,"pushedAt":"2026-08-13T15:28:50Z","updatedAt":"2026-08-14T08:11:47Z","createdAt":"2026-08-13T11:59:59Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-notification","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"675aab9b43d5011738feb6185281596c0365ccba","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-notification#675aab9b43d5011738feb6185281596c0365ccba","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:04:38.979Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:04:38.979Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"omdsh-dev/dsh-notification@675aab9b43d5011738feb6185281596c0365ccba#scan-2","versionCount":1,"latestCommit":"675aab9b43d5011738feb6185281596c0365ccba","latestCheckedAt":"2026-09-12T12:04:38.979Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bobleer/dsh-acp-for-bitfun","order":138,"name":"dsh-acp-for-bitfun","owner":"bobleer","repo":"bobleer/dsh-acp-for-bitfun","url":"https://github.com/bobleer/dsh-acp-for-bitfun","category":"notify","description":{"en":"ACP bridge between BitFun and DSH.","zh":"BitFun 与 DSH 的 ACP 交互对接。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-13T13:38:31Z","updatedAt":"2026-08-13T16:39:00Z","createdAt":"2026-08-13T12:45:15Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-acp-for-bitfun","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"openma-ai/deepseek-harness-acp","order":139,"name":"deepseek-harness-acp","owner":"openma-ai","repo":"openma-ai/deepseek-harness-acp","url":"https://github.com/openma-ai/deepseek-harness-acp","category":"notify","description":{"en":"ACP profile plugin and standalone stdio server for using the full DSH agent from Zed and other ACP clients while sharing DSH credentials and sessions.","zh":"ACP profile 插件与独立 stdio server，可从 Zed 等 ACP 客户端使用完整 DSH agent，并共享 DSH 凭据与会话。"},"added":"2026-08-14","curated":true,"topic":true,"stars":4,"forks":1,"openIssues":0,"watchers":4,"pushedAt":"2026-08-14T02:49:57Z","updatedAt":"2026-08-14T06:14:57Z","createdAt":"2026-08-13T14:46:50Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@openma/deepseek-harness-acp","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":7,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"loserfox/telegram","order":140,"name":"telegram","owner":"LoserFox","repo":"LoserFox/telegram","url":"https://github.com/LoserFox/telegram","category":"notify","description":{"en":"Bridge to the Telegram Bot API: long polling, per-chat sessions, HTML formatting.","zh":"Telegram Bot API 桥接：长轮询、per-chat 会话、HTML 格式化。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":2,"watchers":6,"pushedAt":"2026-08-13T13:11:34Z","updatedAt":"2026-08-13T16:39:31Z","createdAt":"2026-08-04T21:18:38Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@loserfox/telegram","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"jesse-njx/dsh-chatnode-wechat","order":141,"name":"dsh-chatnode-wechat","owner":"Jesse-njx","repo":"Jesse-njx/dsh-chatnode-wechat","url":"https://github.com/Jesse-njx/dsh-chatnode-wechat","category":"notify","description":{"en":"Chat with, monitor, and approve your DSH agents from WeChat via the iLink gateway: text both ways, session targeting, digest heartbeats, and numbered approval prompts.","zh":"通过 iLink 网关在微信里与 DSH agent 聊天、监控与审批：双向文本、会话切换、进度摘要与编号审批提示。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T16:55:50Z","updatedAt":"2026-08-13T17:23:16Z","createdAt":"2026-08-13T16:49:27Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-cowork/chatnode-wechat","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":7,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"dingyi222666/dsh-session-notification","order":142,"name":"dsh-session-notification","owner":"dingyi222666","repo":"dingyi222666/dsh-session-notification","url":"https://github.com/dingyi222666/dsh-session-notification","category":"notify","description":{"en":"Notifications for four session states, with browser alerts and prompts.","zh":"会话完成等四种状态的通知响应，支持浏览器提示。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-13T23:03:04Z","updatedAt":"2026-08-13T23:03:08Z","createdAt":"2026-08-12T18:19:59Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dingyi222666/dsh-session-notification","version":"0.1.18","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"68e34359c621715610654cd26f4fdf60c48497e9","installCommand":"dsh plugin --profile web add github:dingyi222666/dsh-session-notification#68e34359c621715610654cd26f4fdf60c48497e9","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T00:03:32.049Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T00:03:32.049Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"dingyi222666/dsh-session-notification@68e34359c621715610654cd26f4fdf60c48497e9#scan-2","versionCount":1,"latestCommit":"68e34359c621715610654cd26f4fdf60c48497e9","latestCheckedAt":"2026-09-12T00:03:32.049Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bill9109/dsh-web-ui-notify","order":143,"name":"dsh-web-ui-notify","owner":"bill9109","repo":"bill9109/dsh-web-ui-notify","url":"https://github.com/bill9109/dsh-web-ui-notify","category":"notify","description":{"en":"Desktop notification reminders.","zh":"桌面通知提醒。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":1,"watchers":6,"pushedAt":"2026-08-14T07:40:47Z","updatedAt":"2026-08-14T07:49:30Z","createdAt":"2026-08-05T03:47:26Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-web-ui-notify","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"39c52b269ed4857e29acdc5720b5eb3498d90153","installCommand":"dsh plugin --profile web add github:bill9109/dsh-web-ui-notify#39c52b269ed4857e29acdc5720b5eb3498d90153","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-08T12:00:54.832Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:54.832Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"bill9109/dsh-web-ui-notify@39c52b269ed4857e29acdc5720b5eb3498d90153#scan-2","versionCount":1,"latestCommit":"39c52b269ed4857e29acdc5720b5eb3498d90153","latestCheckedAt":"2026-09-08T12:00:54.832Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bill9109/dsh-webbridge","order":144,"name":"dsh-webbridge","owner":"bill9109","repo":"bill9109/dsh-webbridge","url":"https://github.com/bill9109/dsh-webbridge","category":"notify","description":{"en":"DSH meets Kimi WebBridge.","zh":"DSH 结合 Kimi WebBridge。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T08:04:17Z","updatedAt":"2026-08-14T08:04:25Z","createdAt":"2026-08-09T12:47:25Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@bill9109/dsh-webbridge","version":"0.0.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"biboyang/dsh-im-bridge","order":145,"name":"dsh-im-bridge","owner":"BiBoyang","repo":"BiBoyang/dsh-im-bridge","url":"https://github.com/BiBoyang/dsh-im-bridge","category":"notify","description":{"en":"Two-way WeChat (iLink) bridge: turn-end and approval-request push, in-chat approve/reject and message injection, persistent dedup and convergent long-reply chunking; channel layer extensible to other IMs.","zh":"微信（iLink）双向桥：turn 完成/批准请求推送、聊天内批准与消息注入、持久去重与长回复收敛分段；通道层为多 IM 预留。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T23:43:03Z","updatedAt":"2026-08-13T23:51:48Z","createdAt":"2026-08-13T23:42:36Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-im-bridge","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":7,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d5bcb1d27d1341b7d85a4f20917405c8e78ac8f9","installCommand":"dsh plugin --profile web add github:BiBoyang/dsh-im-bridge#d5bcb1d27d1341b7d85a4f20917405c8e78ac8f9","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T00:03:31.210Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T00:03:31.210Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"biboyang/dsh-im-bridge@d5bcb1d27d1341b7d85a4f20917405c8e78ac8f9#scan-2","versionCount":1,"latestCommit":"d5bcb1d27d1341b7d85a4f20917405c8e78ac8f9","latestCheckedAt":"2026-09-12T00:03:31.210Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"imetn/dsh-lark-bridge","order":146,"name":"dsh-lark-bridge","owner":"imetn","repo":"imetn/dsh-lark-bridge","url":"https://github.com/imetn/dsh-lark-bridge","category":"notify","description":{"en":"Bidirectional Lark/Feishu controller for DeepSeek Harness with project and session routing, interactive cards, approvals, attachments, and task controls.","zh":"DeepSeek Harness 的飞书/Lark 双向控制器，支持 Project 与 Session 路由、交互卡片、审批、附件和任务控制。"},"added":"2026-08-14","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T06:53:32Z","updatedAt":"2026-08-14T06:53:44Z","createdAt":"2026-08-13T15:51:02Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-lark-bridge","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f1e544cce5108873e238313bf7c5ccf092827e2a","installCommand":"dsh plugin --profile web add github:imetn/dsh-lark-bridge#f1e544cce5108873e238313bf7c5ccf092827e2a","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T00:01:12.641Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:12.641Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"imetn/dsh-lark-bridge@f1e544cce5108873e238313bf7c5ccf092827e2a#scan-2","versionCount":1,"latestCommit":"f1e544cce5108873e238313bf7c5ccf092827e2a","latestCheckedAt":"2026-09-03T00:01:12.641Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"dylan121322/llm-adaptive","order":147,"name":"llm-adaptive","owner":"dylan121322","repo":"dylan121322/llm-adaptive","url":"https://github.com/dylan121322/llm-adaptive","category":"model","description":{"en":"Adaptive model routing: per-request complexity classification with automatic provider routing.","zh":"自适应模型路由：请求级复杂度分类，按配置链自动选择后端 provider。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:52:15Z","updatedAt":"2026-08-14T07:59:11Z","createdAt":"2026-08-14T07:52:09Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"llm-adaptive","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"305be1c75d094c2bfcee014b768906e2b5558b9f","installCommand":"dsh plugin --profile web add github:dylan121322/llm-adaptive#305be1c75d094c2bfcee014b768906e2b5558b9f","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:53.563Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:53.563Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"dylan121322/llm-adaptive@305be1c75d094c2bfcee014b768906e2b5558b9f#scan-2","versionCount":1,"latestCommit":"305be1c75d094c2bfcee014b768906e2b5558b9f","latestCheckedAt":"2026-09-08T12:00:53.563Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"btspoony/dsh-llm-fallbacks","order":148,"name":"dsh-llm-fallbacks","owner":"btspoony","repo":"btspoony/dsh-llm-fallbacks","url":"https://github.com/btspoony/dsh-llm-fallbacks","category":"model","description":{"en":"Role-based LLM retry & fallback strategies.","zh":"基于角色的模型重试与备用策略。"},"added":"2026-08-13","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-llm-fallbacks","version":"0.1.0-alpha.1","lifecycleScripts":["prepare"],"runtimeDependencies":0},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"franksong2702/dsh-codex-connect","order":149,"name":"dsh-codex-connect","owner":"franksong2702","repo":"franksong2702/dsh-codex-connect","url":"https://github.com/franksong2702/dsh-codex-connect","category":"model","description":{"en":"Connect ChatGPT OAuth and OpenAI Codex models to DeepSeek Harness, with opt-in search and image tools.","zh":"通过 ChatGPT OAuth 将 OpenAI Codex 模型接入 DeepSeek Harness，并提供可选的搜索与图片工具。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T08:15:26Z","updatedAt":"2026-08-14T08:09:07Z","createdAt":"2026-08-14T00:28:45Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-codex-connect","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-codex-connect","version":"0.1.0-alpha.4.31","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"92b09bff0c8dc2855d5d44f45e438953743f97ff","installCommand":"dsh plugin --profile web add github:franksong2702/dsh-codex-connect#92b09bff0c8dc2855d5d44f45e438953743f97ff","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:53.157Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:53.157Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"franksong2702/dsh-codex-connect@92b09bff0c8dc2855d5d44f45e438953743f97ff#scan-2","versionCount":1,"latestCommit":"92b09bff0c8dc2855d5d44f45e438953743f97ff","latestCheckedAt":"2026-09-08T00:00:53.157Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"kam74515-boop/dsh-everything-oauth","order":150,"name":"dsh-everything-oauth","owner":"kam74515-boop","repo":"kam74515-boop/dsh-everything-oauth","url":"https://github.com/kam74515-boop/dsh-everything-oauth","category":"model","description":{"en":"Import local Codex, Grok, Claude, OpenCode, and CC Switch logins into DSH; pick sources and enable models in Settings.","zh":"把本机 Codex / Grok / Claude / OpenCode / CC Switch 登录态导入 DSH，在设置里自选来源并启用模型。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T04:59:47Z","updatedAt":"2026-08-14T05:01:49Z","createdAt":"2026-08-14T04:59:43Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-everything-oauth","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"omdsh-dev/qwen-mm-plugins","order":151,"name":"Qwen-MM-Plugins","owner":"omdsh-dev","repo":"omdsh-dev/Qwen-MM-Plugins","url":"https://github.com/omdsh-dev/Qwen-MM-Plugins","category":"model","description":{"en":"Qwen multi-modal plugin support.","zh":"Qwen 多模态插件支持。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-09T10:59:51Z","updatedAt":"2026-08-14T05:04:34Z","createdAt":"2026-08-05T14:55:21Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-qwen-mm","version":"0.0.2","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"suntianc/dsh-codex-auth","order":152,"name":"dsh-codex-auth","owner":"suntianc","repo":"suntianc/dsh-codex-auth","url":"https://github.com/suntianc/dsh-codex-auth","category":"model","description":{"en":"Reuses the Codex CLI ChatGPT login as an `openai-codex` LLM route and adds GPT Auth controls to DSH Web settings.","zh":"复用 Codex CLI 的 ChatGPT 登录态注册 `openai-codex` LLM 路由，并在 DSH Web 设置中提供 GPT Auth 控件。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T06:36:02Z","updatedAt":"2026-08-14T07:18:44Z","createdAt":"2026-08-14T01:50:02Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/deepseek-ai/deepseek-harness","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-codex-auth","version":"0.3.2","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"014a3349b5e46ffe933127e997982f5cb87b3365","installCommand":"dsh plugin --profile web add github:suntianc/dsh-codex-auth#014a3349b5e46ffe933127e997982f5cb87b3365","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T00:01:17.651Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:17.651Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"suntianc/dsh-codex-auth@014a3349b5e46ffe933127e997982f5cb87b3365#scan-2","versionCount":1,"latestCommit":"014a3349b5e46ffe933127e997982f5cb87b3365","latestCheckedAt":"2026-09-03T00:01:17.651Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"omdsh-dev/fabric","order":153,"name":"fabric","owner":"omdsh-dev","repo":"omdsh-dev/fabric","url":"https://github.com/omdsh-dev/fabric","category":"dev","description":{"en":"An MC-Fabric-style hook processor.","zh":"类似 MC Fabric 的 hook 处理器。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-14T12:59:54Z","updatedAt":"2026-08-14T13:00:23Z","createdAt":"2026-08-06T08:46:22Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@oh-my-dsh/stent-pack","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"628784b02a7c990a377b7e3649683b97acae9b85","installCommand":"dsh plugin --profile web add github:omdsh-dev/fabric#628784b02a7c990a377b7e3649683b97acae9b85","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-04T12:00:28.720Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:28.720Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"omdsh-dev/fabric@628784b02a7c990a377b7e3649683b97acae9b85#scan-2","versionCount":1,"latestCommit":"628784b02a7c990a377b7e3649683b97acae9b85","latestCheckedAt":"2026-09-04T12:00:28.720Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"loserfox/dsh-git-identity","order":154,"name":"dsh-git-identity","owner":"LoserFox","repo":"LoserFox/dsh-git-identity","url":"https://github.com/LoserFox/dsh-git-identity","category":"dev","description":{"en":"Pin Git commits to the environment's own author identity; env-var injection overrides all `git config` settings.","zh":"git 提交固定使用环境自身作者身份，环境变量注入压过一切 `git config` 设置。"},"added":"2026-08-13","curated":true,"topic":true,"stars":7,"forks":0,"openIssues":0,"watchers":7,"pushedAt":"2026-08-13T13:11:37Z","updatedAt":"2026-08-13T16:39:09Z","createdAt":"2026-08-08T08:37:06Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@loserfox/git-identity","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"zhenyu98/dsh-context-doctor","order":155,"name":"dsh-context-doctor","owner":"Zhenyu98","repo":"Zhenyu98/dsh-context-doctor","url":"https://github.com/Zhenyu98/dsh-context-doctor","category":"dev","description":{"en":"Context injection audit: token costs of instruction chains / skill catalogs / tool schemas, duplicate and conflict detection.","zh":"上下文注入审计：统计指令链/技能目录/工具 schema 的 token 成本，检测重复与冲突。"},"added":"2026-08-13","curated":true,"topic":true,"stars":6,"forks":0,"openIssues":0,"watchers":6,"pushedAt":"2026-08-13T16:29:47Z","updatedAt":"2026-08-14T02:58:36Z","createdAt":"2026-08-12T16:03:31Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-context-doctor","version":"0.7.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"41d5c2e4bbe0611b7928c4007bb28545f7ace38f","installCommand":"dsh plugin --profile web add github:Zhenyu98/dsh-context-doctor#41d5c2e4bbe0611b7928c4007bb28545f7ace38f","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:00:55.644Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:55.644Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"zhenyu98/dsh-context-doctor@41d5c2e4bbe0611b7928c4007bb28545f7ace38f#scan-2","versionCount":1,"latestCommit":"41d5c2e4bbe0611b7928c4007bb28545f7ace38f","latestCheckedAt":"2026-09-12T12:00:55.644Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"iccuse/dsh-pain-point-check","order":156,"name":"dsh-pain-point-check","owner":"ICCuse","repo":"ICCuse/dsh-pain-point-check","url":"https://github.com/ICCuse/dsh-pain-point-check","category":"dev","description":{"en":"Enforced pain-point gate: after two non-converged experiments it injects the three questions, denies non-investigative tool calls until answered, and blocks same-direction retries.","zh":"强制痛点检查：同一问题连续 2 个实验未收敛后注入三问、拦截非调查类工具调用直到答出、阻止同方向重试。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-pain-point-check","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-plugin-check","order":157,"name":"dsh-plugin-check","owner":"omdsh-dev","repo":"omdsh-dev/dsh-plugin-check","url":"https://github.com/omdsh-dev/dsh-plugin-check","category":"dev","description":{"en":"Plugin health checks: manifest protocol / patch format / build traps, zero-dependency and read-only.","zh":"插件健康检查：扫描清单协议/patch 格式/构建陷阱，零依赖只读。"},"added":"2026-08-13","curated":true,"topic":true,"stars":14,"forks":0,"openIssues":0,"watchers":14,"pushedAt":"2026-08-14T03:11:21Z","updatedAt":"2026-08-14T07:53:54Z","createdAt":"2026-08-08T15:57:34Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-plugin-check","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-security-audit","order":158,"name":"dsh-security-audit","owner":"omdsh-dev","repo":"omdsh-dev/dsh-security-audit","url":"https://github.com/omdsh-dev/dsh-security-audit","category":"dev","description":{"en":"Local security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.","zh":"本机安全审计：配置/插件来源/会话/网络暴露面，只读脱敏风险报告。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-14T03:11:28Z","updatedAt":"2026-08-14T05:32:05Z","createdAt":"2026-08-10T07:02:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-security-audit","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"omdsh-dev/dsh-session-health","order":159,"name":"dsh-session-health","owner":"omdsh-dev","repo":"omdsh-dev/dsh-session-health","url":"https://github.com/omdsh-dev/dsh-session-health","category":"dev","description":{"en":"Frame-level scan diagnostics for session files (torn/corrupt/empty detection).","zh":"会话文件帧级扫描诊断（torn/损坏/空会话检测）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":8,"forks":0,"openIssues":0,"watchers":8,"pushedAt":"2026-08-14T03:11:26Z","updatedAt":"2026-08-14T05:32:10Z","createdAt":"2026-08-08T13:41:56Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-session-health","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"william-jin-cmu/dsh-evolve","order":160,"name":"dsh-evolve","owner":"william-jin-cmu","repo":"william-jin-cmu/dsh-evolve","url":"https://github.com/william-jin-cmu/dsh-evolve","category":"dev","description":{"en":"Self-evolution: the agent hot-mounts/removes persistent plugins on itself mid-session.","zh":"自进化：agent 在会话内给自己热挂载/卸载持久化插件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":3,"forks":0,"openIssues":2,"watchers":3,"pushedAt":"2026-08-13T02:26:42Z","updatedAt":"2026-08-14T01:30:52Z","createdAt":"2026-08-06T02:57:52Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@dsh-external/dsh-evolve","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"vibeinging/dsh-trace","order":161,"name":"dsh-trace","owner":"vibeinging","repo":"vibeinging/dsh-trace","url":"https://github.com/vibeinging/dsh-trace","category":"dev","description":{"en":"Telemetry backend exporting turns, model steps, and tool calls to yiTrace.","zh":"遥测后端：把 turns、model steps、tool calls 导出到 yiTrace。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-12T13:18:45Z","updatedAt":"2026-08-13T16:43:06Z","createdAt":"2026-08-11T08:45:51Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-trace","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"caadf1b831ae2643bd25a365cc1356c2100e7a05","installCommand":"dsh plugin --profile web add github:vibeinging/dsh-trace#caadf1b831ae2643bd25a365cc1356c2100e7a05","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:00:58.271Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T12:00:58.271Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","cordis.patch.yml","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"vibeinging/dsh-trace@caadf1b831ae2643bd25a365cc1356c2100e7a05#scan-2","versionCount":1,"latestCommit":"caadf1b831ae2643bd25a365cc1356c2100e7a05","latestCheckedAt":"2026-09-13T12:00:58.271Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"030611/dsh-telemetry-redactor","order":162,"name":"dsh-telemetry-redactor","owner":"030611","repo":"030611/dsh-telemetry-redactor","url":"https://github.com/030611/dsh-telemetry-redactor","category":"dev","description":{"en":"Redacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.","zh":"在已配置遥测后端接收前，对 `session-telemetry/record` 导出副本中的已支持秘密模式进行脱敏。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T07:23:06Z","updatedAt":"2026-08-14T06:31:29Z","createdAt":"2026-08-13T17:23:09Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-telemetry-redactor","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"811b0b1abf424e57045ab5a5eaa203660ca43908","installCommand":"dsh plugin --profile web add github:030611/dsh-telemetry-redactor#811b0b1abf424e57045ab5a5eaa203660ca43908","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:59.034Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:59.034Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["cordis.patch.yml","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"030611/dsh-telemetry-redactor@811b0b1abf424e57045ab5a5eaa203660ca43908#scan-2","versionCount":1,"latestCommit":"811b0b1abf424e57045ab5a5eaa203660ca43908","latestCheckedAt":"2026-09-08T12:00:59.034Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"030611/dsh-verification-receipt","order":163,"name":"dsh-verification-receipt","owner":"030611","repo":"030611/dsh-verification-receipt","url":"https://github.com/030611/dsh-verification-receipt","category":"dev","description":{"en":"Writes local JSONL summaries of per-turn tool counts and coarse verification signals without storing prompts, tool arguments, or result text.","zh":"把每轮工具计数与粗粒度验证信号写入本地 JSONL，不保存提示词、工具参数或结果正文。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T05:20:45Z","updatedAt":"2026-08-14T04:39:40Z","createdAt":"2026-08-13T17:25:09Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-verification-receipt","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"87f3fb0198090f0f26a37a52840db150609db748","installCommand":"dsh plugin --profile web add github:030611/dsh-verification-receipt#87f3fb0198090f0f26a37a52840db150609db748","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:00:34.481Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:34.481Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"030611/dsh-verification-receipt@87f3fb0198090f0f26a37a52840db150609db748#scan-2","versionCount":1,"latestCommit":"87f3fb0198090f0f26a37a52840db150609db748","latestCheckedAt":"2026-09-09T00:00:34.481Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"omdsh-dev/sandbox-micro","order":164,"name":"sandbox-micro","owner":"omdsh-dev","repo":"omdsh-dev/sandbox-micro","url":"https://github.com/omdsh-dev/sandbox-micro","category":"dev","description":{"en":"Support for the microsandbox backend.","zh":"microsandbox 沙箱支持。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-09T11:00:00Z","updatedAt":"2026-08-13T16:42:23Z","createdAt":"2026-08-08T07:48:15Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-sandbox-microsandbox","version":"0.0.2","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["未声明许可证","安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"omdsh-dev/sandbox-mxc","order":165,"name":"sandbox-mxc","owner":"omdsh-dev","repo":"omdsh-dev/sandbox-mxc","url":"https://github.com/omdsh-dev/sandbox-mxc","category":"dev","description":{"en":"Microsoft cross-platform sandbox support.","zh":"微软跨平台沙盒支持。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-08-09T12:07:40Z","updatedAt":"2026-08-13T16:44:35Z","createdAt":"2026-08-04T16:02:56Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-sandbox-mxc","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/stent-entry.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9cb542caead6fba319f1742197f12dfb9a898049","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:01:02.956Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-13T12:01:02.956Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["src/index.ts"]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.ts"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"caution","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现递归删除或直接删除文件的调用","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"omdsh-dev/sandbox-mxc@9cb542caead6fba319f1742197f12dfb9a898049#scan-2","versionCount":1,"latestCommit":"9cb542caead6fba319f1742197f12dfb9a898049","latestCheckedAt":"2026-09-13T12:01:02.956Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"omdsh-dev/sandbox-nono","order":166,"name":"sandbox-nono","owner":"omdsh-dev","repo":"omdsh-dev/sandbox-nono","url":"https://github.com/omdsh-dev/sandbox-nono","category":"dev","description":{"en":"Support for the nono sandbox backend.","zh":"nono 沙盒支持。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-11T06:32:44Z","updatedAt":"2026-08-14T01:36:16Z","createdAt":"2026-08-10T11:35:23Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-sandbox-nono","version":"0.0.2","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d8e1b7914db70d4799e3c4ad279b609d45a6aa44","installCommand":"dsh plugin --profile web add github:omdsh-dev/sandbox-nono#d8e1b7914db70d4799e3c4ad279b609d45a6aa44","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:01:02.238Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T12:01:02.238Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现 Shell 或子进程调用"]},"passport":{"evidenceId":"omdsh-dev/sandbox-nono@d8e1b7914db70d4799e3c4ad279b609d45a6aa44#scan-2","versionCount":1,"latestCommit":"d8e1b7914db70d4799e3c4ad279b609d45a6aa44","latestCheckedAt":"2026-09-13T12:01:02.238Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"vibeinging/dsh-agent-budget","order":167,"name":"dsh-agent-budget","owner":"vibeinging","repo":"vibeinging/dsh-agent-budget","url":"https://github.com/vibeinging/dsh-agent-budget","category":"dev","description":{"en":"Agent-tree token budget management.","zh":"agent 树 token 预算管理。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-12T13:18:45Z","updatedAt":"2026-08-14T02:35:27Z","createdAt":"2026-08-09T15:06:18Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"warm","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-agent-budget","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2702e6d4846d478c01ff09ccbb54fc9f6313daba","installCommand":"dsh plugin --profile web add github:vibeinging/dsh-agent-budget#2702e6d4846d478c01ff09ccbb54fc9f6313daba","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T12:00:58.348Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T12:00:58.348Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"vibeinging/dsh-agent-budget@2702e6d4846d478c01ff09ccbb54fc9f6313daba#scan-2","versionCount":1,"latestCommit":"2702e6d4846d478c01ff09ccbb54fc9f6313daba","latestCheckedAt":"2026-09-13T12:00:58.348Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"jesse-njx/dsh-polyglot","order":168,"name":"dsh-polyglot","owner":"Jesse-njx","repo":"Jesse-njx/dsh-polyglot","url":"https://github.com/Jesse-njx/dsh-polyglot","category":"dev","description":{"en":"The model switch for DSH: point it at any OpenAI-compatible endpoint, with curated free/cheap DeepSeek provider presets and automatic fallback when a free tier rate-limits you.","zh":"DSH 的模型切换器：指向任意 OpenAI 兼容端点，内置精选免费/低价 DeepSeek 服务商预设，免费额度限流时自动回退。"},"added":"2026-08-14","curated":true,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-13T16:41:52Z","updatedAt":"2026-08-13T17:21:48Z","createdAt":"2026-08-13T16:33:00Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dsh-polyglot/bundle","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":11,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4c939d75be7c24dcd74de219eb24f4a2355faad9","installCommand":"dsh plugin --profile web add github:Jesse-njx/dsh-polyglot#4c939d75be7c24dcd74de219eb24f4a2355faad9","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T12:00:52.629Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:52.629Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jesse-njx/dsh-polyglot@4c939d75be7c24dcd74de219eb24f4a2355faad9#scan-2","versionCount":1,"latestCommit":"4c939d75be7c24dcd74de219eb24f4a2355faad9","latestCheckedAt":"2026-09-12T12:00:52.629Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ilharp/dsh-tool-approval","order":169,"name":"dsh-tool-approval","owner":"ilharp","repo":"ilharp/dsh-tool-approval","url":"https://github.com/ilharp/dsh-tool-approval","category":"dev","description":{"en":"Manual approval mode (\"Manual Mode\" / \"Ask Mode\").","zh":"手动审批模式（Manual/Ask Mode）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T13:06:38Z","updatedAt":"2026-08-13T16:45:34Z","createdAt":"2026-08-11T05:02:58Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-tool-approval","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"arrow949/dsh-turn-approval","order":170,"name":"dsh-turn-approval","owner":"arrow949","repo":"arrow949/dsh-turn-approval","url":"https://github.com/arrow949/dsh-turn-approval","category":"dev","description":{"en":"Turn-scoped “Allow for this task” approvals: automatically allow matching `danger-full-access` escalations only for the current task, then expire.","zh":"DSH「允许本次任务」临时授权：仅在当前任务内自动放行同类 `danger-full-access` 请求，任务结束自动失效。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T04:31:23Z","updatedAt":"2026-08-14T04:31:32Z","createdAt":"2026-08-14T03:40:08Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-turn-approval","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5b4cbfd425885ed3f3ed93c796d5113847cc93b8","installCommand":"dsh plugin --profile web add github:arrow949/dsh-turn-approval#5b4cbfd425885ed3f3ed93c796d5113847cc93b8","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:00:40.708Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-09T00:00:40.708Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力"]},"passport":{"evidenceId":"arrow949/dsh-turn-approval@5b4cbfd425885ed3f3ed93c796d5113847cc93b8#scan-2","versionCount":1,"latestCommit":"5b4cbfd425885ed3f3ed93c796d5113847cc93b8","latestCheckedAt":"2026-09-09T00:00:40.708Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"omdsh-dev/plugin-template","order":171,"name":"plugin-template","owner":"omdsh-dev","repo":"omdsh-dev/plugin-template","url":"https://github.com/omdsh-dev/plugin-template","category":"dev","description":{"en":"Plugin template repo (based on the official turtle-ui repo).","zh":"插件模板仓库（基于 turtle-ui 官方仓库）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":5,"forks":0,"openIssues":0,"watchers":5,"pushedAt":"2026-08-12T20:17:02Z","updatedAt":"2026-08-14T07:24:43Z","createdAt":"2026-08-11T09:39:50Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@your-scope/dsh-plugin-template","version":"0.0.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"small-tailqwq/dsh-tps","order":172,"name":"dsh-tps","owner":"Small-tailqwq","repo":"Small-tailqwq/dsh-tps","url":"https://github.com/Small-tailqwq/dsh-tps","category":"dev","description":{"en":"A TPS metrics plugin.","zh":"TPS 指标插件。"},"added":"2026-08-13","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-13T13:05:59Z","updatedAt":"2026-08-13T16:45:13Z","createdAt":"2026-08-13T13:05:51Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/tps","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"areium/dsh-fail-logger","order":173,"name":"dsh-fail-logger","owner":"Areium","repo":"Areium/dsh-fail-logger","url":"https://github.com/Areium/dsh-fail-logger","category":"dev","description":{"en":"Auto-log failed tool calls across native tools, PTC run_code, and inline invocations: dedup and count root causes into a skill so repeated mistakes fade.","zh":"全模式调用工具失败自动实录：把原生工具 / PTC run_code / 代码内嵌工具调用的失败错因去重计数后写入 skill，越用越少错。"},"added":"2026-08-14","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":1,"watchers":4,"pushedAt":"2026-08-13T21:17:46Z","updatedAt":"2026-08-14T05:11:44Z","createdAt":"2026-08-13T19:19:35Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-fail-logger","version":"0.5.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3da2e2a48a82cf272a72db0a5870ea7a8bbb564e","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-12T00:03:32.283Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-12T00:03:32.283Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"caution","reasons":["仓库根目录未发现依赖锁文件","发现递归删除或直接删除文件的调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"areium/dsh-fail-logger@3da2e2a48a82cf272a72db0a5870ea7a8bbb564e#scan-2","versionCount":1,"latestCommit":"3da2e2a48a82cf272a72db0a5870ea7a8bbb564e","latestCheckedAt":"2026-09-12T00:03:32.283Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"biboyang/dsh-eval-harness","order":174,"name":"dsh-eval-harness","owner":"BiBoyang","repo":"BiBoyang/dsh-eval-harness","url":"https://github.com/BiBoyang/dsh-eval-harness","category":"dev","description":{"en":"Evaluation harness for DSH plugins: YAML cases drive real headless agent runs, assert on tool calls, args, results and token usage, with a baseline gate for CI regression.","zh":"DSH 插件评测框架：YAML 用例驱动真实 headless agent，断言工具调用/参数/返回与 token 用量，baseline 门禁做 CI 回归。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T02:53:24Z","updatedAt":"2026-08-14T02:52:24Z","createdAt":"2026-08-13T22:13:26Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-eval-harness","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"hust-open-atom-club/oh-dsh","order":175,"name":"oh-dsh","owner":"hust-open-atom-club","repo":"hust-open-atom-club/oh-dsh","url":"https://github.com/hust-open-atom-club/oh-dsh","category":"dev","description":{"en":"Community distribution: TUI, desktop, and Web UI as one bundle with layered installation.","zh":"社区发行版：TUI、桌面端与 Web UI 统一体验，分层安装、一步到位。"},"added":"2026-08-14","curated":true,"topic":true,"stars":139,"forks":11,"openIssues":7,"watchers":139,"pushedAt":"2026-08-14T08:05:54Z","updatedAt":"2026-08-14T08:14:14Z","createdAt":"2026-08-11T05:31:05Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@oh-dsh/desktop","version":"0.1.12","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["dist/cordis.patch.yml","dist/main.js","dist/plugin.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e06e100fb67c12e47df6a89ee46aab86316de153","installCommand":"dsh plugin --profile web add github:hust-open-atom-club/oh-dsh#e06e100fb67c12e47df6a89ee46aab86316de153","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:53.739Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:53.739Z","findings":[{"id":"source-unavailable","severity":"medium","label":{"zh":"未能读取声明入口或候选源码","en":"Declared entrypoint or candidate source was unavailable"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未能读取声明入口或候选源码"]},"passport":{"evidenceId":"hust-open-atom-club/oh-dsh@e06e100fb67c12e47df6a89ee46aab86316de153#scan-2","versionCount":1,"latestCommit":"e06e100fb67c12e47df6a89ee46aab86316de153","latestCheckedAt":"2026-09-08T00:00:53.739Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"bramblexu/dsh-annotate","order":176,"name":"dsh-annotate","owner":"BrambleXu","repo":"BrambleXu/dsh-annotate","url":"https://github.com/BrambleXu/dsh-annotate","category":"dev","description":{"en":"Select browser elements directly during Vibe Coding and send structured visual feedback to the DeepSeek Harness Agent.","zh":"面向 Vibe Coding 的浏览器元素标注插件：直接选取页面元素，并将结构化视觉反馈发送给 DeepSeek Harness Agent。"},"added":"2026-08-14","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T06:55:28Z","updatedAt":"2026-08-14T06:51:35Z","createdAt":"2026-08-14T00:26:18Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-annotate","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"bramblexu/dsh-prompt-profile","order":177,"name":"dsh-prompt-profile","owner":"BrambleXu","repo":"BrambleXu/dsh-prompt-profile","url":"https://github.com/BrambleXu/dsh-prompt-profile","category":"dev","description":{"en":"Reusable Markdown prompt profiles for DeepSeek Harness with per-turn model selection, argument substitution, and state restoration.","zh":"DeepSeek Harness 可复用 Markdown Prompt Profile，支持单轮模型选择、参数替换和状态恢复。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T06:56:46Z","updatedAt":"2026-08-14T06:51:48Z","createdAt":"2026-08-14T00:38:26Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-prompt-profile","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c205d44e88e64b5126fa2615a7122e684e3af7f5","installCommand":"dsh plugin --profile web add github:BrambleXu/dsh-prompt-profile#c205d44e88e64b5126fa2615a7122e684e3af7f5","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T00:01:10.326Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T00:01:10.326Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"bramblexu/dsh-prompt-profile@c205d44e88e64b5126fa2615a7122e684e3af7f5#scan-2","versionCount":1,"latestCommit":"c205d44e88e64b5126fa2615a7122e684e3af7f5","latestCheckedAt":"2026-09-03T00:01:10.326Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bramblexu/dsh-revdiff","order":178,"name":"dsh-revdiff","owner":"BrambleXu","repo":"BrambleXu/dsh-revdiff","url":"https://github.com/BrambleXu/dsh-revdiff","category":"dev","description":{"en":"Native interactive Git diff review for DeepSeek Harness with structured annotations sent back to the current Agent session.","zh":"DeepSeek Harness 原生交互式 Git diff 审查，支持结构化批注并回传当前 Agent 会话。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T06:57:33Z","updatedAt":"2026-08-14T06:51:45Z","createdAt":"2026-08-14T00:42:20Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-revdiff","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"lonelymoon87/dsh-gitflow","order":179,"name":"dsh-gitflow","owner":"lonelymoon87","repo":"lonelymoon87/dsh-gitflow","url":"https://github.com/lonelymoon87/dsh-gitflow","category":"dev","description":{"en":"Adds approval-gated Git status, diff, log, commit, branch, and optional checkpoint tools.","zh":"增加需要审批的 Git 状态、diff、日志、提交、分支和可选检查点工具。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T02:54:23Z","updatedAt":"2026-08-14T05:49:17Z","createdAt":"2026-08-13T18:18:28Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-gitflow","version":"0.1.2","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"lonelymoon87/dsh-guardian","order":180,"name":"dsh-guardian","owner":"lonelymoon87","repo":"lonelymoon87/dsh-guardian","url":"https://github.com/lonelymoon87/dsh-guardian","category":"dev","description":{"en":"Adds dangerous-operation policy checks, output redaction, and a security-review workflow.","zh":"增加危险操作策略检查、输出脱敏和安全审查工作流。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"jesse-njx/dsh-plugin-manager","order":181,"name":"dsh-plugin-manager","owner":"Jesse-njx","repo":"Jesse-njx/dsh-plugin-manager","url":"https://github.com/Jesse-njx/dsh-plugin-manager","category":"dev","description":{"en":"The `dsh pm` plugin manager: multi-source search (awesome list + GitHub + npm), install/remove/update per profile, and a doctor audit of manifests, bundle patches, and version drift.","zh":"`dsh pm` 插件管理器：多源搜索（awesome 列表 + GitHub + npm）、按 profile 安装/移除/更新，以及 doctor 审计（清单、bundle patch、版本漂移）。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]},{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证","未核验到 dsh manifest"]},"screenedCommit":null},{"id":"jesse-njx/dsh-tmuxctl","order":182,"name":"dsh-tmuxctl","owner":"Jesse-njx","repo":"Jesse-njx/dsh-tmuxctl","url":"https://github.com/Jesse-njx/dsh-tmuxctl","category":"dev","description":{"en":"Take control of your tmux panes: list/send-keys/capture, run long jobs in a pane with watch mode, and approval-gated destructive commands.","zh":"掌控你的 tmux 面板：list/send-keys/capture、在面板中运行长任务并 watch，破坏性命令需审批。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-tmuxctl/bundle","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"xingyingyuzhui/dsh-updater-ui","order":183,"name":"dsh-updater-ui","owner":"xingyingyuzhui","repo":"xingyingyuzhui/dsh-updater-ui","url":"https://github.com/xingyingyuzhui/dsh-updater-ui","category":"dev","description":{"en":"DSH self-updater in the settings page: one-click check/pull (`git pull --ff-only`), auto background checks, version diff and changelog preview with a red-dot reminder.","zh":"设置页中的 DSH 自助更新器：一键检查/拉取（git pull --ff-only）、自动后台检查、版本对比与更新说明预览，带红点提醒。"},"added":"2026-08-14","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":1,"watchers":4,"pushedAt":"2026-08-14T02:54:31Z","updatedAt":"2026-08-14T03:31:10Z","createdAt":"2026-08-14T02:54:27Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-updater-ui","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","host.js","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"evilirving/dsh-repro","order":184,"name":"dsh-repro","owner":"EvilIrving","repo":"EvilIrving/dsh-repro","url":"https://github.com/EvilIrving/dsh-repro","category":"dev","description":{"en":"/repro exports a minimal, secret-scrubbed, replayable problem bundle: the session log, failed commands, and Git diff.","zh":"/repro 导出最小可复现问题包：去 secret 的会话日志、失败命令与 git diff。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T03:21:03Z","updatedAt":"2026-08-14T07:48:13Z","createdAt":"2026-08-14T03:20:56Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-repro","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e51736ba583830462e0cca4d808ec3e0b7001bcd","installCommand":"dsh plugin --profile web add github:EvilIrving/dsh-repro#e51736ba583830462e0cca4d808ec3e0b7001bcd","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-10T12:02:44.286Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-10T12:02:44.286Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现本地文件写入能力"]},"passport":{"evidenceId":"evilirving/dsh-repro@e51736ba583830462e0cca4d808ec3e0b7001bcd#scan-2","versionCount":1,"latestCommit":"e51736ba583830462e0cca4d808ec3e0b7001bcd","latestCheckedAt":"2026-09-10T12:02:44.286Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"perrylink/dsh-mcp-panel","order":185,"name":"dsh-mcp-panel","owner":"PerryLink","repo":"PerryLink/dsh-mcp-panel","url":"https://github.com/PerryLink/dsh-mcp-panel","category":"dev","description":{"en":"Read-only runtime management panel for the official DSH MCP client: connection status, registered tools, errors, and reconnect counts through the /mcp command and a Settings tab, with sanitized display and enable/disable patch suggestions.","zh":"官方 MCP 客户端（dsh-mcp-client）的只读运行时管理面板：/mcp 命令与设置页 MCP 页签展示连接状态、已注册工具、错误与重连计数，脱敏展示并提供启停 patch 建议。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":4,"watchers":1,"pushedAt":"2026-08-14T07:28:04Z","updatedAt":"2026-08-14T07:26:34Z","createdAt":"2026-08-14T03:54:20Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mcp-panel","version":"0.6.9","lifecycleScripts":["prepare"],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c08355d2810d22ca3278a7e39e81e3ff9bb1fc86","installCommand":"dsh plugin --profile web add github:PerryLink/dsh-mcp-panel#c08355d2810d22ca3278a7e39e81e3ff9bb1fc86","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:56.066Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T12:00:56.066Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"perrylink/dsh-mcp-panel@c08355d2810d22ca3278a7e39e81e3ff9bb1fc86#scan-2","versionCount":1,"latestCommit":"c08355d2810d22ca3278a7e39e81e3ff9bb1fc86","latestCheckedAt":"2026-09-08T12:00:56.066Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"jayden-x-l/forkprobe","order":186,"name":"forkprobe","owner":"Jayden-X-L","repo":"Jayden-X-L/forkprobe","url":"https://github.com/Jayden-X-L/forkprobe","category":"dev","description":{"en":"Compare multiple skills on the same task and pick the winner.","zh":"同一任务并行试跑多个技能，对比结果选出最优。"},"added":"2026-08-14","curated":true,"topic":true,"stars":64,"forks":3,"openIssues":0,"watchers":64,"pushedAt":"2026-08-14T04:43:09Z","updatedAt":"2026-08-14T06:34:08Z","createdAt":"2026-06-06T08:16:55Z","license":"MIT","language":"Python","homepage":"https://jayden-x-l.github.io/forkprobe/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"forkprobe-dsh","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["dsh-plugin/cordis.patch.yml","dsh-plugin/lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"707d02b5a03c280237bb6d602bd8f1d09accf13e","installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-09T00:00:36.327Z"},"screening":{"version":1,"scope":"source","state":"blocked","risk":"high","checkedAt":"2026-09-09T00:00:36.327Z","findings":[{"id":"destructive-filesystem","severity":"high","label":{"zh":"发现递归删除或直接删除文件的调用","en":"Destructive filesystem operation signal found"},"files":["dsh-plugin/lib/index.js"]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["dsh-plugin/lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dsh-plugin/lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh-plugin/lib/index.js"]}],"filesInspected":["package.json","dsh-plugin/lib/index.js","dsh-plugin/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"caution","reasons":["发现递归删除或直接删除文件的调用","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jayden-x-l/forkprobe@707d02b5a03c280237bb6d602bd8f1d09accf13e#scan-2","versionCount":1,"latestCommit":"707d02b5a03c280237bb6d602bd8f1d09accf13e","latestCheckedAt":"2026-09-09T00:00:36.327Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"vlln/plugin-registry","order":187,"name":"plugin-registry","owner":"vlln","repo":"vlln/plugin-registry","url":"https://github.com/vlln/plugin-registry","category":"dev","description":{"en":"Ecosystem infrastructure: a thin browser console for managing official repository plugins (zero patches) plus a make-dsh-plugin skill for guided plugin development.","zh":"插件生态基建：浏览器面板管理官方 repository 插件（0 patch）+ make-dsh-plugin 插件开发引导技能。"},"added":"2026-08-14","curated":true,"topic":true,"stars":26,"forks":0,"openIssues":5,"watchers":26,"pushedAt":"2026-08-13T14:22:05Z","updatedAt":"2026-08-14T06:03:56Z","createdAt":"2026-08-04T15:57:49Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"missing","branch":"main","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"blocked","risk":"high","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"manifest-missing","severity":"high","label":{"zh":"未识别到有效的 dsh manifest","en":"No valid dsh manifest found"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未核验到 dsh manifest"]},"screenedCommit":null},{"id":"forrestchang/dsh-multica-runtime","order":188,"name":"dsh-multica-runtime","owner":"forrestchang","repo":"forrestchang/dsh-multica-runtime","url":"https://github.com/forrestchang/dsh-multica-runtime","category":"dev","description":{"en":"Run the dsh runtime on Multica.","zh":"让 dsh 运行时跑在 Multica 上。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@multica-ai/dsh-runtime","version":"0.1.0-private.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"dietcokewithsugar/dsh-user-experience","order":189,"name":"dsh-user-experience","owner":"DietCokewithSugar","repo":"DietCokewithSugar/dsh-user-experience","url":"https://github.com/DietCokewithSugar/dsh-user-experience","category":"dev","description":{"en":"Finds potential UX issues in your project: automatically reviews React/TypeScript code, pinpoints each problem, and gives concrete suggestions.","zh":"帮你发现项目中可能存在的用户体验问题：自动走查 React/TypeScript 源码，定位问题并给出具体优化建议。"},"added":"2026-08-14","curated":true,"topic":true,"stars":5,"forks":0,"openIssues":0,"watchers":5,"pushedAt":"2026-08-14T08:01:16Z","updatedAt":"2026-08-14T08:01:39Z","createdAt":"2026-08-14T02:58:28Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-user-experience","version":"0.4.2","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bba21e6a634844b448b34aae4e7c8af1d8bbd9d4","installCommand":"dsh plugin --profile web add github:DietCokewithSugar/dsh-user-experience#bba21e6a634844b448b34aae4e7c8af1d8bbd9d4","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T12:00:47.826Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-08T12:00:47.826Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"dietcokewithsugar/dsh-user-experience@bba21e6a634844b448b34aae4e7c8af1d8bbd9d4#scan-2","versionCount":1,"latestCommit":"bba21e6a634844b448b34aae4e7c8af1d8bbd9d4","latestCheckedAt":"2026-09-08T12:00:47.826Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"yflmq001/dsh-cost-tracker","order":190,"name":"dsh-cost-tracker","owner":"yflmq001","repo":"yflmq001/dsh-cost-tracker","url":"https://github.com/yflmq001/dsh-cost-tracker","category":"dev","description":{"en":"Per-model token cost tracking with configurable cache-hit/miss, output and peak-window pricing, a live session cost bar, and unconfigured-model flags.","zh":"按模型追踪 token 成本：可配置缓存命中/未命中、输出与高峰时段单价，实时会话花费条，并标记未配置价格的模型。"},"added":"2026-08-14","curated":true,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T08:10:19Z","updatedAt":"2026-08-14T08:10:33Z","createdAt":"2026-08-14T06:03:10Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-cost-tracker","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"62ae4bdb06f2f77448cfb066420aa304435a62be","installCommand":"dsh plugin --profile web add github:yflmq001/dsh-cost-tracker#62ae4bdb06f2f77448cfb066420aa304435a62be","discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:54.842Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:54.842Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"yflmq001/dsh-cost-tracker@62ae4bdb06f2f77448cfb066420aa304435a62be#scan-2","versionCount":1,"latestCommit":"62ae4bdb06f2f77448cfb066420aa304435a62be","latestCheckedAt":"2026-09-08T00:00:54.842Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"nagi-ovo/dsh-ads","order":191,"name":"dsh-ads","owner":"Nagi-ovo","repo":"Nagi-ovo/dsh-ads","url":"https://github.com/Nagi-ovo/dsh-ads","category":"fun","description":{"en":"Parody ads in 2005-Chinese-web style: sidebar banners, in-chat feeds, corner popups, and a close button whose hit area is smaller than it looks. All fictional.","zh":"2005 年中文站点风格的整活广告插件：侧栏广告/信息流/角落弹窗 + 假关闭叉，素材全虚构。"},"added":"2026-08-13","curated":true,"topic":true,"stars":260,"forks":1,"openIssues":1,"watchers":260,"pushedAt":"2026-08-14T01:18:40Z","updatedAt":"2026-08-14T08:08:31Z","createdAt":"2026-08-09T19:06:36Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-ads","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-gomoku","order":192,"name":"dsh-gomoku","owner":"omdsh-dev","repo":"omdsh-dev/dsh-gomoku","url":"https://github.com/omdsh-dev/dsh-gomoku","category":"fun","description":{"en":"Play Gomoku against the AI, or let two AIs battle it out.","zh":"与 AI 下五子棋，也可让 AI 对局比棋力。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-13T16:22:04Z","updatedAt":"2026-08-14T07:08:30Z","createdAt":"2026-08-08T17:27:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@yejiming/dsh-gomoku","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5b27af9808f5bd8f2d753dfdf6157d86a54a4947","installCommand":"dsh plugin --profile web add github:omdsh-dev/dsh-gomoku#5b27af9808f5bd8f2d753dfdf6157d86a54a4947","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-12T12:00:55.538Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-12T12:00:55.538Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"omdsh-dev/dsh-gomoku@5b27af9808f5bd8f2d753dfdf6157d86a54a4947#scan-2","versionCount":1,"latestCommit":"5b27af9808f5bd8f2d753dfdf6157d86a54a4947","latestCheckedAt":"2026-09-12T12:00:55.538Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"anacondakc/dsh-stock-market","order":193,"name":"dsh-stock-market","owner":"AnacondaKC","repo":"AnacondaKC/dsh-stock-market","url":"https://github.com/AnacondaKC/dsh-stock-market","category":"fun","description":{"en":"Fixes the bug where your account can't lose money while you code.","zh":"有效解决了写代码的时候账户不能同时亏钱的 BUG。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":3,"openIssues":2,"watchers":9,"pushedAt":"2026-08-13T06:26:46Z","updatedAt":"2026-08-14T06:17:18Z","createdAt":"2026-08-12T09:27:13Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-stock-market","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"hellodigua/dsh-emoji","order":194,"name":"dsh-emoji","owner":"hellodigua","repo":"hellodigua/dsh-emoji","url":"https://github.com/hellodigua/dsh-emoji","category":"fun","description":{"en":"Automatically add emojis to AI replies.","zh":"为 AI 回复自动添加表情。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-14T06:53:26Z","updatedAt":"2026-08-14T07:36:14Z","createdAt":"2026-08-12T16:16:29Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"missing","branch":"main","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-15T03:00:06.828Z"},"screening":{"version":1,"scope":"manifest","state":"review","risk":"unknown","checkedAt":"2026-08-15T03:00:06.828Z","findings":[{"id":"current-inspection-error","severity":"medium","label":{"zh":"当前仓库无法完成检查，安装命令已暂时撤回","en":"The current repository inspection could not complete; the install command was withdrawn"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["当前仓库无法完成检查，安装命令已暂时撤回"]},"screenedCommit":null},{"id":"lhh010/dsh-minigames","order":195,"name":"dsh-minigames","owner":"lhh010","repo":"lhh010/dsh-minigames","url":"https://github.com/lhh010/dsh-minigames","category":"fun","description":{"en":"Side-panel arcade: 18 offline mini-games to play while the model thinks.","zh":"右侧小游戏面板：18 款离线小游戏，等模型回复时的摸鱼神器。"},"added":"2026-08-13","curated":true,"topic":true,"stars":11,"forks":0,"openIssues":0,"watchers":11,"pushedAt":"2026-08-13T13:53:38Z","updatedAt":"2026-08-14T07:08:21Z","createdAt":"2026-08-13T13:09:57Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-minigames","version":"0.3.19","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cc9aeebce4201841d5032ff545e2ec11d5532593","installCommand":"dsh plugin --profile web add github:lhh010/dsh-minigames#cc9aeebce4201841d5032ff545e2ec11d5532593","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:02:07.367Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T00:02:07.367Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"lhh010/dsh-minigames@cc9aeebce4201841d5032ff545e2ec11d5532593#scan-2","versionCount":1,"latestCommit":"cc9aeebce4201841d5032ff545e2ec11d5532593","latestCheckedAt":"2026-09-13T00:02:07.367Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"william-jin-cmu/dsh-stickers","order":196,"name":"dsh-stickers","owner":"william-jin-cmu","repo":"william-jin-cmu/dsh-stickers","url":"https://github.com/william-jin-cmu/dsh-stickers","category":"fun","description":{"en":"Bidirectional sticker reactions between user and agent.","zh":"用户与 agent 双向表情贴纸互动。"},"added":"2026-08-13","curated":true,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-08-13T02:26:59Z","updatedAt":"2026-08-14T05:57:47Z","createdAt":"2026-08-08T12:49:44Z","license":"BSD-3-Clause","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-stickers","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"vlln/whale-girl","order":197,"name":"whale-girl","owner":"vlln","repo":"vlln/whale-girl","url":"https://github.com/vlln/whale-girl","category":"fun","description":{"en":"Desktop pet (QQ-pet style): floats in the corner, draggable, feedable, playable.","zh":"桌面宠物（QQ 宠物形态）：右下角悬浮、可拖拽/投喂/玩耍。"},"added":"2026-08-13","curated":true,"topic":true,"stars":99,"forks":4,"openIssues":2,"watchers":99,"pushedAt":"2026-08-13T14:22:20Z","updatedAt":"2026-08-14T07:46:29Z","createdAt":"2026-08-10T15:03:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"whale-girl","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4fe5792c6f873c6b3a29dd12198ba47a397e17f3","installCommand":"dsh plugin --profile web add github:vlln/whale-girl#4fe5792c6f873c6b3a29dd12198ba47a397e17f3","discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-09-13T00:00:25.197Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-13T00:00:25.197Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"vlln/whale-girl@4fe5792c6f873c6b3a29dd12198ba47a397e17f3#scan-2","versionCount":1,"latestCommit":"4fe5792c6f873c6b3a29dd12198ba47a397e17f3","latestCheckedAt":"2026-09-13T00:00:25.197Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"moeblack/deepseek-manners","order":198,"name":"deepseek-manners","owner":"Moeblack","repo":"Moeblack/deepseek-manners","url":"https://github.com/Moeblack/deepseek-manners","category":"fun","description":{"en":"Append a thank-you note after every message. Mind your manners.","zh":"给每次消息后注入感谢语，做个有礼貌的人。"},"added":"2026-08-13","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-13T13:48:49Z","updatedAt":"2026-08-14T06:32:45Z","createdAt":"2026-08-11T08:59:21Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"deepseek-manners","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"huanlinoto/dsh-plugin-d399","order":199,"name":"dsh-plugin-d399","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-d399","url":"https://github.com/HuanLinOTO/dsh-plugin-d399","category":"fun","description":{"en":"Pops up a mini-game menu (wordle, match-3, extensible) while the model generates.","zh":"模型生成时弹出小游戏菜单（wordle/消消乐，可扩展）。"},"added":"2026-08-13","curated":true,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-14T06:26:03Z","updatedAt":"2026-08-14T06:43:18Z","createdAt":"2026-08-10T08:36:48Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-d399","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"omdsh-dev/dsh-auto-chess","order":200,"name":"dsh-auto-chess","owner":"omdsh-dev","repo":"omdsh-dev/dsh-auto-chess","url":"https://github.com/omdsh-dev/dsh-auto-chess","category":"fun","description":{"en":"Auto chess: human vs AI, or AI vs AI.","zh":"自走棋：人机对战或双 AI 对弈。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-13T09:29:29Z","updatedAt":"2026-08-14T06:04:49Z","createdAt":"2026-08-10T12:02:55Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-auto-chess","version":"0.0.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"caution","reasons":["安装生命周期脚本：prepare"]},"screenedCommit":null},{"id":"anacondakc/dsh-douyin","order":201,"name":"dsh-douyin","owner":"AnacondaKC","repo":"AnacondaKC/dsh-douyin","url":"https://github.com/AnacondaKC/dsh-douyin","category":"fun","description":{"en":"Short-video sidebar: native player, series navigation, precise history replay.","zh":"侧栏短视频：原生播放器、系列导航、精确历史回放。"},"added":"2026-08-13","curated":true,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-13T06:26:44Z","updatedAt":"2026-08-13T17:20:17Z","createdAt":"2026-08-13T02:59:48Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-douyin","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-13","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"screenedCommit":null},{"id":"minybear/deepseek-harness-pet","order":202,"name":"DeepSeek-Harness-Pet","owner":"minybear","repo":"minybear/DeepSeek-Harness-Pet","url":"https://github.com/minybear/DeepSeek-Harness-Pet","category":"fun","description":{"en":"Codex-style desktop pet: a floating animated sprite in the corner that mirrors the agent's running state (working, waiting, failed, done).","zh":"Codex 风格桌面宠物：右下角悬浮动画精灵，随 agent 运行状态实时变化（工作、等待、报错、完成）。"},"added":"2026-08-14","curated":true,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@minybear/dsh-pet","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"curated","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T08:18:12.622Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-14T08:18:12.622Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["未声明许可证"]},"screenedCommit":null},{"id":"cheesefox259/dsh-better-composer","order":203,"name":"@cheesefox/dsh-better-composer","owner":"CheeseFox259","repo":"CheeseFox259/dsh-better-composer","url":"https://github.com/CheeseFox259/dsh-better-composer","category":"session","description":{"zh":"DSH Web Composer enhancement: live Markdown presentation, paste-to-clip, and a full-history context map — all through public composer seams.","en":"DSH Web Composer enhancement: live Markdown presentation, paste-to-clip, and a full-history context map — all through public composer seams."},"added":"2026-09-26","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":1,"watchers":1,"pushedAt":"2026-09-25T13:08:48Z","updatedAt":"2026-09-25T13:30:52Z","createdAt":"2026-09-22T08:09:48Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@cheesefox/dsh-better-composer","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"255a8443132c5b4451512252f801516297c6cdc8","installCommand":"dsh plugin --profile web add github:CheeseFox259/dsh-better-composer#255a8443132c5b4451512252f801516297c6cdc8","discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:47.287Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-26T00:02:47.287Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"cheesefox259/dsh-better-composer@255a8443132c5b4451512252f801516297c6cdc8#scan-2","versionCount":1,"latestCommit":"255a8443132c5b4451512252f801516297c6cdc8","latestCheckedAt":"2026-09-26T00:02:47.287Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"saikel-orado-liu/dsh-cost-meter","order":204,"name":"@gamegeek-saikel/dsh-cost-meter","owner":"Saikel-Orado-Liu","repo":"Saikel-Orado-Liu/dsh-cost-meter","url":"https://github.com/Saikel-Orado-Liu/dsh-cost-meter","category":"tools","description":{"zh":"Cost tracking plugin for the DeepSeek Harness Web GUI — snapshot-anchored per-turn pricing, account balance, and live cost estimates.","en":"Cost tracking plugin for the DeepSeek Harness Web GUI — snapshot-anchored per-turn pricing, account balance, and live cost estimates."},"added":"2026-09-26","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-25T13:14:46Z","updatedAt":"2026-09-25T13:14:46Z","createdAt":"2026-08-16T18:18:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@gamegeek-saikel/dsh-cost-meter","version":"0.4.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"722642fb4fd443f4cbed255f64186036d8f5308a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:41.214Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:41.214Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"saikel-orado-liu/dsh-cost-meter@722642fb4fd443f4cbed255f64186036d8f5308a#scan-2","versionCount":1,"latestCommit":"722642fb4fd443f4cbed255f64186036d8f5308a","latestCheckedAt":"2026-09-26T00:02:41.214Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-approval-gate","order":205,"name":"@goodandready/dsh-approval-gate","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-approval-gate","url":"https://github.com/GooDAnDReaDY/dsh-approval-gate","category":"tools","description":{"zh":"Native command approval gate for DeepSeek Harness.","en":"Native command approval gate for DeepSeek Harness."},"added":"2026-09-26","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T13:11:55Z","updatedAt":"2026-09-25T13:12:00Z","createdAt":"2026-09-17T15:11:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@goodandready/dsh-approval-gate","version":"0.1.9","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"764fbaef059ecb462c0f9633a945622ffc4ae581","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:46.377Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:46.377Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"goodandready/dsh-approval-gate@764fbaef059ecb462c0f9633a945622ffc4ae581#scan-2","versionCount":1,"latestCommit":"764fbaef059ecb462c0f9633a945622ffc4ae581","latestCheckedAt":"2026-09-26T00:02:46.377Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"weibaohui/dsh-settings-ui","order":206,"name":"@weibaohui/dsh-settings-ui","owner":"weibaohui","repo":"weibaohui/dsh-settings-ui","url":"https://github.com/weibaohui/dsh-settings-ui","category":"ui","description":{"zh":"dsh 插件 · 设置界面自定义：调整原生设置窗口大小（全屏/预置/自定义）、背景不透明度与背景（亮暗各一色，实时跟随主题）","en":"dsh 插件 · 设置界面自定义：调整原生设置窗口大小（全屏/预置/自定义）、背景不透明度与背景（亮暗各一色，实时跟随主题）"},"added":"2026-09-26","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-25T13:14:30Z","updatedAt":"2026-09-25T13:14:31Z","createdAt":"2026-09-01T11:54:22Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@weibaohui/dsh-settings-ui","version":"0.2.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js","client/bundle.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2d367dfe1e97f2d05f86cf9b415f7f70ac9a32ed","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:05.981Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:05.981Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/bundle.js"]}],"filesInspected":["package.json","src/index.js","client/bundle.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"weibaohui/dsh-settings-ui@2d367dfe1e97f2d05f86cf9b415f7f70ac9a32ed#scan-2","versionCount":1,"latestCommit":"2d367dfe1e97f2d05f86cf9b415f7f70ac9a32ed","latestCheckedAt":"2026-09-26T00:02:05.981Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"edittogether/dsh-editapart","order":207,"name":"dsh-edit-apart","owner":"EditTogether","repo":"EditTogether/DSH-EditApart","url":"https://github.com/EditTogether/DSH-EditApart","category":"workflow","description":{"zh":"A schema-driven, automation-first video + photo editor preset for DeepSeek Harness: deterministic render -> critique -> revise, with the edit decision as an auditable, trainable object. Part of the EditTogether collection.","en":"A schema-driven, automation-first video + photo editor preset for DeepSeek Harness: deterministic render -> critique -> revise, with the edit decision as an auditable, trainable object. Part of the EditTogether collection."},"added":"2026-09-26","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T13:14:26Z","updatedAt":"2026-09-25T13:14:30Z","createdAt":"2026-09-17T19:54:30Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-edit-apart","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":"a80890d9fa989b89ec231bfb7d0218455c90df42","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:06.221Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:06.221Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"source-unavailable","severity":"medium","label":{"zh":"未能读取声明入口或候选源码","en":"Declared entrypoint or candidate source was unavailable"},"files":[]}],"filesInspected":["package.json"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":false,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","未能读取声明入口或候选源码"]},"passport":{"evidenceId":"edittogether/dsh-editapart@a80890d9fa989b89ec231bfb7d0218455c90df42#scan-2","versionCount":1,"latestCommit":"a80890d9fa989b89ec231bfb7d0218455c90df42","latestCheckedAt":"2026-09-26T00:02:06.221Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"hyperion2144/dsh-hashline-edittool","order":208,"name":"dsh-hashline-edittool","owner":"hyperion2144","repo":"hyperion2144/dsh-hashline-edittool","url":"https://github.com/hyperion2144/dsh-hashline-edittool","category":"tools","description":{"zh":"Hash-anchored read/edit/undo_last_edit tools for DeepSeek Harness (dsh)","en":"Hash-anchored read/edit/undo_last_edit tools for DeepSeek Harness (dsh)"},"added":"2026-09-26","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":2,"watchers":1,"pushedAt":"2026-09-25T13:07:59Z","updatedAt":"2026-09-25T13:08:03Z","createdAt":"2026-08-20T11:37:12Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-hashline-edittool","version":"0.9.3","lifecycleScripts":["prepare"],"runtimeDependencies":8,"declaredPaths":["cordis.patch.yml","lib/index.js","client/lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d76ef85709a60048b14bf6f0622b32a999c24ff0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:47.509Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:47.509Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"hyperion2144/dsh-hashline-edittool@d76ef85709a60048b14bf6f0622b32a999c24ff0#scan-2","versionCount":1,"latestCommit":"d76ef85709a60048b14bf6f0622b32a999c24ff0","latestCheckedAt":"2026-09-26T00:02:47.509Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xs2966/dsh-termux-notify","order":209,"name":"dsh-termux-notify","owner":"xs2966","repo":"xs2966/dsh-termux-notify","url":"https://github.com/xs2966/dsh-termux-notify","category":"notify","description":{"zh":"Deepseek Harness在Temux环境中使用的通知插件，通过Termux:API给手机发送消息通知或TTS语音通知。","en":"Deepseek Harness在Temux环境中使用的通知插件，通过Termux:API给手机发送消息通知或TTS语音通知。"},"added":"2026-09-26","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T13:14:15Z","updatedAt":"2026-09-25T13:14:19Z","createdAt":"2026-09-25T05:13:39Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-termux-notify","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"56529f55d5cfb3b3d1340322d54a8b4a6da18fca","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-26","lastSeenAt":"2026-09-26T00:02:07.901Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-26T00:02:07.901Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","client/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"xs2966/dsh-termux-notify@56529f55d5cfb3b3d1340322d54a8b4a6da18fca#scan-2","versionCount":1,"latestCommit":"56529f55d5cfb3b3d1340322d54a8b4a6da18fca","latestCheckedAt":"2026-09-26T00:02:07.901Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-better-glob","order":210,"name":"@huanlin/dsh-plugin-better-glob","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-better-glob","url":"https://github.com/HuanLinOTO/dsh-plugin-better-glob","category":"workflow","description":{"zh":"以 per-agent 阴影顶替内置 glob：自动排除无底洞目录（node_modules 等），传 include 白名单才能搜入 | Shadows the built-in glob per agent: auto-excludes bottomless directories (node_modules etc.), pass an include whitelist to search inside them","en":"以 per-agent 阴影顶替内置 glob：自动排除无底洞目录（node_modules 等），传 include 白名单才能搜入 | Shadows the built-in glob per agent: auto-excludes bottomless directories (node_modules etc.), pass an include whitelist to search inside them"},"added":"2026-09-25","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-24T18:08:55Z","updatedAt":"2026-09-24T18:08:59Z","createdAt":"2026-08-30T08:57:44Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@huanlin/dsh-plugin-better-glob","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a23c2fda552982fc5b356f3f137d360683f06c3a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:33.706Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:33.706Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-better-glob@a23c2fda552982fc5b356f3f137d360683f06c3a#scan-2","versionCount":1,"latestCommit":"a23c2fda552982fc5b356f3f137d360683f06c3a","latestCheckedAt":"2026-09-25T00:01:33.706Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-better-plan","order":211,"name":"@huanlin/dsh-plugin-better-plan","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-better-plan","url":"https://github.com/HuanLinOTO/dsh-plugin-better-plan","category":"ui","description":{"zh":"better-plan: DSH 计划/待办侧边栏插件 | DSH plan/todo sidebar plugin","en":"better-plan: DSH 计划/待办侧边栏插件 | DSH plan/todo sidebar plugin"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T18:09:06Z","updatedAt":"2026-09-24T18:09:10Z","createdAt":"2026-09-03T12:47:15Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-better-plan","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6146540cf29a5a98f5e98c0a9fe74af56613dc30","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:32.538Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:32.538Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-better-plan@6146540cf29a5a98f5e98c0a9fe74af56613dc30#scan-2","versionCount":1,"latestCommit":"6146540cf29a5a98f5e98c0a9fe74af56613dc30","latestCheckedAt":"2026-09-25T00:01:32.538Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-copilot","order":212,"name":"@huanlin/dsh-plugin-copilot","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-copilot","url":"https://github.com/HuanLinOTO/dsh-plugin-copilot","category":"dev","description":{"zh":"Copilot 引导层插件：WebUI 设置卡片一键 GitHub 授权 + 自动激活模型路由并收窄模型列表（复用 dsh-llm-pi-ai 内置 device-flow） | Copilot onboarding plugin: one-click GitHub auth from the WebUI settings card, auto-activating the model route and narrowing the model list (reuses dsh-llm-pi-ai's builtin device flow)","en":"Copilot 引导层插件：WebUI 设置卡片一键 GitHub 授权 + 自动激活模型路由并收窄模型列表（复用 dsh-llm-pi-ai 内置 device-flow） | Copilot onboarding plugin: one-click GitHub auth from the WebUI settings card, auto-activating the model route and narrowing the model list (reuses dsh-llm-pi-ai's builtin device flow)"},"added":"2026-09-25","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-24T18:05:20Z","updatedAt":"2026-09-24T18:05:24Z","createdAt":"2026-08-28T17:39:31Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-copilot","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9479ec6fe2059471811b01d3fd8a758766a7155c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:41.889Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:41.889Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-copilot@9479ec6fe2059471811b01d3fd8a758766a7155c#scan-2","versionCount":1,"latestCommit":"9479ec6fe2059471811b01d3fd8a758766a7155c","latestCheckedAt":"2026-09-25T00:01:41.889Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-sidebar-brand-text","order":213,"name":"@huanlin/dsh-plugin-sidebar-brand-text","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-sidebar-brand-text","url":"https://github.com/HuanLinOTO/dsh-plugin-sidebar-brand-text","category":"ui","description":{"zh":"替换侧边栏左上角的品牌名与构建徽标文案（WebUI 插件配置页卡片实时配置） | Replace the sidebar's top-left brand name and build-revision badge text via a live settings card in the Plugin Config page.","en":"替换侧边栏左上角的品牌名与构建徽标文案（WebUI 插件配置页卡片实时配置） | Replace the sidebar's top-left brand name and build-revision badge text via a live settings card in the Plugin Config page."},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T18:09:02Z","updatedAt":"2026-09-24T18:09:06Z","createdAt":"2026-08-20T12:24:06Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-sidebar-brand-text","version":"0.7.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"aa113795f72113b4fa5d855e2ab581ffec2455f1","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:33.605Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:33.605Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-sidebar-brand-text@aa113795f72113b4fa5d855e2ab581ffec2455f1#scan-2","versionCount":1,"latestCommit":"aa113795f72113b4fa5d855e2ab581ffec2455f1","latestCheckedAt":"2026-09-25T00:01:33.605Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-sleep","order":214,"name":"@huanlin/dsh-plugin-sleep","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-sleep","url":"https://github.com/HuanLinOTO/dsh-plugin-sleep","category":"dev","description":{"zh":"向模型暴露 sleep 工具，按指定毫秒暂停执行后返回，支持取消/clamp | Exposes a sleep tool that pauses for specified ms then returns, with cancellation/clamping","en":"向模型暴露 sleep 工具，按指定毫秒暂停执行后返回，支持取消/clamp | Exposes a sleep tool that pauses for specified ms then returns, with cancellation/clamping"},"added":"2026-09-25","curated":false,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-09-24T18:05:42Z","updatedAt":"2026-09-24T18:05:46Z","createdAt":"2026-08-10T11:17:44Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@huanlin/dsh-plugin-sleep","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6e9fab87c7efd87d0b96c19d6e8971cb106b4709","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:39.479Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:39.479Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-sleep@6e9fab87c7efd87d0b96c19d6e8971cb106b4709#scan-2","versionCount":1,"latestCommit":"6e9fab87c7efd87d0b96c19d6e8971cb106b4709","latestCheckedAt":"2026-09-25T00:01:39.479Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-tools-manager","order":215,"name":"@huanlin/dsh-plugin-tools-manager","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-tools-manager","url":"https://github.com/HuanLinOTO/dsh-plugin-tools-manager","category":"dev","description":{"zh":"DSH 工具管理器：查看/启停宿主已注册工具 | DSH tools manager: inspect and toggle host-registered tools","en":"DSH 工具管理器：查看/启停宿主已注册工具 | DSH tools manager: inspect and toggle host-registered tools"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T18:08:50Z","updatedAt":"2026-09-24T18:08:55Z","createdAt":"2026-08-14T15:12:41Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-tools-manager","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e5f9cd5ccc033b2b2bef6bc69f2fe6e9619bb5e4","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:37.773Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:37.773Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-tools-manager@e5f9cd5ccc033b2b2bef6bc69f2fe6e9619bb5e4#scan-2","versionCount":1,"latestCommit":"e5f9cd5ccc033b2b2bef6bc69f2fe6e9619bb5e4","latestCheckedAt":"2026-09-25T00:01:37.773Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"huanlinoto/dsh-plugin-yet-another-subagent","order":216,"name":"@huanlin/dsh-plugin-yet-another-subagent","owner":"HuanLinOTO","repo":"HuanLinOTO/dsh-plugin-yet-another-subagent","url":"https://github.com/HuanLinOTO/dsh-plugin-yet-another-subagent","category":"ui","description":{"zh":"可配置子代理 profile 系统，单一 subagent 工具 + profile 参数，含 Web UI 设置/实时进度/子代理树 | Configurable subagent profile system: single subagent tool + profile param, with Web UI settings/real-time progress/subagent tree","en":"可配置子代理 profile 系统，单一 subagent 工具 + profile 参数，含 Web UI 设置/实时进度/子代理树 | Configurable subagent profile system: single subagent tool + profile param, with Web UI settings/real-time progress/subagent tree"},"added":"2026-09-25","curated":false,"topic":true,"stars":18,"forks":0,"openIssues":0,"watchers":18,"pushedAt":"2026-09-24T18:08:50Z","updatedAt":"2026-09-24T18:08:55Z","createdAt":"2026-08-09T17:20:11Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@huanlin/dsh-plugin-yet-another-subagent","version":"0.5.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1955c128a5b6142f1a4d29b7a2a7efbc833527db","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:34.769Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:34.769Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"huanlinoto/dsh-plugin-yet-another-subagent@1955c128a5b6142f1a4d29b7a2a7efbc833527db#scan-2","versionCount":1,"latestCommit":"1955c128a5b6142f1a4d29b7a2a7efbc833527db","latestCheckedAt":"2026-09-25T00:01:34.769Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"00080000/dsh-project-memory","order":217,"name":"@yolk_vat-y/dsh-project-memory","owner":"00080000","repo":"00080000/dsh-project-memory","url":"https://github.com/00080000/dsh-project-memory","category":"session","description":{"zh":"Read-time project memory plugin for DeepSeek Harness (dsh)","en":"Read-time project memory plugin for DeepSeek Harness (dsh)"},"added":"2026-09-25","curated":false,"topic":true,"stars":15,"forks":2,"openIssues":1,"watchers":15,"pushedAt":"2026-09-25T07:10:08Z","updatedAt":"2026-09-25T07:10:12Z","createdAt":"2026-08-19T08:40:32Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@yolk_vat-y/dsh-project-memory","version":"0.5.11","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c13af417b43cee31f082d7295da5adcd15dcba91","installCommand":"dsh plugin --profile web add github:00080000/dsh-project-memory#c13af417b43cee31f082d7295da5adcd15dcba91","discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:03:13.784Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-25T12:03:13.784Z","findings":[],"filesInspected":["package.json","src/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"00080000/dsh-project-memory@c13af417b43cee31f082d7295da5adcd15dcba91#scan-2","versionCount":1,"latestCommit":"c13af417b43cee31f082d7295da5adcd15dcba91","latestCheckedAt":"2026-09-25T12:03:13.784Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"vermilionpasvikin/dsh-coderag","order":218,"name":"dsh-coderag","owner":"VermilionPasvikin","repo":"VermilionPasvikin/dsh-coderag","url":"https://github.com/VermilionPasvikin/dsh-coderag","category":"workflow","description":{"zh":"dsh-coderag 是一个以 MCP 服务器形态提供的代码库检索引擎：让 DeepSeek Harness（DSH）的 Agent 能按语义与结构找到代码，而不是靠猜关键词反复 grep。","en":"dsh-coderag 是一个以 MCP 服务器形态提供的代码库检索引擎：让 DeepSeek Harness（DSH）的 Agent 能按语义与结构找到代码，而不是靠猜关键词反复 grep。"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:26:27Z","updatedAt":"2026-09-25T07:26:02Z","createdAt":"2026-09-17T12:51:25Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-coderag","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"620767df8e575bb37d88259c3dbc280bc5dee9f2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:03:06.917Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:03:06.917Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"vermilionpasvikin/dsh-coderag@620767df8e575bb37d88259c3dbc280bc5dee9f2#scan-2","versionCount":1,"latestCommit":"620767df8e575bb37d88259c3dbc280bc5dee9f2","latestCheckedAt":"2026-09-25T12:03:06.917Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zlqd123/dsh-composer-keys","order":219,"name":"dsh-composer-keys","owner":"zlqd123","repo":"zlqd123/dsh-composer-keys","url":"https://github.com/zlqd123/dsh-composer-keys","category":"ui","description":{"zh":"为 DeepSeek Harness Web 聊天输入框自定义「发送」与「换行」键位：任意组合键自由分配、双预设一键切换、用户设置文档持久化、深浅色主题自适应。AI 生成的社区插件（AI-generated）。","en":"为 DeepSeek Harness Web 聊天输入框自定义「发送」与「换行」键位：任意组合键自由分配、双预设一键切换、用户设置文档持久化、深浅色主题自适应。AI 生成的社区插件（AI-generated）。"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:07:52Z","updatedAt":"2026-09-25T07:06:02Z","createdAt":"2026-08-24T04:48:05Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-composer-keys","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"eafbe29fa8cc1f8156395032ac6a04bcf221a274","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:03:13.746Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:03:13.746Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"zlqd123/dsh-composer-keys@eafbe29fa8cc1f8156395032ac6a04bcf221a274#scan-2","versionCount":1,"latestCommit":"eafbe29fa8cc1f8156395032ac6a04bcf221a274","latestCheckedAt":"2026-09-25T12:03:13.746Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"omsociety/dsh-fishpai","order":220,"name":"dsh-fishpai","owner":"OMSociety","repo":"OMSociety/dsh-fishpai","url":"https://github.com/OMSociety/dsh-fishpai","category":"ui","description":{"zh":"鱼排 · 微信公众号排版工作台，长在 DeepSeek Harness 的右侧栏里。 人在侧栏改字、加批注与占位；模型用块级 diff 看懂你改了什么、想要什么","en":"鱼排 · 微信公众号排版工作台，长在 DeepSeek Harness 的右侧栏里。 人在侧栏改字、加批注与占位；模型用块级 diff 看懂你改了什么、想要什么"},"added":"2026-09-25","curated":false,"topic":true,"stars":3,"forks":1,"openIssues":0,"watchers":3,"pushedAt":"2026-09-25T07:10:28Z","updatedAt":"2026-09-25T07:10:32Z","createdAt":"2026-09-14T09:34:51Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-fishpai","version":"1.0.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","plugin/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7871d0600c4072debb7c9cbc17dfd5bf379c5ab7","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:34.684Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:34.684Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","plugin/index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"omsociety/dsh-fishpai@7871d0600c4072debb7c9cbc17dfd5bf379c5ab7#scan-2","versionCount":1,"latestCommit":"7871d0600c4072debb7c9cbc17dfd5bf379c5ab7","latestCheckedAt":"2026-09-25T12:01:34.684Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"teow9/dsh-isolation-pod","order":221,"name":"dsh-isolation-pod","owner":"Teow9","repo":"Teow9/dsh-isolation-pod","url":"https://github.com/Teow9/dsh-isolation-pod","category":"session","description":{"zh":"隔离舱：在 DSH 主会话之外运行受沙箱约束的隔离任务；主会话默认完全无感，结果返回与文件导出都要手动确认。","en":"隔离舱：在 DSH 主会话之外运行受沙箱约束的隔离任务；主会话默认完全无感，结果返回与文件导出都要手动确认。"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:25:39Z","updatedAt":"2026-09-25T07:25:43Z","createdAt":"2026-09-14T15:57:07Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-isolation-pod","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"66452d55f62b88490b578150f0ac88b670a98f90","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:30.931Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:30.931Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"teow9/dsh-isolation-pod@66452d55f62b88490b578150f0ac88b670a98f90#scan-2","versionCount":1,"latestCommit":"66452d55f62b88490b578150f0ac88b670a98f90","latestCheckedAt":"2026-09-25T12:01:30.931Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xiaoshenming/dsh-session-surgeon","order":222,"name":"dsh-session-surgeon","owner":"xiaoshenming","repo":"xiaoshenming/dsh-session-surgeon","url":"https://github.com/xiaoshenming/dsh-session-surgeon","category":"session","description":{"zh":"Repair DeepSeek Harness sessions that refuse to load. 修好打不开的 DSH 会话文件。","en":"Repair DeepSeek Harness sessions that refuse to load. 修好打不开的 DSH 会话文件。"},"added":"2026-09-25","curated":false,"topic":true,"stars":8,"forks":2,"openIssues":0,"watchers":8,"pushedAt":"2026-09-24T18:11:06Z","updatedAt":"2026-09-24T18:11:11Z","createdAt":"2026-08-18T03:40:13Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/xiaoshenming/dsh-session-surgeon","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-session-surgeon","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","plugin/index.mjs","plugin/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a54a1468e1b198efdbc0caf15995e0c9ab10b14e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:32.407Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T00:01:32.407Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["plugin/client.js"]}],"filesInspected":["package.json","plugin/index.mjs","plugin/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力"]},"passport":{"evidenceId":"xiaoshenming/dsh-session-surgeon@a54a1468e1b198efdbc0caf15995e0c9ab10b14e#scan-2","versionCount":1,"latestCommit":"a54a1468e1b198efdbc0caf15995e0c9ab10b14e","latestCheckedAt":"2026-09-25T00:01:32.407Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"john-walks-slow/dsh-simulated-life","order":223,"name":"dsh-simulated-life","owner":"john-walks-slow","repo":"john-walks-slow/dsh-simulated-life","url":"https://github.com/john-walks-slow/dsh-simulated-life","category":"workflow","description":{"zh":"Simulated life context for DeepSeek Harness: reads .life/<date> events into agent context with dedup, and a life_react tool to write feelings, thoughts and actions back for world-evolution workflows.","en":"Simulated life context for DeepSeek Harness: reads .life/<date> events into agent context with dedup, and a life_react tool to write feelings, thoughts and actions back for world-evolution workflows."},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:10:28Z","updatedAt":"2026-09-25T07:10:33Z","createdAt":"2026-09-17T08:18:07Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-simulated-life","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","dist/src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"017efd32ab5407be67f14c446e633fe52cf0588b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:35.325Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:35.325Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"john-walks-slow/dsh-simulated-life@017efd32ab5407be67f14c446e633fe52cf0588b#scan-2","versionCount":1,"latestCommit":"017efd32ab5407be67f14c446e633fe52cf0588b","latestCheckedAt":"2026-09-25T12:01:35.325Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"lijiawei255/dsh-status-chime","order":224,"name":"dsh-status-chime","owner":"lijiawei255","repo":"lijiawei255/dsh-status-chime","url":"https://github.com/lijiawei255/dsh-status-chime","category":"tools","description":{"zh":"Spoken status alerts for DeepSeek Harness where clip LENGTH encodes urgency: a 2s approval chime vs an 8s failure announcement. Eight scenes, zero third-party dependencies on Windows 10/11. · DSH 语音状态提示：用时长编码紧急度，零第三方依赖。","en":"Spoken status alerts for DeepSeek Harness where clip LENGTH encodes urgency: a 2s approval chime vs an 8s failure announcement. Eight scenes, zero third-party dependencies on Windows 10/11. · DSH 语音状态提示：用时长编码紧急度，零第三方依赖。"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:13:43Z","updatedAt":"2026-09-25T07:13:36Z","createdAt":"2026-09-20T20:53:34Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-status-chime","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8bd59306972aec5537997d955d72627b618b8d0e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:34.271Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:34.271Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"lijiawei255/dsh-status-chime@8bd59306972aec5537997d955d72627b618b8d0e#scan-2","versionCount":1,"latestCommit":"8bd59306972aec5537997d955d72627b618b8d0e","latestCheckedAt":"2026-09-25T12:01:34.271Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"shuiiiiimu/dsh-stock-portfolio","order":225,"name":"dsh-stock-portfolio","owner":"shuiiiiimu","repo":"shuiiiiimu/dsh-stock-portfolio","url":"https://github.com/shuiiiiimu/dsh-stock-portfolio","category":"tools","description":{"zh":"DeepSeek Harness 中管理股票持仓的插件","en":"DeepSeek Harness 中管理股票持仓的插件"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:21:31Z","updatedAt":"2026-09-25T07:21:35Z","createdAt":"2026-09-11T15:06:07Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-stock-portfolio","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"286e73f75c0e85a323d6ffe5f990c2ed9632e9ce","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:33.550Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:33.550Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"shuiiiiimu/dsh-stock-portfolio@286e73f75c0e85a323d6ffe5f990c2ed9632e9ce#scan-2","versionCount":1,"latestCommit":"286e73f75c0e85a323d6ffe5f990c2ed9632e9ce","latestCheckedAt":"2026-09-25T12:01:33.550Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"xswt442-cmd/dsh-unsandboxed-winbash","order":226,"name":"dsh-unsandboxed-winbash","owner":"xswt442-cmd","repo":"xswt442-cmd/dsh-unsandboxed-winbash","url":"https://github.com/xswt442-cmd/dsh-unsandboxed-winbash","category":"dev","description":{"zh":"让 dsh 在 Windows 上使用用户自安装的 Git Bash，并绕过其沙箱限制 | Enable dsh to use a user-installed Git Bash on Windows by bypassing its sandbox restrictions.","en":"让 dsh 在 Windows 上使用用户自安装的 Git Bash，并绕过其沙箱限制 | Enable dsh to use a user-installed Git Bash on Windows by bypassing its sandbox restrictions."},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T18:08:30Z","updatedAt":"2026-09-24T18:08:24Z","createdAt":"2026-09-17T16:54:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-unsandboxed-winbash","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c8bf91b4e395ecbc8ffa3f80153a181b3e146858","installCommand":"dsh plugin --profile web add github:xswt442-cmd/dsh-unsandboxed-winbash#c8bf91b4e395ecbc8ffa3f80153a181b3e146858","discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T00:01:37.639Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-25T00:01:37.639Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"xswt442-cmd/dsh-unsandboxed-winbash@c8bf91b4e395ecbc8ffa3f80153a181b3e146858#scan-2","versionCount":1,"latestCommit":"c8bf91b4e395ecbc8ffa3f80153a181b3e146858","latestCheckedAt":"2026-09-25T00:01:37.639Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"qikairo7/dsh-usage-panel","order":227,"name":"dsh-usage-panel","owner":"qikairo7","repo":"qikairo7/dsh-usage-panel","url":"https://github.com/qikairo7/dsh-usage-panel","category":"ui","description":{"zh":"Session-level token usage & cost panel plugin for DeepSeek Harness (DSH)","en":"Session-level token usage & cost panel plugin for DeepSeek Harness (DSH)"},"added":"2026-09-25","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-25T07:25:14Z","updatedAt":"2026-09-25T07:25:18Z","createdAt":"2026-09-24T23:07:13Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-usage-panel","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1ae639261c853dc404c95b87a90f0b601280b0da","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-25","lastSeenAt":"2026-09-25T12:01:30.932Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-25T12:01:30.932Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"qikairo7/dsh-usage-panel@1ae639261c853dc404c95b87a90f0b601280b0da#scan-2","versionCount":1,"latestCommit":"1ae639261c853dc404c95b87a90f0b601280b0da","latestCheckedAt":"2026-09-25T12:01:30.932Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"dingtalk-real-ai/dsh-dingtalk","order":228,"name":"@dingtalk-real-ai/dsh-dingtalk","owner":"DingTalk-Real-AI","repo":"DingTalk-Real-AI/dsh-dingtalk","url":"https://github.com/DingTalk-Real-AI/dsh-dingtalk","category":"tools","description":{"zh":"Official DingTalk connector for DeepSeek Harness","en":"Official DingTalk connector for DeepSeek Harness"},"added":"2026-09-24","curated":false,"topic":true,"stars":17,"forks":2,"openIssues":9,"watchers":17,"pushedAt":"2026-09-24T11:05:15Z","updatedAt":"2026-09-24T11:01:56Z","createdAt":"2026-08-20T11:59:51Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dingtalk-real-ai/dsh-dingtalk","version":"0.0.0-development","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f3bf73785978d37ac8c97610df4a5f4f04c831d3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:54.611Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:54.611Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"dingtalk-real-ai/dsh-dingtalk@f3bf73785978d37ac8c97610df4a5f4f04c831d3#scan-2","versionCount":1,"latestCommit":"f3bf73785978d37ac8c97610df4a5f4f04c831d3","latestCheckedAt":"2026-09-24T12:01:54.611Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"islibaodong/dsh-login","order":229,"name":"@islibaodong/dsh-login","owner":"islibaodong","repo":"islibaodong/dsh-login","url":"https://github.com/islibaodong/dsh-login","category":"tools","description":{"zh":"Multi-user login gateway plugin for the DeepSeek Harness Web GUI: login wall, per-user conversation isolation, in-GUI user management","en":"Multi-user login gateway plugin for the DeepSeek Harness Web GUI: login wall, per-user conversation isolation, in-GUI user management"},"added":"2026-09-24","curated":false,"topic":true,"stars":8,"forks":3,"openIssues":0,"watchers":8,"pushedAt":"2026-09-24T11:07:30Z","updatedAt":"2026-09-24T11:07:35Z","createdAt":"2026-08-17T08:08:53Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@islibaodong/dsh-login","version":"0.2.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"781a1de7095525184db5bcca9f3aa54192cd7bfc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:50.774Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:50.774Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dist/index.js","dist/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dist/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dist/index.js","cordis.patch.yml"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["dist/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["dist/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["dist/index.js"]}],"filesInspected":["package.json","dist/index.js","dist/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"islibaodong/dsh-login@781a1de7095525184db5bcca9f3aa54192cd7bfc#scan-2","versionCount":1,"latestCommit":"781a1de7095525184db5bcca9f3aa54192cd7bfc","latestCheckedAt":"2026-09-24T12:01:50.774Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"jackguo0310/dsh-cost","order":230,"name":"@jackguo0310/dsh-cost","owner":"JackGuo0310","repo":"JackGuo0310/dsh-cost","url":"https://github.com/JackGuo0310/dsh-cost","category":"tools","description":{"zh":"@jackguo0310/dsh-cost","en":"@jackguo0310/dsh-cost"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:16:59Z","updatedAt":"2026-09-23T06:17:03Z","createdAt":"2026-09-20T15:02:41Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@jackguo0310/dsh-cost","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e231ef94df0dccabd57c9c07a59a5b1138a4801c","installCommand":"dsh plugin --profile web add github:JackGuo0310/dsh-cost#e231ef94df0dccabd57c9c07a59a5b1138a4801c","discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:35.029Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-24T00:01:35.029Z","findings":[],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"jackguo0310/dsh-cost@e231ef94df0dccabd57c9c07a59a5b1138a4801c#scan-2","versionCount":1,"latestCommit":"e231ef94df0dccabd57c9c07a59a5b1138a4801c","latestCheckedAt":"2026-09-24T00:01:35.029Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zhy5/dsh-wx-bridge","order":231,"name":"@zmainer/dsh-wx-bridge","owner":"zhy5","repo":"zhy5/dsh-wx-bridge","url":"https://github.com/zhy5/dsh-wx-bridge","category":"ui","description":{"zh":"DSH plugin: connect WeChat (official iLink/ClawBot) to DeepSeek Harness — live status settings panel + bundled bridge/keeper kernel","en":"DSH plugin: connect WeChat (official iLink/ClawBot) to DeepSeek Harness — live status settings panel + bundled bridge/keeper kernel"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T11:08:37Z","updatedAt":"2026-09-24T11:08:39Z","createdAt":"2026-09-21T03:37:46Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@zmainer/dsh-wx-bridge","version":"1.1.7","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4ef650cf1e88aea9c202701a65219f4fd306c282","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:49.686Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:49.686Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"zhy5/dsh-wx-bridge@4ef650cf1e88aea9c202701a65219f4fd306c282#scan-2","versionCount":1,"latestCommit":"4ef650cf1e88aea9c202701a65219f4fd306c282","latestCheckedAt":"2026-09-24T12:01:49.686Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"awoodwhale/dsh-agent-persona","order":232,"name":"dsh-agent-persona","owner":"Awoodwhale","repo":"Awoodwhale/dsh-agent-persona","url":"https://github.com/Awoodwhale/dsh-agent-persona","category":"session","description":{"zh":"Workspace personas for DeepSeek Harness (DSH): many system-prompt personas, each scoped by workspace path or session id, managed from the Web settings page (Apache-2.0)","en":"Workspace personas for DeepSeek Harness (DSH): many system-prompt personas, each scoped by workspace path or session id, managed from the Web settings page (Apache-2.0)"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:23:04Z","updatedAt":"2026-09-23T06:23:06Z","createdAt":"2026-09-20T08:05:26Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-agent-persona","version":"0.1.3","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a4ceddb2186552a1aeade65aec59616f7cf03d20","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:31.095Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:31.095Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"awoodwhale/dsh-agent-persona@a4ceddb2186552a1aeade65aec59616f7cf03d20#scan-2","versionCount":1,"latestCommit":"a4ceddb2186552a1aeade65aec59616f7cf03d20","latestCheckedAt":"2026-09-24T00:01:31.095Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"protoctistmoses143/dsh-docs","order":233,"name":"dsh-doc","owner":"protoctistmoses143","repo":"protoctistmoses143/dsh-docs","url":"https://github.com/protoctistmoses143/dsh-docs","category":"tools","description":{"zh":"Convert PDFs, Office docs, scanned images, and more to clean Markdown, JSON, or text locally with offline OCR—no servers, no API keys, fully private.","en":"Convert PDFs, Office docs, scanned images, and more to clean Markdown, JSON, or text locally with offline OCR—no servers, no API keys, fully private."},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T11:10:41Z","updatedAt":"2026-09-24T11:10:46Z","createdAt":"2026-08-15T23:08:15Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-doc","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3a174fb6cb80e1f4ac5fe54e4ad73d2749438e2f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:45.937Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:45.937Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"protoctistmoses143/dsh-docs@3a174fb6cb80e1f4ac5fe54e4ad73d2749438e2f#scan-2","versionCount":1,"latestCommit":"3a174fb6cb80e1f4ac5fe54e4ad73d2749438e2f","latestCheckedAt":"2026-09-24T12:01:45.937Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"skepsun/dsh-engram","order":234,"name":"dsh-engram","owner":"skepsun","repo":"skepsun/dsh-engram","url":"https://github.com/skepsun/dsh-engram","category":"session","description":{"zh":"极简·省 token 的 DSH 长期记忆插件：零 LLM 自动捕获、符号索引渐进披露、ESR 证据闭环。Minimalist token-saving memory for DeepSeek Harness: zero-LLM auto-capture, symbolic index, ESR-lite evidence closure.","en":"极简·省 token 的 DSH 长期记忆插件：零 LLM 自动捕获、符号索引渐进披露、ESR 证据闭环。Minimalist token-saving memory for DeepSeek Harness: zero-LLM auto-capture, symbolic index, ESR-lite evidence closure."},"added":"2026-09-24","curated":false,"topic":true,"stars":6,"forks":2,"openIssues":4,"watchers":6,"pushedAt":"2026-09-23T06:25:48Z","updatedAt":"2026-09-23T06:26:24Z","createdAt":"2026-08-18T09:46:09Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-engram","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cfef54ce1654bd0e107526d05a1bd8fa3644dc3c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:29.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:29.438Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"skepsun/dsh-engram@cfef54ce1654bd0e107526d05a1bd8fa3644dc3c#scan-2","versionCount":1,"latestCommit":"cfef54ce1654bd0e107526d05a1bd8fa3644dc3c","latestCheckedAt":"2026-09-24T00:01:29.438Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xixixiao2007/dsh-mail-digest","order":235,"name":"dsh-mail-digest","owner":"Xixixiao2007","repo":"Xixixiao2007/dsh-mail-digest","url":"https://github.com/Xixixiao2007/dsh-mail-digest","category":"tools","description":{"zh":"把每轮回答压成一条详略得当的摘要发到邮箱，并支持邮件回信作答或续接对话（DeepSeek Harness 插件）","en":"把每轮回答压成一条详略得当的摘要发到邮箱，并支持邮件回信作答或续接对话（DeepSeek Harness 插件）"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T11:10:25Z","updatedAt":"2026-09-24T11:10:29Z","createdAt":"2026-09-23T04:34:04Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-mail-digest","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"79f2eee93651b026293105a707e079e5e3066707","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:47.047Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:47.047Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"xixixiao2007/dsh-mail-digest@79f2eee93651b026293105a707e079e5e3066707#scan-2","versionCount":1,"latestCommit":"79f2eee93651b026293105a707e079e5e3066707","latestCheckedAt":"2026-09-24T12:01:47.047Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"duhu2000/dsh-mcp-connector","order":236,"name":"dsh-mcp-connector","owner":"duhu2000","repo":"duhu2000/dsh-mcp-connector","url":"https://github.com/duhu2000/dsh-mcp-connector","category":"session","description":{"zh":"DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.","en":"DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import."},"added":"2026-09-24","curated":false,"topic":true,"stars":30,"forks":5,"openIssues":4,"watchers":30,"pushedAt":"2026-09-23T06:18:20Z","updatedAt":"2026-09-23T06:18:24Z","createdAt":"2026-08-20T15:14:05Z","license":"MIT","language":"JavaScript","homepage":"https://www.npmjs.com/package/dsh-mcp-connector","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mcp-connector","version":"0.2.58","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4337955b118c5024e1a3618b5441f69c2affb566","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:34.738Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:34.738Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"duhu2000/dsh-mcp-connector@4337955b118c5024e1a3618b5441f69c2affb566#scan-2","versionCount":1,"latestCommit":"4337955b118c5024e1a3618b5441f69c2affb566","latestCheckedAt":"2026-09-24T00:01:34.738Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"andrietteprotective835/dsh-mcp-lens","order":237,"name":"dsh-mcp-lens","owner":"Andrietteprotective835","repo":"Andrietteprotective835/dsh-mcp-lens","url":"https://github.com/Andrietteprotective835/dsh-mcp-lens","category":"tools","description":{"zh":"Shrink massive MCP catalogs to two tools, letting DeepSeek Harness search and call 1,000+ remote APIs efficiently.","en":"Shrink massive MCP catalogs to two tools, letting DeepSeek Harness search and call 1,000+ remote APIs efficiently."},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-24T11:10:37Z","updatedAt":"2026-09-24T11:10:41Z","createdAt":"2026-08-16T00:01:58Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-mcp-lens","version":"0.1.0-rc.9","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"153c6cc238a915696f0f0de4749395756aad6acd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:46.005Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:46.005Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"andrietteprotective835/dsh-mcp-lens@153c6cc238a915696f0f0de4749395756aad6acd#scan-2","versionCount":1,"latestCommit":"153c6cc238a915696f0f0de4749395756aad6acd","latestCheckedAt":"2026-09-24T12:01:46.005Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"chromoany/dsh-notify-me","order":238,"name":"dsh-notify-me","owner":"chromoany","repo":"chromoany/dsh-notify-me","url":"https://github.com/chromoany/dsh-notify-me","category":"notify","description":{"zh":"DSH 桌面消息提醒插件 / desktop notification and message alerts for DeepSeek Harness web：需要你操作（可操作提醒）与回复完成提醒，系统通知+提示音+标签页标题，设置页开关 + 中英通知语言","en":"DSH 桌面消息提醒插件 / desktop notification and message alerts for DeepSeek Harness web：需要你操作（可操作提醒）与回复完成提醒，系统通知+提示音+标签页标题，设置页开关 + 中英通知语言"},"added":"2026-09-24","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":4,"watchers":4,"pushedAt":"2026-09-24T11:06:44Z","updatedAt":"2026-09-24T11:06:45Z","createdAt":"2026-09-08T13:46:12Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-notify-me","version":"1.1.8","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"535a16c454d15fb5e99d7f79bbb0abac739996c8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T12:01:50.947Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:50.947Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"chromoany/dsh-notify-me@535a16c454d15fb5e99d7f79bbb0abac739996c8#scan-2","versionCount":1,"latestCommit":"535a16c454d15fb5e99d7f79bbb0abac739996c8","latestCheckedAt":"2026-09-24T12:01:50.947Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"luckvd/dsh-taskflow","order":239,"name":"dsh-taskflow","owner":"LuckVd","repo":"LuckVd/dsh-taskflow","url":"https://github.com/LuckVd/dsh-taskflow","category":"workflow","description":{"zh":"AI 合同式任务看板 · DeepSeek Harness Web 插件:AI 拆解/实现/举证,人工验收,打回迭代,状态留痕","en":"AI 合同式任务看板 · DeepSeek Harness Web 插件:AI 拆解/实现/举证,人工验收,打回迭代,状态留痕"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:10:53Z","updatedAt":"2026-09-23T06:10:57Z","createdAt":"2026-09-09T09:38:55Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-taskflow","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/host/index.js","dist/client.dsh.js"],"invalidDeclaredPaths":[]},"screenedCommit":"08ee0cf185b9cc91510bbf3534c88a58df068af0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:38.993Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:38.993Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"luckvd/dsh-taskflow@08ee0cf185b9cc91510bbf3534c88a58df068af0#scan-2","versionCount":1,"latestCommit":"08ee0cf185b9cc91510bbf3534c88a58df068af0","latestCheckedAt":"2026-09-24T00:01:38.993Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"mrtomtao/dsh-token-billing","order":240,"name":"dsh-token-billing","owner":"MrTomTao","repo":"MrTomTao/dsh-token-billing","url":"https://github.com/MrTomTao/dsh-token-billing","category":"session","description":{"zh":"给DeepSeek Harness Web GUI用的会话token计费插件：在会话标题栏显示本次会话的实时花费，点开可以看输入 / 缓存命中 / 缓存写入 / 输出 / 推理的分项、按模型的账单，以及当前用的是高峰还是空闲时段价。","en":"给DeepSeek Harness Web GUI用的会话token计费插件：在会话标题栏显示本次会话的实时花费，点开可以看输入 / 缓存命中 / 缓存写入 / 输出 / 推理的分项、按模型的账单，以及当前用的是高峰还是空闲时段价。"},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:12:06Z","updatedAt":"2026-09-23T05:58:16Z","createdAt":"2026-09-14T08:42:55Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-token-billing","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5c1f6adad408d89bd57c8c997cf1b4651730c351","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:39.361Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:39.361Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"mrtomtao/dsh-token-billing@5c1f6adad408d89bd57c8c997cf1b4651730c351#scan-2","versionCount":1,"latestCommit":"5c1f6adad408d89bd57c8c997cf1b4651730c351","latestCheckedAt":"2026-09-24T00:01:39.361Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"sodazheng/dsh-totp","order":241,"name":"dsh-totp","owner":"SodaZheng","repo":"SodaZheng/dsh-totp","url":"https://github.com/SodaZheng/dsh-totp","category":"tools","description":{"zh":"为 DeepSeek Harness 加一道由你掌控的访问验证。An access-verification step for DeepSeek Harness, under your control.","en":"为 DeepSeek Harness 加一道由你掌控的访问验证。An access-verification step for DeepSeek Harness, under your control."},"added":"2026-09-24","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:21:23Z","updatedAt":"2026-09-23T06:21:27Z","createdAt":"2026-09-09T09:36:51Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-totp","version":"0.0.4","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","src/index.js","src/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"80f3067c9075fe4bf8e5c3201a1c5d9fd28a3332","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-24","lastSeenAt":"2026-09-24T00:01:33.817Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:33.817Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","src/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证"]},"passport":{"evidenceId":"sodazheng/dsh-totp@80f3067c9075fe4bf8e5c3201a1c5d9fd28a3332#scan-2","versionCount":1,"latestCommit":"80f3067c9075fe4bf8e5c3201a1c5d9fd28a3332","latestCheckedAt":"2026-09-24T00:01:33.817Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"shawnoy/dsh-tavily","order":242,"name":"@0x427567/dsh-tavily","owner":"ShawnOY","repo":"ShawnOY/dsh-tavily","url":"https://github.com/ShawnOY/dsh-tavily","category":"tools","description":{"zh":"Tavily-backed web search for the DeepSeek Harness web seam (ctx.web): keyless first, with a visible fallback to your API key.","en":"Tavily-backed web search for the DeepSeek Harness web seam (ctx.web): keyless first, with a visible fallback to your API key."},"added":"2026-09-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-23T06:13:20Z","updatedAt":"2026-09-23T06:13:24Z","createdAt":"2026-09-22T08:08:38Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@0x427567/dsh-tavily","version":"0.2.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e81df99444fc06f490b2543cc9e46422987d057f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-24T00:01:35.974Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T00:01:35.974Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js","client.js","cordis.patch.yml"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"shawnoy/dsh-tavily@e81df99444fc06f490b2543cc9e46422987d057f#scan-2","versionCount":2,"latestCommit":"e81df99444fc06f490b2543cc9e46422987d057f","latestCheckedAt":"2026-09-24T00:01:35.974Z","diffSeverity":"low","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-lanmode","order":243,"name":"@goodandready/dsh-lanmode","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-lanmode","url":"https://github.com/GooDAnDReaDY/dsh-lanmode","category":"tools","description":{"zh":"Mobile gateway and secure local network access for DeepSeek Harness WebUI","en":"Mobile gateway and secure local network access for DeepSeek Harness WebUI"},"added":"2026-09-23","curated":false,"topic":true,"stars":5,"forks":1,"openIssues":0,"watchers":5,"pushedAt":"2026-09-22T10:26:45Z","updatedAt":"2026-09-22T10:26:42Z","createdAt":"2026-08-20T16:33:19Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-lanmode","version":"0.8.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"54d8e7fde11f2d9e132591845052ab975abfd1ed","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T00:01:54.509Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:01:54.509Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["lib/index.js","cordis.patch.yml"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证","发现遥测或分析服务线索"]},"passport":{"evidenceId":"goodandready/dsh-lanmode@54d8e7fde11f2d9e132591845052ab975abfd1ed#scan-2","versionCount":1,"latestCommit":"54d8e7fde11f2d9e132591845052ab975abfd1ed","latestCheckedAt":"2026-09-23T00:01:54.509Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"azzygoatcoder/agent-useful-skills","order":244,"name":"agent-useful-skills","owner":"Azzygoatcoder","repo":"Azzygoatcoder/agent-useful-skills","url":"https://github.com/Azzygoatcoder/agent-useful-skills","category":"workflow","description":{"zh":"模块化 AI 科研/工程技能 monorepo（DeepSeek Harness / Claude Code 通用）— plugins/ + skills/ + bin 脚本 + LaTeX 模板，验证环驱动","en":"模块化 AI 科研/工程技能 monorepo（DeepSeek Harness / Claude Code 通用）— plugins/ + skills/ + bin 脚本 + LaTeX 模板，验证环驱动"},"added":"2026-09-23","curated":false,"topic":true,"stars":9,"forks":0,"openIssues":0,"watchers":9,"pushedAt":"2026-09-22T10:22:41Z","updatedAt":"2026-09-22T10:22:46Z","createdAt":"2026-06-17T14:39:40Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"agent-useful-skills","version":"1.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"3cb7e62f35848f235238b95b1de630ab7900973d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T00:02:00.004Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:02:00.004Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"azzygoatcoder/agent-useful-skills@3cb7e62f35848f235238b95b1de630ab7900973d#scan-2","versionCount":1,"latestCommit":"3cb7e62f35848f235238b95b1de630ab7900973d","latestCheckedAt":"2026-09-23T00:02:00.004Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"jackylong1987/dsh-long-plugins","order":245,"name":"dsh-long-plugins","owner":"jackylong1987","repo":"jackylong1987/dsh-long-plugins","url":"https://github.com/jackylong1987/dsh-long-plugins","category":"session","description":{"zh":"DeepSeek Harness (DSH) web plugin: upload manager, workspace output files with preview/edit/maximize, skill docs browser, account balance, and turn-ruler history navigation.","en":"DeepSeek Harness (DSH) web plugin: upload manager, workspace output files with preview/edit/maximize, skill docs browser, account balance, and turn-ruler history navigation."},"added":"2026-09-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T21:12:57Z","updatedAt":"2026-09-22T21:13:03Z","createdAt":"2026-08-17T23:13:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-long-plugins","version":"4.3.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4ba8ae2375b316c40b870332e920d28619c976a6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T12:01:57.283Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T12:01:57.283Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","client/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"jackylong1987/dsh-long-plugins@4ba8ae2375b316c40b870332e920d28619c976a6#scan-2","versionCount":1,"latestCommit":"4ba8ae2375b316c40b870332e920d28619c976a6","latestCheckedAt":"2026-09-23T12:01:57.283Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"geokkjer/dsh-peak","order":246,"name":"dsh-peak","owner":"geokkjer","repo":"geokkjer/dsh-peak","url":"https://github.com/geokkjer/dsh-peak","category":"tools","description":{"zh":"dsh-peak","en":"dsh-peak"},"added":"2026-09-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T10:33:37Z","updatedAt":"2026-09-22T10:33:41Z","createdAt":"2026-08-19T09:57:38Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-peak","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bc7bdb2a9cb4ce9eafba31fbf7e18558229f5be9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T00:01:49.428Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:01:49.428Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"geokkjer/dsh-peak@bc7bdb2a9cb4ce9eafba31fbf7e18558229f5be9#scan-2","versionCount":1,"latestCommit":"bc7bdb2a9cb4ce9eafba31fbf7e18558229f5be9","latestCheckedAt":"2026-09-23T00:01:49.428Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"bbaz123/dsh-confirmation-resolution","order":247,"name":"dsh-plugin-confirmation-resolution","owner":"bbaz123","repo":"bbaz123/dsh-confirmation-resolution","url":"https://github.com/bbaz123/dsh-confirmation-resolution","category":"tools","description":{"zh":"DeepSeek Harness plugin: a code-level guard that resolves post-task confirmation items by weighing output quality against real user impact.","en":"DeepSeek Harness plugin: a code-level guard that resolves post-task confirmation items by weighing output quality against real user impact."},"added":"2026-09-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T10:27:05Z","updatedAt":"2026-09-22T10:27:09Z","createdAt":"2026-09-20T13:10:35Z","license":"Apache-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-plugin-confirmation-resolution","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d7adcbb9c1617d194e6cfabd5e426eb116079ac6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T00:01:54.383Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:01:54.383Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"bbaz123/dsh-confirmation-resolution@d7adcbb9c1617d194e6cfabd5e426eb116079ac6#scan-2","versionCount":1,"latestCommit":"d7adcbb9c1617d194e6cfabd5e426eb116079ac6","latestCheckedAt":"2026-09-23T00:01:54.383Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"liu-bot24/dsh-trace-insight","order":248,"name":"dsh-plugin-trace-insight","owner":"Liu-Bot24","repo":"Liu-Bot24/dsh-trace-insight","url":"https://github.com/Liu-Bot24/dsh-trace-insight","category":"workflow","description":{"zh":"DeepSeek Harness（DSH）只读执行轨迹复盘插件，支持规则分析、独立模型解读、证据定位、任务概览与运行对比。","en":"DeepSeek Harness（DSH）只读执行轨迹复盘插件，支持规则分析、独立模型解读、证据定位、任务概览与运行对比。"},"added":"2026-09-23","curated":false,"topic":true,"stars":5,"forks":0,"openIssues":0,"watchers":5,"pushedAt":"2026-09-22T21:31:54Z","updatedAt":"2026-09-22T21:31:59Z","createdAt":"2026-08-18T02:23:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-trace-insight","version":"1.3.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"10e243f59d1f8c75712bec6d6eb9214920eb4c42","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T12:01:56.657Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T12:01:56.657Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["client.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"liu-bot24/dsh-trace-insight@10e243f59d1f8c75712bec6d6eb9214920eb4c42#scan-2","versionCount":1,"latestCommit":"10e243f59d1f8c75712bec6d6eb9214920eb4c42","latestCheckedAt":"2026-09-23T12:01:56.657Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"marcosmmjr2023/dsh-h-v1","order":249,"name":"freedsh","owner":"marcosmmjr2023","repo":"marcosmmjr2023/dsh-h-v1","url":"https://github.com/marcosmmjr2023/dsh-h-v1","category":"dev","description":{"zh":"FreeDSH — free-first multi-model routing, safe core updates and pt-BR/Windows support for DeepSeek Harness. Installable as a DSH bundle (dsh plugin add). Unofficial project.","en":"FreeDSH — free-first multi-model routing, safe core updates and pt-BR/Windows support for DeepSeek Harness. Installable as a DSH bundle (dsh plugin add). Unofficial project."},"added":"2026-09-23","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":7,"watchers":2,"pushedAt":"2026-09-22T10:30:11Z","updatedAt":"2026-09-22T10:30:13Z","createdAt":"2026-09-05T11:17:07Z","license":"MIT","language":"JavaScript","homepage":"https://marcosmmjr2023.github.io/dsh-h-v1/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"freedsh","version":"0.2.125","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.bundle.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"0bf0c85ce15216f23449f88ac22cdfc8b8f3d9dc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-23","lastSeenAt":"2026-09-23T00:01:50.260Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:01:50.260Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.bundle.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"marcosmmjr2023/dsh-h-v1@0bf0c85ce15216f23449f88ac22cdfc8b8f3d9dc#scan-2","versionCount":1,"latestCommit":"0bf0c85ce15216f23449f88ac22cdfc8b8f3d9dc","latestCheckedAt":"2026-09-23T00:01:50.260Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bojansandhaus/jev-lcm-dsh-compaction","order":250,"name":"@bojansandhaus/jev-lcm-dsh-compaction","owner":"bojansandhaus","repo":"bojansandhaus/jev-lcm-dsh-compaction","url":"https://github.com/bojansandhaus/jev-lcm-dsh-compaction","category":"tools","description":{"zh":"Calibrated Jev ranking before lossless context condensation","en":"Calibrated Jev ranking before lossless context condensation"},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T05:23:14Z","updatedAt":"2026-09-22T05:20:18Z","createdAt":"2026-09-21T05:35:45Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@bojansandhaus/jev-lcm-dsh-compaction","version":"1.0.0-rc.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3dab1862b5bda9d52dc048c88f9ad66bb8b20cad","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:47.494Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:01:47.494Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"bojansandhaus/jev-lcm-dsh-compaction@3dab1862b5bda9d52dc048c88f9ad66bb8b20cad#scan-2","versionCount":1,"latestCommit":"3dab1862b5bda9d52dc048c88f9ad66bb8b20cad","latestCheckedAt":"2026-09-22T12:01:47.494Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"kenz1117/dsh-engram","order":251,"name":"@kenz1117/dsh-engram","owner":"kenz1117","repo":"kenz1117/dsh-engram","url":"https://github.com/kenz1117/dsh-engram","category":"tools","description":{"zh":"@kenz1117/dsh-engram","en":"@kenz1117/dsh-engram"},"added":"2026-09-22","curated":false,"topic":true,"stars":6,"forks":2,"openIssues":0,"watchers":6,"pushedAt":"2026-09-22T05:22:02Z","updatedAt":"2026-09-22T05:22:06Z","createdAt":"2026-09-01T08:00:04Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@kenz1117/dsh-engram","version":"0.7.12","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"edfd704cbeaff4190f1f9abbef9472a9374f7bfb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:48.593Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:01:48.593Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"kenz1117/dsh-engram@edfd704cbeaff4190f1f9abbef9472a9374f7bfb#scan-2","versionCount":1,"latestCommit":"edfd704cbeaff4190f1f9abbef9472a9374f7bfb","latestCheckedAt":"2026-09-22T12:01:48.593Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"cilis/dsh-tauri-launcher","order":252,"name":"@lenorin/dsh-tauri-launcher","owner":"cilis","repo":"cilis/dsh-tauri-launcher","url":"https://github.com/cilis/dsh-tauri-launcher","category":"tools","description":{"zh":"DeepSeek Harness (DSH) Launcher，this is a dsh plugin.","en":"DeepSeek Harness (DSH) Launcher，this is a dsh plugin."},"added":"2026-09-22","curated":false,"topic":true,"stars":2,"forks":1,"openIssues":0,"watchers":2,"pushedAt":"2026-09-21T12:37:03Z","updatedAt":"2026-09-21T12:37:05Z","createdAt":"2026-08-20T11:42:21Z","license":"MIT","language":"Rust","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@lenorin/dsh-tauri-launcher","version":"1.0.11","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"af6fa4bd36bc4586cc7177aea52e05fcc7d4a53c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T00:01:37.462Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T00:01:37.462Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"cilis/dsh-tauri-launcher@af6fa4bd36bc4586cc7177aea52e05fcc7d4a53c#scan-2","versionCount":1,"latestCommit":"af6fa4bd36bc4586cc7177aea52e05fcc7d4a53c","latestCheckedAt":"2026-09-22T00:01:37.462Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"nelsonlongxiang/dsh-prompt-templates","order":253,"name":"@nelsonlongxiang/dsh-prompt-templates","owner":"NelsonLongxiang","repo":"NelsonLongxiang/dsh-prompt-templates","url":"https://github.com/NelsonLongxiang/dsh-prompt-templates","category":"ui","description":{"zh":"Quick prompt templates for DeepSeek Harness: global and per-session templates, a right-side panel, and Python-backed SQLite persistence","en":"Quick prompt templates for DeepSeek Harness: global and per-session templates, a right-side panel, and Python-backed SQLite persistence"},"added":"2026-09-22","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-22T05:13:36Z","updatedAt":"2026-09-22T05:13:42Z","createdAt":"2026-08-19T06:01:03Z","license":null,"language":"TypeScript","homepage":"https://www.npmjs.com/package/@nelsonlongxiang/dsh-prompt-templates","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@nelsonlongxiang/dsh-prompt-templates","version":"0.11.2","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f8afa7c2863533cabaa13733c3ed8f58fea6dcd3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:59.124Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:01:59.124Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"nelsonlongxiang/dsh-prompt-templates@f8afa7c2863533cabaa13733c3ed8f58fea6dcd3#scan-2","versionCount":1,"latestCommit":"f8afa7c2863533cabaa13733c3ed8f58fea6dcd3","latestCheckedAt":"2026-09-22T12:01:59.124Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ywleeo/browser-mcp","order":254,"name":"@ywleeo/dsh-browser-mcp","owner":"ywleeo","repo":"ywleeo/browser-mcp","url":"https://github.com/ywleeo/browser-mcp","category":"tools","description":{"zh":"Local MCP server for reading and interacting with web pages through real Chrome.","en":"Local MCP server for reading and interacting with web pages through real Chrome."},"added":"2026-09-22","curated":false,"topic":true,"stars":6,"forks":0,"openIssues":1,"watchers":6,"pushedAt":"2026-09-22T05:19:39Z","updatedAt":"2026-09-22T05:19:30Z","createdAt":"2026-08-12T11:32:03Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@ywleeo/dsh-browser-mcp","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5a17892ff945265e12d60ed78f5e4d2ccfea1b75","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:51.037Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:01:51.037Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"ywleeo/browser-mcp@5a17892ff945265e12d60ed78f5e4d2ccfea1b75#scan-2","versionCount":1,"latestCommit":"5a17892ff945265e12d60ed78f5e4d2ccfea1b75","latestCheckedAt":"2026-09-22T12:01:51.037Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"skyzhao1223/dsh-agent-token-stats","order":255,"name":"dsh-agent-token-stats","owner":"skyzhao1223","repo":"skyzhao1223/dsh-agent-token-stats","url":"https://github.com/skyzhao1223/dsh-agent-token-stats","category":"ui","description":{"zh":"Cross-agent token usage dashboard for DeepSeek Harness: aggregates local logs of Claude Code, OpenCode, Cursor, DSH and more into a persistent ledger, with cache-hit, cost and drill-down analytics in a sidebar panel. / 跨 Agent 的本地 token 用量看板。","en":"Cross-agent token usage dashboard for DeepSeek Harness: aggregates local logs of Claude Code, OpenCode, Cursor, DSH and more into a persistent ledger, with cache-hit, cost and drill-down analytics in a sidebar panel. / 跨 Agent 的本地 token 用量看板。"},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T05:07:47Z","updatedAt":"2026-09-22T05:07:51Z","createdAt":"2026-09-22T02:17:00Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-agent-token-stats","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1718471502d48169b6139b742a612e236455c7bf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:02:07.926Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:02:07.926Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"skyzhao1223/dsh-agent-token-stats@1718471502d48169b6139b742a612e236455c7bf#scan-2","versionCount":1,"latestCommit":"1718471502d48169b6139b742a612e236455c7bf","latestCheckedAt":"2026-09-22T12:02:07.926Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"wild-river2016/dsh-canvas-xiaohe","order":256,"name":"dsh-canvas-xiaohe","owner":"wild-River2016","repo":"wild-River2016/dsh-canvas-xiaohe","url":"https://github.com/wild-River2016/dsh-canvas-xiaohe","category":"ui","description":{"zh":"DeepSeek Harness 插件 - 小禾画布 AI 创作助手","en":"DeepSeek Harness 插件 - 小禾画布 AI 创作助手"},"added":"2026-09-22","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-21T12:40:51Z","updatedAt":"2026-09-21T12:40:55Z","createdAt":"2026-09-19T02:35:00Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-canvas-xiaohe","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fc027ddad8eea8a0627187d90eb17b0f8a5f3549","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T00:01:31.175Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T00:01:31.175Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.ts"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"wild-river2016/dsh-canvas-xiaohe@fc027ddad8eea8a0627187d90eb17b0f8a5f3549#scan-2","versionCount":1,"latestCommit":"fc027ddad8eea8a0627187d90eb17b0f8a5f3549","latestCheckedAt":"2026-09-22T00:01:31.175Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"betterzflyee/dsh-jev-adapter","order":257,"name":"dsh-jev-adapter","owner":"BetterZflyee","repo":"BetterZflyee/dsh-jev-adapter","url":"https://github.com/BetterZflyee/dsh-jev-adapter","category":"dev","description":{"zh":"Use the Jev (System One) decision-model paradigm with any OpenAI-compatible LLM — no TypeSafe key required. A jev_decide tool for DeepSeek Harness (dsh).","en":"Use the Jev (System One) decision-model paradigm with any OpenAI-compatible LLM — no TypeSafe key required. A jev_decide tool for DeepSeek Harness (dsh)."},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-21T12:37:31Z","updatedAt":"2026-09-21T12:38:22Z","createdAt":"2026-09-21T12:37:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-jev-adapter","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"211feceb88ecdc3ab500906d865a2152697c2a50","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T00:01:34.227Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T00:01:34.227Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"betterzflyee/dsh-jev-adapter@211feceb88ecdc3ab500906d865a2152697c2a50#scan-2","versionCount":1,"latestCommit":"211feceb88ecdc3ab500906d865a2152697c2a50","latestCheckedAt":"2026-09-22T00:01:34.227Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"winter-street/dsh-plugin-agent-budget","order":258,"name":"dsh-plugin-agent-budget","owner":"winter-street","repo":"winter-street/dsh-plugin-agent-budget","url":"https://github.com/winter-street/dsh-plugin-agent-budget","category":"session","description":{"zh":"Durable shared token budgets for DeepSeek Harness agent trees — a fail-closed admission gate plus a replayable usage ledger.","en":"Durable shared token budgets for DeepSeek Harness agent trees — a fail-closed admission gate plus a replayable usage ledger."},"added":"2026-09-22","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-22T05:08:29Z","updatedAt":"2026-09-22T05:08:40Z","createdAt":"2026-08-29T06:54:00Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-agent-budget","version":"0.4.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.cjs"],"invalidDeclaredPaths":[]},"screenedCommit":"28c77462aa20ceb27acc0cec99db0dea11087dbc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:02:01.879Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:02:01.879Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"winter-street/dsh-plugin-agent-budget@28c77462aa20ceb27acc0cec99db0dea11087dbc#scan-2","versionCount":1,"latestCommit":"28c77462aa20ceb27acc0cec99db0dea11087dbc","latestCheckedAt":"2026-09-22T12:02:01.879Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"yuloong07-star/dsh-prompt-system","order":259,"name":"dsh-prompt-system","owner":"yuloong07-star","repo":"yuloong07-star/dsh-prompt-system","url":"https://github.com/yuloong07-star/dsh-prompt-system","category":"session","description":{"zh":"dsh-prompt-system提示词优化系统——根据工作区，当前会话，优化提示词","en":"dsh-prompt-system提示词优化系统——根据工作区，当前会话，优化提示词"},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T05:08:04Z","updatedAt":"2026-09-22T05:07:46Z","createdAt":"2026-08-15T03:03:34Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-prompt-system","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b9e6805a8e35a5dfd5c81563cbd5ac5795f7832d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:02:02.923Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:02:02.923Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"yuloong07-star/dsh-prompt-system@b9e6805a8e35a5dfd5c81563cbd5ac5795f7832d#scan-2","versionCount":1,"latestCommit":"b9e6805a8e35a5dfd5c81563cbd5ac5795f7832d","latestCheckedAt":"2026-09-22T12:02:02.923Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lizhouai/dsh-provider-usage","order":260,"name":"dsh-provider-usage","owner":"lizhouai","repo":"lizhouai/dsh-provider-usage","url":"https://github.com/lizhouai/dsh-provider-usage","category":"dev","description":{"zh":"Live balance & usage for every LLM provider, one glance away — a draggable floating ball for DeepSeek Harness / dsh 插件：可拖动悬浮用量球，一眼看清所有 Provider 余额与用量","en":"Live balance & usage for every LLM provider, one glance away — a draggable floating ball for DeepSeek Harness / dsh 插件：可拖动悬浮用量球，一眼看清所有 Provider 余额与用量"},"added":"2026-09-22","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-09-22T05:10:17Z","updatedAt":"2026-09-22T05:10:18Z","createdAt":"2026-08-18T08:26:05Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-provider-usage","version":"0.3.14","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"151d9beff451b308bebd20323a75c6d103b9b65e","installCommand":"dsh plugin --profile web add github:lizhouai/dsh-provider-usage#151d9beff451b308bebd20323a75c6d103b9b65e","discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:59.924Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-22T12:01:59.924Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"lizhouai/dsh-provider-usage@151d9beff451b308bebd20323a75c6d103b9b65e#scan-2","versionCount":1,"latestCommit":"151d9beff451b308bebd20323a75c6d103b9b65e","latestCheckedAt":"2026-09-22T12:01:59.924Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"olimc2016/dsh-token-meter-panel","order":261,"name":"dsh-token-meter-panel","owner":"olimc2016","repo":"olimc2016/dsh-token-meter-panel","url":"https://github.com/olimc2016/dsh-token-meter-panel","category":"ui","description":{"zh":"DSH（DeepSeek Harness）Token 用量与花费面板插件：今日消费、预算进度、成本构成、缓存命中省下的钱。社区插件，非官方。","en":"DSH（DeepSeek Harness）Token 用量与花费面板插件：今日消费、预算进度、成本构成、缓存命中省下的钱。社区插件，非官方。"},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T05:03:11Z","updatedAt":"2026-09-22T05:03:15Z","createdAt":"2026-09-20T06:39:51Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-token-meter-panel","version":"0.6.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"46ed41a0201e76cb73f6b0d464e3ebb89612b70b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:02:08.197Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:02:08.197Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"olimc2016/dsh-token-meter-panel@46ed41a0201e76cb73f6b0d464e3ebb89612b70b#scan-2","versionCount":2,"latestCommit":"46ed41a0201e76cb73f6b0d464e3ebb89612b70b","latestCheckedAt":"2026-09-22T12:02:08.197Z","diffSeverity":"none","verificationScore":6,"verificationPossible":7}},{"id":"zhucy123/source-code-mgmt","order":262,"name":"source-code-mgmt","owner":"Zhucy123","repo":"Zhucy123/source-code-mgmt","url":"https://github.com/Zhucy123/source-code-mgmt","category":"tools","description":{"zh":"source-code-mgmt","en":"source-code-mgmt"},"added":"2026-09-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-22T05:16:14Z","updatedAt":"2026-09-22T05:16:18Z","createdAt":"2026-08-20T05:48:53Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"source-code-mgmt","version":"1.24.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"07fe6506223371630e1e1864bef688d9dcf26cc7","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-22","lastSeenAt":"2026-09-22T12:01:51.600Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-22T12:01:51.600Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"zhucy123/source-code-mgmt@07fe6506223371630e1e1864bef688d9dcf26cc7#scan-2","versionCount":1,"latestCommit":"07fe6506223371630e1e1864bef688d9dcf26cc7","latestCheckedAt":"2026-09-22T12:01:51.600Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"wee-b/disk-sentinel","order":263,"name":"@dsh-plugin/disk-sentinel","owner":"wee-b","repo":"wee-b/disk-sentinel","url":"https://github.com/wee-b/disk-sentinel","category":"tools","description":{"zh":"DeepSeek Harness disk analysis and safe cleanup plugin for Windows.","en":"DeepSeek Harness disk analysis and safe cleanup plugin for Windows."},"added":"2026-09-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-21T11:07:51Z","updatedAt":"2026-09-21T11:07:55Z","createdAt":"2026-09-09T06:05:04Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-plugin/disk-sentinel","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"887da1a90b4a48632d87ca4f858b7773c2b5c471","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T12:01:22.337Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T12:01:22.337Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"wee-b/disk-sentinel@887da1a90b4a48632d87ca4f858b7773c2b5c471#scan-2","versionCount":1,"latestCommit":"887da1a90b4a48632d87ca4f858b7773c2b5c471","latestCheckedAt":"2026-09-21T12:01:22.337Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"nonamelego/dsh-catppuccin-theme","order":264,"name":"@nonamelego/dsh-catppuccin","owner":"NoNameLeGo","repo":"NoNameLeGo/dsh-catppuccin-theme","url":"https://github.com/NoNameLeGo/dsh-catppuccin-theme","category":"ui","description":{"zh":"DeepSeek Harness Web GUI 的 Catppuccin 主题插件：Latte / Frappé / Macchiato / Mocha 四种主题一键切换，内置可开关的玻璃质感（Glassmorphism）","en":"DeepSeek Harness Web GUI 的 Catppuccin 主题插件：Latte / Frappé / Macchiato / Mocha 四种主题一键切换，内置可开关的玻璃质感（Glassmorphism）"},"added":"2026-09-21","curated":false,"topic":true,"stars":43,"forks":1,"openIssues":0,"watchers":43,"pushedAt":"2026-09-21T06:54:25Z","updatedAt":"2026-09-21T11:24:11Z","createdAt":"2026-08-14T15:11:09Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/@nonamelego/dsh-catppuccin","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@nonamelego/dsh-catppuccin","version":"0.5.5","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"02f0f70a967e537e279569b3fe6f8b727906641e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T12:01:30.179Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T12:01:30.179Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"nonamelego/dsh-catppuccin-theme@02f0f70a967e537e279569b3fe6f8b727906641e#scan-2","versionCount":1,"latestCommit":"02f0f70a967e537e279569b3fe6f8b727906641e","latestCheckedAt":"2026-09-21T12:01:30.179Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"icather/dsh-clean-desktop-shell","order":265,"name":"dsh-clean-desktop-shell","owner":"Icather","repo":"Icather/dsh-clean-desktop-shell","url":"https://github.com/Icather/dsh-clean-desktop-shell","category":"ui","description":{"zh":"DSH 纯净桌面壳：双击像普通软件一样一键启动，后端活性实时监测 + 托盘快捷启停，零视觉改造。Clean desktop shell for DSH — one-click launch like a normal app, live backend monitoring with quick tray start/stop, zero visual changes.","en":"DSH 纯净桌面壳：双击像普通软件一样一键启动，后端活性实时监测 + 托盘快捷启停，零视觉改造。Clean desktop shell for DSH — one-click launch like a normal app, live backend monitoring with quick tray start/stop, zero visual changes."},"added":"2026-09-21","curated":false,"topic":true,"stars":6,"forks":3,"openIssues":2,"watchers":6,"pushedAt":"2026-09-20T20:25:42Z","updatedAt":"2026-09-20T20:25:46Z","createdAt":"2026-08-19T23:51:53Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-clean-desktop-shell","version":"0.1.13","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f17ec7322efa0d44beacd5c431e700e7ec5c0203","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:46.739Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:46.739Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"icather/dsh-clean-desktop-shell@f17ec7322efa0d44beacd5c431e700e7ec5c0203#scan-2","versionCount":1,"latestCommit":"f17ec7322efa0d44beacd5c431e700e7ec5c0203","latestCheckedAt":"2026-09-21T00:01:46.739Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"aliww2468/dsh-client-ui-aqua-patched","order":266,"name":"dsh-client-ui-aqua","owner":"Aliww2468","repo":"Aliww2468/dsh-client-ui-aqua-patched","url":"https://github.com/Aliww2468/dsh-client-ui-aqua-patched","category":"ui","description":{"zh":"Unofficial patched fork of the Aqua glassmorphism theme for the DeepSeek Harness web UI, repaired for DSH 0.1.2-rc.1 (upstream 1.3.1 crashes there)","en":"Unofficial patched fork of the Aqua glassmorphism theme for the DeepSeek Harness web UI, repaired for DSH 0.1.2-rc.1 (upstream 1.3.1 crashes there)"},"added":"2026-09-21","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-20T20:37:19Z","updatedAt":"2026-09-20T20:37:22Z","createdAt":"2026-09-20T20:18:07Z","license":"AGPL-3.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-client-ui-aqua","version":"1.3.1-patch.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e3d96e46e3ef0034b1304663ffcd70a87ff70982","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:41.994Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:41.994Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"aliww2468/dsh-client-ui-aqua-patched@e3d96e46e3ef0034b1304663ffcd70a87ff70982#scan-2","versionCount":1,"latestCommit":"e3d96e46e3ef0034b1304663ffcd70a87ff70982","latestCheckedAt":"2026-09-21T00:01:41.994Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"eastmg/dsh-gacha-calendar","order":267,"name":"dsh-gacha-calendar","owner":"EastMG","repo":"EastMG/dsh-gacha-calendar","url":"https://github.com/EastMG/dsh-gacha-calendar","category":"fun","description":{"zh":"DeepSeek Harness 二游卡池/活动排期速查插件：侧边栏按钮 内置 11 款主流二游 可添加自定义游戏","en":"DeepSeek Harness 二游卡池/活动排期速查插件：侧边栏按钮 内置 11 款主流二游 可添加自定义游戏"},"added":"2026-09-21","curated":false,"topic":true,"stars":1,"forks":1,"openIssues":0,"watchers":1,"pushedAt":"2026-09-20T20:37:45Z","updatedAt":"2026-09-20T20:22:59Z","createdAt":"2026-08-27T21:23:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-gacha-calendar","version":"0.9.40","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e1c89c34ea858315b1c9ab9a812af412e52cb021","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:42.079Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:42.079Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现主动网络请求能力","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"eastmg/dsh-gacha-calendar@e1c89c34ea858315b1c9ab9a812af412e52cb021#scan-2","versionCount":1,"latestCommit":"e1c89c34ea858315b1c9ab9a812af412e52cb021","latestCheckedAt":"2026-09-21T00:01:42.079Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"dingzhenyao/dsh-plugin-directory","order":268,"name":"dsh-plugin-directory","owner":"dingzhenyao","repo":"dingzhenyao/dsh-plugin-directory","url":"https://github.com/dingzhenyao/dsh-plugin-directory","category":"tools","description":{"zh":"DSH Web GUI plugin: a browsable, searchable, stats-driven directory of GitHub DeepSeek Harness plugins (dsh-plugin topic), with CDN hot update, README-gated install, and live search.","en":"DSH Web GUI plugin: a browsable, searchable, stats-driven directory of GitHub DeepSeek Harness plugins (dsh-plugin topic), with CDN hot update, README-gated install, and live search."},"added":"2026-09-21","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-20T20:32:31Z","updatedAt":"2026-09-20T20:32:35Z","createdAt":"2026-08-15T04:30:03Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-directory","version":"0.1.0-rc.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7fa1d2d0170facd1de2714de517efa5fa3259ea7","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:46.731Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:46.731Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"dingzhenyao/dsh-plugin-directory@7fa1d2d0170facd1de2714de517efa5fa3259ea7#scan-2","versionCount":1,"latestCommit":"7fa1d2d0170facd1de2714de517efa5fa3259ea7","latestCheckedAt":"2026-09-21T00:01:46.731Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zyaons/dsh-plugin-mascot","order":269,"name":"dsh-plugin-mascot","owner":"ZYAONS","repo":"ZYAONS/dsh-plugin-mascot","url":"https://github.com/ZYAONS/dsh-plugin-mascot","category":"tools","description":{"zh":"DeepSeek Harness mascot plugin - a clickable character sprite (Arknights' Closure / BanG Dream!'s Sengoku Yuno) showing token cache hits, context pressure and account balance.","en":"DeepSeek Harness mascot plugin - a clickable character sprite (Arknights' Closure / BanG Dream!'s Sengoku Yuno) showing token cache hits, context pressure and account balance."},"added":"2026-09-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-20T20:33:05Z","updatedAt":"2026-09-20T20:33:09Z","createdAt":"2026-09-16T00:41:49Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-plugin-mascot","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e98cbf2cdf9063408f2025332e2e8fd085491bd3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:44.041Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:44.041Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"zyaons/dsh-plugin-mascot@e98cbf2cdf9063408f2025332e2e8fd085491bd3#scan-2","versionCount":1,"latestCommit":"e98cbf2cdf9063408f2025332e2e8fd085491bd3","latestCheckedAt":"2026-09-21T00:01:44.041Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"spookysandwich/dsh-plugin-message-edit","order":270,"name":"dsh-plugin-message-edit","owner":"SpookySandwich","repo":"SpookySandwich/dsh-plugin-message-edit","url":"https://github.com/SpookySandwich/dsh-plugin-message-edit","category":"tools","description":{"zh":"DSH 消息编辑插件：编辑已发送的消息并从该处分叉对话，气泡下方带版本计数与树状视图。Edit a sent message and branch from that point — version counter, tree view, placement presets.","en":"DSH 消息编辑插件：编辑已发送的消息并从该处分叉对话，气泡下方带版本计数与树状视图。Edit a sent message and branch from that point — version counter, tree view, placement presets."},"added":"2026-09-21","curated":false,"topic":true,"stars":11,"forks":1,"openIssues":1,"watchers":11,"pushedAt":"2026-09-20T20:15:59Z","updatedAt":"2026-09-20T20:14:06Z","createdAt":"2026-08-21T14:56:03Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-plugin-message-edit","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"92506c718e146bb3110837b8db6d4777432e20cb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:51.421Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:51.421Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"spookysandwich/dsh-plugin-message-edit@92506c718e146bb3110837b8db6d4777432e20cb#scan-2","versionCount":1,"latestCommit":"92506c718e146bb3110837b8db6d4777432e20cb","latestCheckedAt":"2026-09-21T00:01:51.421Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"spookysandwich/dsh-plugin-no-workspace","order":271,"name":"dsh-plugin-no-workspace","owner":"SpookySandwich","repo":"SpookySandwich/dsh-plugin-no-workspace","url":"https://github.com/SpookySandwich/dsh-plugin-no-workspace","category":"ui","description":{"zh":"DSH 免工作区插件：不选工作区也能直接开始对话，独立会话在侧边栏平铺显示，原生工作区界面保持不变。Start chatting without picking a workspace; standalone conversations list flat in the sidebar.","en":"DSH 免工作区插件：不选工作区也能直接开始对话，独立会话在侧边栏平铺显示，原生工作区界面保持不变。Start chatting without picking a workspace; standalone conversations list flat in the sidebar."},"added":"2026-09-21","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-09-20T20:16:02Z","updatedAt":"2026-09-20T20:14:10Z","createdAt":"2026-08-22T19:42:26Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/deepseek-ai/deepseek-harness","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-no-workspace","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9debcc724c6538d03cafe2848fc732260153ffc2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:51.330Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:51.330Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"spookysandwich/dsh-plugin-no-workspace@9debcc724c6538d03cafe2848fc732260153ffc2#scan-2","versionCount":1,"latestCommit":"9debcc724c6538d03cafe2848fc732260153ffc2","latestCheckedAt":"2026-09-21T00:01:51.330Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"spookysandwich/dsh-plugin-smooth-stream","order":272,"name":"dsh-plugin-smooth-stream","owner":"SpookySandwich","repo":"SpookySandwich/dsh-plugin-smooth-stream","url":"https://github.com/SpookySandwich/dsh-plugin-smooth-stream","category":"ui","description":{"zh":"DSH 流式渲染插件：按段落分批呈现、8 种入场动画、平滑滚动、设置面板。DeepSeek Harness: paragraph-batched streaming reveals, 8 designed animations, smooth scroll-follow and a settings panel.","en":"DSH 流式渲染插件：按段落分批呈现、8 种入场动画、平滑滚动、设置面板。DeepSeek Harness: paragraph-batched streaming reveals, 8 designed animations, smooth scroll-follow and a settings panel."},"added":"2026-09-21","curated":false,"topic":true,"stars":11,"forks":1,"openIssues":0,"watchers":11,"pushedAt":"2026-09-20T20:16:04Z","updatedAt":"2026-09-20T20:14:14Z","createdAt":"2026-08-14T19:03:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-smooth-stream","version":"1.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c4b4740f28ba621d759a8b7aae8496ee1208bf5a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T00:01:48.930Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T00:01:48.930Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索"]},"passport":{"evidenceId":"spookysandwich/dsh-plugin-smooth-stream@c4b4740f28ba621d759a8b7aae8496ee1208bf5a#scan-2","versionCount":1,"latestCommit":"c4b4740f28ba621d759a8b7aae8496ee1208bf5a","latestCheckedAt":"2026-09-21T00:01:48.930Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"delock/dsh-pr-board","order":273,"name":"dsh-pr-board","owner":"delock","repo":"delock/dsh-pr-board","url":"https://github.com/delock/dsh-pr-board","category":"ui","description":{"zh":"Maintainer PR review queue board for DeepSeek Harness: five-state tracking (waiting on me / waiting on author / ready to merge / merged / inbox), sidebar counters, fullscreen kanban, polling, and back-to-you transition toasts.","en":"Maintainer PR review queue board for DeepSeek Harness: five-state tracking (waiting on me / waiting on author / ready to merge / merged / inbox), sidebar counters, fullscreen kanban, polling, and back-to-you transition toasts."},"added":"2026-09-21","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-21T06:52:19Z","updatedAt":"2026-09-21T06:52:23Z","createdAt":"2026-08-26T14:22:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-pr-board","version":"0.11.13","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"085db130767c5a60716a498f0d4e7f17341b0f2f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T12:01:32.517Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-21T12:01:32.517Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"delock/dsh-pr-board@085db130767c5a60716a498f0d4e7f17341b0f2f#scan-2","versionCount":1,"latestCommit":"085db130767c5a60716a498f0d4e7f17341b0f2f","latestCheckedAt":"2026-09-21T12:01:32.517Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xiaxi626/dsh-skills-nexus","order":274,"name":"dsh-skills-nexus","owner":"xiaxi626","repo":"xiaxi626/dsh-skills-nexus","url":"https://github.com/xiaxi626/dsh-skills-nexus","category":"tools","description":{"zh":"Universal DSH skill adapter. Install once, then register any GitHub repo containing a SKILL.md as a DSH skill — one command per repo. No Cordis plugin code or package.json needed in the skill repo.","en":"Universal DSH skill adapter. Install once, then register any GitHub repo containing a SKILL.md as a DSH skill — one command per repo. No Cordis plugin code or package.json needed in the skill repo."},"added":"2026-09-21","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-09-21T11:07:18Z","updatedAt":"2026-09-21T11:07:22Z","createdAt":"2026-08-22T09:00:50Z","license":"MIT","language":"TypeScript","homepage":"https://dshmarket.com/zh/p/xiaxi626/dsh-skills-nexus/","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-skills-nexus","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"adc9e7f3d542143b3d19e0002060efa37e0f58e7","installCommand":"dsh plugin --profile web add github:xiaxi626/dsh-skills-nexus#adc9e7f3d542143b3d19e0002060efa37e0f58e7","discovery":{"source":"topic","firstSeenAt":"2026-09-21","lastSeenAt":"2026-09-21T12:01:24.800Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-21T12:01:24.800Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"xiaxi626/dsh-skills-nexus@adc9e7f3d542143b3d19e0002060efa37e0f58e7#scan-2","versionCount":1,"latestCommit":"adc9e7f3d542143b3d19e0002060efa37e0f58e7","latestCheckedAt":"2026-09-21T12:01:24.800Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"goodandready/dsh-clinebot","order":275,"name":"@goodandready/dsh-clinebot","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-clinebot","url":"https://github.com/GooDAnDReaDY/dsh-clinebot","category":"dev","description":{"zh":"Native ClineBot / ClinePass provider companion plugin for DeepSeek Harness (DSH)","en":"Native ClineBot / ClinePass provider companion plugin for DeepSeek Harness (DSH)"},"added":"2026-09-20","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-19T22:41:11Z","updatedAt":"2026-09-19T22:31:50Z","createdAt":"2026-09-04T23:39:38Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-clinebot","version":"0.3.15","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c70ab45ed562b6f0ed675176a1d8921d7049ce2b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:43.207Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:43.207Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"goodandready/dsh-clinebot@c70ab45ed562b6f0ed675176a1d8921d7049ce2b#scan-2","versionCount":1,"latestCommit":"c70ab45ed562b6f0ed675176a1d8921d7049ce2b","latestCheckedAt":"2026-09-20T00:01:43.207Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-goal","order":276,"name":"@goodandready/dsh-goal","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-goal","url":"https://github.com/GooDAnDReaDY/dsh-goal","category":"tools","description":{"zh":"Autonomous Goal Execution & Multi-Turn Task Tracking Engine with Sticky Header for DeepSeek Harness","en":"Autonomous Goal Execution & Multi-Turn Task Tracking Engine with Sticky Header for DeepSeek Harness"},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T22:38:23Z","updatedAt":"2026-09-19T22:32:14Z","createdAt":"2026-09-05T19:12:16Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-goal","version":"0.2.5","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3f2075a0c202da415fee2b9381f820767cc9ee8b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:50.895Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:50.895Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"goodandready/dsh-goal@3f2075a0c202da415fee2b9381f820767cc9ee8b#scan-2","versionCount":1,"latestCommit":"3f2075a0c202da415fee2b9381f820767cc9ee8b","latestCheckedAt":"2026-09-20T00:01:50.895Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-grok-xsearch","order":277,"name":"@goodandready/dsh-grok-xsearch","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-grok-xsearch","url":"https://github.com/GooDAnDReaDY/dsh-grok-xsearch","category":"tools","description":{"zh":"Real-time X (Twitter) search, author profiling, trends, and fact-checking tool suite powered by SuperGrok OAuth for DeepSeek Harness.","en":"Real-time X (Twitter) search, author profiling, trends, and fact-checking tool suite powered by SuperGrok OAuth for DeepSeek Harness."},"added":"2026-09-20","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-09-19T22:38:36Z","updatedAt":"2026-09-19T22:31:53Z","createdAt":"2026-08-21T15:07:58Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-grok-xsearch","version":"0.3.16","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"06933cfbcdd7954aed4fe4fdb491d9c3caefe84f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:47.862Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:47.862Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"goodandready/dsh-grok-xsearch@06933cfbcdd7954aed4fe4fdb491d9c3caefe84f#scan-2","versionCount":1,"latestCommit":"06933cfbcdd7954aed4fe4fdb491d9c3caefe84f","latestCheckedAt":"2026-09-20T00:01:47.862Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-issue-reporter","order":278,"name":"@goodandready/dsh-issue-reporter","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-issue-reporter","url":"https://github.com/GooDAnDReaDY/dsh-issue-reporter","category":"tools","description":{"zh":"Issue reporter and diagnostic telemetry tool for DeepSeek Harness with AI optimization, issue watcher, and one-click updater","en":"Issue reporter and diagnostic telemetry tool for DeepSeek Harness with AI optimization, issue watcher, and one-click updater"},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T22:38:33Z","updatedAt":"2026-09-19T22:32:22Z","createdAt":"2026-09-14T14:51:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-issue-reporter","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"95ecb96770e4326de20cb98c5f8c073dcf0092be","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:48.423Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:48.423Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"goodandready/dsh-issue-reporter@95ecb96770e4326de20cb98c5f8c073dcf0092be#scan-2","versionCount":1,"latestCommit":"95ecb96770e4326de20cb98c5f8c073dcf0092be","latestCheckedAt":"2026-09-20T00:01:48.423Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-live-canvas","order":279,"name":"@goodandready/dsh-live-canvas","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-live-canvas","url":"https://github.com/GooDAnDReaDY/dsh-live-canvas","category":"ui","description":{"zh":"Interactive Visual Frontend Studio, Retool-Style CRUD Engine, Time-Travel Debugger, 31 Agent Tools for DeepSeek Harness","en":"Interactive Visual Frontend Studio, Retool-Style CRUD Engine, Time-Travel Debugger, 31 Agent Tools for DeepSeek Harness"},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T22:41:17Z","updatedAt":"2026-09-19T22:32:31Z","createdAt":"2026-08-31T09:19:50Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-live-canvas","version":"0.2.17","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7b70a9580e29bef965d63487b57c2dc42380f22b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:42.505Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:42.505Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"goodandready/dsh-live-canvas@7b70a9580e29bef965d63487b57c2dc42380f22b#scan-2","versionCount":1,"latestCommit":"7b70a9580e29bef965d63487b57c2dc42380f22b","latestCheckedAt":"2026-09-20T00:01:42.505Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"goodandready/dsh-session-control","order":280,"name":"@goodandready/dsh-session-control","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-session-control","url":"https://github.com/GooDAnDReaDY/dsh-session-control","category":"ui","description":{"zh":"Session management for the DeepSeek Harness sidebar: pin conversations, search their contents, read archived transcripts and hide the noise","en":"Session management for the DeepSeek Harness sidebar: pin conversations, search their contents, read archived transcripts and hide the noise"},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T22:38:26Z","updatedAt":"2026-09-19T22:32:59Z","createdAt":"2026-09-06T21:51:40Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-session-control","version":"0.2.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0acfff8a469dad5aff866bc1898ba32739a580f8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:51.018Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:51.018Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力"]},"passport":{"evidenceId":"goodandready/dsh-session-control@0acfff8a469dad5aff866bc1898ba32739a580f8#scan-2","versionCount":1,"latestCommit":"0acfff8a469dad5aff866bc1898ba32739a580f8","latestCheckedAt":"2026-09-20T00:01:51.018Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"goodandready/dsh-time-machine","order":281,"name":"@goodandready/dsh-time-machine","owner":"GooDAnDReaDY","repo":"GooDAnDReaDY/dsh-time-machine","url":"https://github.com/GooDAnDReaDY/dsh-time-machine","category":"session","description":{"zh":"DSH plugin for smart checkpoints, workspace safety guards, and instant rollback","en":"DSH plugin for smart checkpoints, workspace safety guards, and instant rollback"},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":1,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T22:38:45Z","updatedAt":"2026-09-19T22:33:09Z","createdAt":"2026-08-31T11:54:16Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@goodandready/dsh-time-machine","version":"0.1.20","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"75d17b8dbce4141280958b545416e54a70c6e559","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T00:01:44.431Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T00:01:44.431Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"goodandready/dsh-time-machine@75d17b8dbce4141280958b545416e54a70c6e559#scan-2","versionCount":1,"latestCommit":"75d17b8dbce4141280958b545416e54a70c6e559","latestCheckedAt":"2026-09-20T00:01:44.431Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tcgbp/dock-flash","order":282,"name":"dock-flash","owner":"tcgbp","repo":"tcgbp/dock-flash","url":"https://github.com/tcgbp/dock-flash","category":"ui","description":{"zh":"Extensible quick-control panel for DSH Web — switch registry, skin manager, standalone or with dock-base.","en":"Extensible quick-control panel for DSH Web — switch registry, skin manager, standalone or with dock-base."},"added":"2026-09-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-20T11:32:40Z","updatedAt":"2026-09-20T11:32:04Z","createdAt":"2026-09-19T07:22:42Z","license":"Apache-2.0","language":"JavaScript","homepage":"https://github.com/tcgbp/dock-flash","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dock-flash","version":"1.1.9","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bc112ec0d7a23058eeeefaf3305dcb71bc035988","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T12:01:47.041Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-20T12:01:47.041Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["dist/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dist/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dist/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","dist/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"tcgbp/dock-flash@bc112ec0d7a23058eeeefaf3305dcb71bc035988#scan-2","versionCount":1,"latestCommit":"bc112ec0d7a23058eeeefaf3305dcb71bc035988","latestCheckedAt":"2026-09-20T12:01:47.041Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"darrien1998/dsh-ditto","order":283,"name":"dsh-ditto","owner":"darrien1998","repo":"darrien1998/dsh-ditto","url":"https://github.com/darrien1998/dsh-ditto","category":"workflow","description":{"zh":"AI is great at doing one file. Ditto is for doing the same thing to 30 files without babysitting all 30. Review-first batch automation plugin for DeepSeek Harness: 3 reviewed samples → full preview → approve → safe apply.","en":"AI is great at doing one file. Ditto is for doing the same thing to 30 files without babysitting all 30. Review-first batch automation plugin for DeepSeek Harness: 3 reviewed samples → full preview → approve → safe apply."},"added":"2026-09-20","curated":false,"topic":true,"stars":1,"forks":1,"openIssues":9,"watchers":1,"pushedAt":"2026-09-20T11:32:29Z","updatedAt":"2026-09-20T11:28:05Z","createdAt":"2026-09-16T08:36:14Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-ditto","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-ditto","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1b2c2ee20ac32db930a4ae1646da69f80e6cb1ab","installCommand":"dsh plugin --profile web add github:darrien1998/dsh-ditto#1b2c2ee20ac32db930a4ae1646da69f80e6cb1ab","discovery":{"source":"topic","firstSeenAt":"2026-09-20","lastSeenAt":"2026-09-20T12:01:46.924Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-20T12:01:46.924Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"darrien1998/dsh-ditto@1b2c2ee20ac32db930a4ae1646da69f80e6cb1ab#scan-2","versionCount":1,"latestCommit":"1b2c2ee20ac32db930a4ae1646da69f80e6cb1ab","latestCheckedAt":"2026-09-20T12:01:46.924Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"master1sun/dsh-file-workbench-lib","order":284,"name":"@sunjuntao/dsh-file-workbench","owner":"master1Sun","repo":"master1Sun/dsh-file-workbench-lib","url":"https://github.com/master1Sun/dsh-file-workbench-lib","category":"tools","description":{"zh":"@sunjuntao/dsh-file-workbench","en":"@sunjuntao/dsh-file-workbench"},"added":"2026-09-19","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-09-19T11:35:12Z","updatedAt":"2026-09-19T11:35:16Z","createdAt":"2026-09-04T07:47:02Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@sunjuntao/dsh-file-workbench","version":"0.6.2","lifecycleScripts":[],"runtimeDependencies":36,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b2826a080d04642af2459b894b27c3b8caad3823","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:44.348Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:44.348Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"master1sun/dsh-file-workbench-lib@b2826a080d04642af2459b894b27c3b8caad3823#scan-2","versionCount":1,"latestCommit":"b2826a080d04642af2459b894b27c3b8caad3823","latestCheckedAt":"2026-09-19T12:01:44.348Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"mitsukijoe/dsh-better-ux","order":285,"name":"dsh-better-ux","owner":"MitsukiJoe","repo":"MitsukiJoe/dsh-better-ux","url":"https://github.com/MitsukiJoe/dsh-better-ux","category":"session","description":{"zh":"Web UX kit for DeepSeek Harness: session row actions and a large model picker","en":"Web UX kit for DeepSeek Harness: session row actions and a large model picker"},"added":"2026-09-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-18T23:14:28Z","updatedAt":"2026-09-18T23:14:32Z","createdAt":"2026-08-17T12:39:05Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-better-ux","version":"0.2.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"25cc641306153de75f1c42532b888d2c7311510a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T00:05:39.546Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T00:05:39.546Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"mitsukijoe/dsh-better-ux@25cc641306153de75f1c42532b888d2c7311510a#scan-2","versionCount":1,"latestCommit":"25cc641306153de75f1c42532b888d2c7311510a","latestCheckedAt":"2026-09-19T00:05:39.546Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"cooltea001/dsh-cool-theme","order":286,"name":"dsh-cool-theme","owner":"CoolTea001","repo":"CoolTea001/dsh-cool-theme","url":"https://github.com/CoolTea001/dsh-cool-theme","category":"ui","description":{"zh":"DeepSeek Harness theme plugin — supports Dark / Light / System appearance switching, ships 34 preset themes, and supports creating, sharing, and importing custom themes.","en":"DeepSeek Harness theme plugin — supports Dark / Light / System appearance switching, ships 34 preset themes, and supports creating, sharing, and importing custom themes."},"added":"2026-09-19","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-09-19T11:33:24Z","updatedAt":"2026-09-19T11:33:20Z","createdAt":"2026-08-30T09:30:11Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-cool-theme","version":"0.6.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3bb25448a267735124bbe16fe50d5de23d6573cf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:45.637Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:45.637Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"cooltea001/dsh-cool-theme@3bb25448a267735124bbe16fe50d5de23d6573cf#scan-2","versionCount":1,"latestCommit":"3bb25448a267735124bbe16fe50d5de23d6573cf","latestCheckedAt":"2026-09-19T12:01:45.637Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"builtin-pb/dsh-developer","order":287,"name":"dsh-developer","owner":"builtin-pb","repo":"builtin-pb/dsh-developer","url":"https://github.com/builtin-pb/dsh-developer","category":"tools","description":{"zh":"The single plugin you need for DSH — build, test, diagnose, and maintain DeepSeek Harness plugins and core.","en":"The single plugin you need for DSH — build, test, diagnose, and maintain DeepSeek Harness plugins and core."},"added":"2026-09-19","curated":false,"topic":true,"stars":6,"forks":0,"openIssues":0,"watchers":6,"pushedAt":"2026-09-18T23:20:44Z","updatedAt":"2026-09-18T23:20:48Z","createdAt":"2026-08-31T09:04:32Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-developer","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ecf6b628e265a56dfc50758484f4afe056dcd504","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T00:01:57.364Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T00:01:57.364Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"builtin-pb/dsh-developer@ecf6b628e265a56dfc50758484f4afe056dcd504#scan-2","versionCount":1,"latestCommit":"ecf6b628e265a56dfc50758484f4afe056dcd504","latestCheckedAt":"2026-09-19T00:01:57.364Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ninjasln-labs/dsh-knowledge-sqlite","order":288,"name":"dsh-knowledge-sqlite","owner":"NinjaSln-labs","repo":"NinjaSln-labs/dsh-knowledge-sqlite","url":"https://github.com/NinjaSln-labs/dsh-knowledge-sqlite","category":"session","description":{"zh":"DeepSeek Harness 跨会话知识插件：ctx.knowledge 服务 + knowledge_* 工具，SQLite FTS5 trigram 中文子串检索 + L1 查询扩展（V1.11 契约）","en":"DeepSeek Harness 跨会话知识插件：ctx.knowledge 服务 + knowledge_* 工具，SQLite FTS5 trigram 中文子串检索 + L1 查询扩展（V1.11 契约）"},"added":"2026-09-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-19T11:36:04Z","updatedAt":"2026-09-19T11:36:08Z","createdAt":"2026-09-03T00:06:35Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-knowledge-sqlite","version":"0.1.9","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6a51589c8533b4e817388fe751bc3c29cca07213","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:41.264Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:41.264Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"ninjasln-labs/dsh-knowledge-sqlite@6a51589c8533b4e817388fe751bc3c29cca07213#scan-2","versionCount":1,"latestCommit":"6a51589c8533b4e817388fe751bc3c29cca07213","latestCheckedAt":"2026-09-19T12:01:41.264Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"perrylink/dsh-permission-rules","order":289,"name":"dsh-permission-rules","owner":"PerryLink","repo":"PerryLink/dsh-permission-rules","url":"https://github.com/PerryLink/dsh-permission-rules","category":"session","description":{"zh":"Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.","en":"Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload."},"added":"2026-09-19","curated":false,"topic":true,"stars":112,"forks":3,"openIssues":8,"watchers":112,"pushedAt":"2026-09-19T11:32:34Z","updatedAt":"2026-09-19T11:32:18Z","createdAt":"2026-08-13T20:31:02Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-permission-rules","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-permission-rules","version":"0.7.4","lifecycleScripts":["prepare"],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e5c8062999862c743a5d9024580015c81b18f71d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:47.132Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:47.132Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"perrylink/dsh-permission-rules@e5c8062999862c743a5d9024580015c81b18f71d#scan-2","versionCount":1,"latestCommit":"e5c8062999862c743a5d9024580015c81b18f71d","latestCheckedAt":"2026-09-19T12:01:47.132Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"perrylink/dsh-session-sync","order":290,"name":"dsh-session-sync","owner":"PerryLink","repo":"PerryLink/dsh-session-sync","url":"https://github.com/PerryLink/dsh-session-sync","category":"session","description":{"zh":"Cross-device DeepSeek Harness session sync: a dedicated git mirror with append-only keep-both conflict resolution (fork files, never silently overwritten), /sync command and sync_* tools","en":"Cross-device DeepSeek Harness session sync: a dedicated git mirror with append-only keep-both conflict resolution (fork files, never silently overwritten), /sync command and sync_* tools"},"added":"2026-09-19","curated":false,"topic":true,"stars":11,"forks":1,"openIssues":0,"watchers":11,"pushedAt":"2026-09-19T11:32:25Z","updatedAt":"2026-09-19T11:31:18Z","createdAt":"2026-08-16T16:27:50Z","license":"Apache-2.0","language":"JavaScript","homepage":"https://www.npmjs.com/package/dsh-session-sync","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-session-sync","version":"0.2.16","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"af6caefa7573d9717d4437931e78ce6fa3b68683","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:49.633Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:49.633Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"perrylink/dsh-session-sync@af6caefa7573d9717d4437931e78ce6fa3b68683#scan-2","versionCount":1,"latestCommit":"af6caefa7573d9717d4437931e78ce6fa3b68683","latestCheckedAt":"2026-09-19T12:01:49.633Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"perrylink/dsh-talk","order":291,"name":"dsh-talk","owner":"PerryLink","repo":"PerryLink/dsh-talk","url":"https://github.com/PerryLink/dsh-talk","category":"session","description":{"zh":"Voice-first session loop for DeepSeek Harness: a composer microphone button with browser/local speech-to-text (Web Speech, FunASR, whisper.cpp), a speak tool for text-to-speech replies (browser, edge-tts, piper), event announcements with mute, and speak-to-interrupt.","en":"Voice-first session loop for DeepSeek Harness: a composer microphone button with browser/local speech-to-text (Web Speech, FunASR, whisper.cpp), a speak tool for text-to-speech replies (browser, edge-tts, piper), event announcements with mute, and speak-to-interrupt."},"added":"2026-09-19","curated":false,"topic":true,"stars":11,"forks":2,"openIssues":0,"watchers":11,"pushedAt":"2026-09-19T11:32:29Z","updatedAt":"2026-09-19T11:31:24Z","createdAt":"2026-08-16T18:15:56Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-talk","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-talk","version":"0.3.12","lifecycleScripts":["prepare"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4e85c4d12bcb7d1ede234450cc8793676a5d936b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-19","lastSeenAt":"2026-09-19T12:01:49.755Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-19T12:01:49.755Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"perrylink/dsh-talk@4e85c4d12bcb7d1ede234450cc8793676a5d936b#scan-2","versionCount":1,"latestCommit":"4e85c4d12bcb7d1ede234450cc8793676a5d936b","latestCheckedAt":"2026-09-19T12:01:49.755Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"cuddly-guacamole/dsh-auto-approval-llm","order":292,"name":"@quill507/dsh-auto-approval-llm","owner":"cuddly-guacamole","repo":"cuddly-guacamole/dsh-auto-approval-llm","url":"https://github.com/cuddly-guacamole/dsh-auto-approval-llm","category":"tools","description":{"zh":"LLM-assisted auto approval + timeout fallback for the DeepSeek Harness Auto preset","en":"LLM-assisted auto approval + timeout fallback for the DeepSeek Harness Auto preset"},"added":"2026-09-18","curated":false,"topic":true,"stars":8,"forks":3,"openIssues":0,"watchers":8,"pushedAt":"2026-09-18T11:53:28Z","updatedAt":"2026-09-18T11:53:32Z","createdAt":"2026-08-18T19:11:01Z","license":"BSD-3-Clause","language":"JavaScript","homepage":"https://cuddly-guacamole.github.io/dsh-auto-approval-llm/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@quill507/dsh-auto-approval-llm","version":"0.0.34","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b4b721e035333341f701f91da27301ce879cfb07","installCommand":"dsh plugin --profile web add github:cuddly-guacamole/dsh-auto-approval-llm#b4b721e035333341f701f91da27301ce879cfb07","discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T12:01:38.296Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-18T12:01:38.296Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"cuddly-guacamole/dsh-auto-approval-llm@b4b721e035333341f701f91da27301ce879cfb07#scan-2","versionCount":1,"latestCommit":"b4b721e035333341f701f91da27301ce879cfb07","latestCheckedAt":"2026-09-18T12:01:38.296Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"ksf1216/chinese-script-policy","order":293,"name":"chinese-script-policy","owner":"KSF1216","repo":"KSF1216/chinese-script-policy","url":"https://github.com/KSF1216/chinese-script-policy","category":"dev","description":{"zh":"Harness-neutral Traditional Chinese enforcer and offline converter (skill / DSH bundle / CLI). Checks one script axis one way at a time plus two filter axes: Cantonese colloquialisms and Japanese-only kanji and words. Converts 繁↔簡, 粵語→書面語, 日文→中文, each opt-in, plus an optional wording preference. Single-file offline HTML, no runtime deps.","en":"Harness-neutral Traditional Chinese enforcer and offline converter (skill / DSH bundle / CLI). Checks one script axis one way at a time plus two filter axes: Cantonese colloquialisms and Japanese-only kanji and words. Converts 繁↔簡, 粵語→書面語, 日文→中文, each opt-in, plus an optional wording preference. Single-file offline HTML, no runtime deps."},"added":"2026-09-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-17T23:50:29Z","updatedAt":"2026-09-17T23:50:32Z","createdAt":"2026-09-17T23:23:36Z","license":"MIT","language":"JavaScript","homepage":"https://ksf1216.github.io/chinese-script-policy/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"chinese-script-policy","version":"1.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1047e16efebe96d27f8123ec8bda0574d369493a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T00:02:21.396Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-18T00:02:21.396Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"ksf1216/chinese-script-policy@1047e16efebe96d27f8123ec8bda0574d369493a#scan-2","versionCount":1,"latestCommit":"1047e16efebe96d27f8123ec8bda0574d369493a","latestCheckedAt":"2026-09-18T00:02:21.396Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"doozqoo/dsh-pixel-office","order":294,"name":"dsh-client-pixel-office","owner":"Doozqoo","repo":"Doozqoo/dsh-pixel-office","url":"https://github.com/Doozqoo/dsh-pixel-office","category":"tools","description":{"zh":"DeepSeek Harness Web GUI","en":"DeepSeek Harness Web GUI"},"added":"2026-09-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-17T23:54:42Z","updatedAt":"2026-09-17T23:54:47Z","createdAt":"2026-08-27T18:25:16Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-client-pixel-office","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"055c1f0cd7eb2f6e8edc95f4f1aaabd6eb710fcd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T00:02:54.173Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-18T00:02:54.173Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"doozqoo/dsh-pixel-office@055c1f0cd7eb2f6e8edc95f4f1aaabd6eb710fcd#scan-2","versionCount":1,"latestCommit":"055c1f0cd7eb2f6e8edc95f4f1aaabd6eb710fcd","latestCheckedAt":"2026-09-18T00:02:54.173Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"vshulcz/deja-vu","order":295,"name":"dsh-deja","owner":"vshulcz","repo":"vshulcz/deja-vu","url":"https://github.com/vshulcz/deja-vu","category":"session","description":{"zh":"One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.","en":"One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary."},"added":"2026-09-18","curated":false,"topic":true,"stars":828,"forks":78,"openIssues":34,"watchers":828,"pushedAt":"2026-09-17T23:52:20Z","updatedAt":"2026-09-17T23:41:17Z","createdAt":"2026-07-14T07:45:44Z","license":"MIT","language":"Go","homepage":"https://vshulcz.github.io/deja-vu/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-deja","version":"0.20.8","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["extensions/dsh/cordis.patch.yml","extensions/dsh/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f142126c5b7e66accfe2e2fcc7e71f71f2e15e44","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T00:02:54.299Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-18T00:02:54.299Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["extensions/dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["extensions/dsh/index.js"]}],"filesInspected":["package.json","extensions/dsh/index.js","extensions/dsh/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"vshulcz/deja-vu@f142126c5b7e66accfe2e2fcc7e71f71f2e15e44#scan-2","versionCount":1,"latestCommit":"f142126c5b7e66accfe2e2fcc7e71f71f2e15e44","latestCheckedAt":"2026-09-18T00:02:54.299Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bonovavanro/dsh-mega-settings","order":296,"name":"dsh-mega-settings","owner":"BonovaVanro","repo":"BonovaVanro/dsh-mega-settings","url":"https://github.com/BonovaVanro/dsh-mega-settings","category":"ui","description":{"zh":"dsh设置面板增强、mega 系列插件的统一设置收纳宿主、提供多项dsh优化设置","en":"dsh设置面板增强、mega 系列插件的统一设置收纳宿主、提供多项dsh优化设置"},"added":"2026-09-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-18T11:54:35Z","updatedAt":"2026-09-18T11:54:34Z","createdAt":"2026-08-29T14:16:05Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mega-settings","version":"0.1.5-rc.2-update.2","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c26534c4551274b9c23eef87d32e03f3989ea7c2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T12:01:35.267Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-18T12:01:35.267Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"bonovavanro/dsh-mega-settings@c26534c4551274b9c23eef87d32e03f3989ea7c2#scan-2","versionCount":1,"latestCommit":"c26534c4551274b9c23eef87d32e03f3989ea7c2","latestCheckedAt":"2026-09-18T12:01:35.267Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"lengmoxxl/dsh-remote-workspace","order":297,"name":"dsh-remote-workspace","owner":"lengmoXXL","repo":"lengmoXXL/dsh-remote-workspace","url":"https://github.com/lengmoXXL/dsh-remote-workspace","category":"workflow","description":{"zh":"A DeepSeek Harness (DSH) plugin that runs the harness's file, shell, and terminal tools inside a git worktree on a remote machine over SSH. The remote agent installs itself: it ships as a static Rust binary from GitHub Releases, listens on a random loopback port, and updates when the plugin does.","en":"A DeepSeek Harness (DSH) plugin that runs the harness's file, shell, and terminal tools inside a git worktree on a remote machine over SSH. The remote agent installs itself: it ships as a static Rust binary from GitHub Releases, listens on a random loopback port, and updates when the plugin does."},"added":"2026-09-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-17T23:38:33Z","updatedAt":"2026-09-17T23:38:32Z","createdAt":"2026-09-11T15:26:34Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-remote-workspace","version":"0.1.11","lifecycleScripts":["prepare"],"runtimeDependencies":8,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c98218c36b6b621f04cd23b6951f3a9e3aaed034","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-18","lastSeenAt":"2026-09-18T00:02:58.345Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-18T00:02:58.345Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"lengmoxxl/dsh-remote-workspace@c98218c36b6b621f04cd23b6951f3a9e3aaed034#scan-2","versionCount":1,"latestCommit":"c98218c36b6b621f04cd23b6951f3a9e3aaed034","latestCheckedAt":"2026-09-18T00:02:58.345Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xswt442-cmd/dsh-ballast","order":298,"name":"dsh-ballast","owner":"xswt442-cmd","repo":"xswt442-cmd/dsh-ballast","url":"https://github.com/xswt442-cmd/dsh-ballast","category":"ui","description":{"zh":"DSH 上下文窗口逐条归因面板——看谁占了窗口 | Per-message context window attribution for DSH — see what takes up the window","en":"DSH 上下文窗口逐条归因面板——看谁占了窗口 | Per-message context window attribution for DSH — see what takes up the window"},"added":"2026-09-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-17T12:00:44Z","updatedAt":"2026-09-17T12:00:39Z","createdAt":"2026-08-31T16:06:52Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ballast","version":"0.2.9","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2dff4cd71664ffa06932a6c12c7bf521c2b6671c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-17","lastSeenAt":"2026-09-17T12:01:32.421Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T12:01:32.421Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"xswt442-cmd/dsh-ballast@2dff4cd71664ffa06932a6c12c7bf521c2b6671c#scan-2","versionCount":1,"latestCommit":"2dff4cd71664ffa06932a6c12c7bf521c2b6671c","latestCheckedAt":"2026-09-17T12:01:32.421Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xswt442-cmd/dsh-treekeeper","order":299,"name":"dsh-treekeeper","owner":"xswt442-cmd","repo":"xswt442-cmd/dsh-treekeeper","url":"https://github.com/xswt442-cmd/dsh-treekeeper","category":"workflow","description":{"zh":"对账 DSH 任务账本与 OS 进程树，定位归属、检测泄漏并安全治理｜Reconcile DSH task ledgers with OS process trees for attribution, leak detection, and safe governance.","en":"对账 DSH 任务账本与 OS 进程树，定位归属、检测泄漏并安全治理｜Reconcile DSH task ledgers with OS process trees for attribution, leak detection, and safe governance."},"added":"2026-09-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-17T12:00:55Z","updatedAt":"2026-09-17T12:00:59Z","createdAt":"2026-08-27T15:05:07Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-treekeeper","version":"0.2.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4d082d72dacfafb360823ab3a26fa6fca18407d1","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-17","lastSeenAt":"2026-09-17T12:01:29.903Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T12:01:29.903Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"xswt442-cmd/dsh-treekeeper@4d082d72dacfafb360823ab3a26fa6fca18407d1#scan-2","versionCount":1,"latestCommit":"4d082d72dacfafb360823ab3a26fa6fca18407d1","latestCheckedAt":"2026-09-17T12:01:29.903Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"wangzhanchao883/dsh-hold-to-talk","order":300,"name":"dsh-hold-to-talk","owner":"wangzhanchao883","repo":"wangzhanchao883/dsh-hold-to-talk","url":"https://github.com/wangzhanchao883/dsh-hold-to-talk","category":"ui","description":{"zh":"在 DSH Web 输入框长按鼠标即可录音，浮层实时预览，松手后将本地 SenseVoice 识别结果写入草稿；默认不会自动发送。","en":"Hold the DSH Web composer to record, preview live transcription in an overlay, and release to insert locally decoded SenseVoice text into the draft; auto-send stays off by default."},"added":"2026-09-11","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-11T17:06:01.700Z","lastSeenAt":"2026-09-11T17:06:01.700Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-11T17:06:01.700Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"wangzhanchao883/dsh-hold-to-talk","pickedAt":"2026-09-11T17:06:01.700Z","reviewedCommit":"8082edd4b28f2d9cd11870efc8c7ceff84386a24","category":"ui","summary":{"zh":"在 DSH Web 输入框长按鼠标即可录音，浮层实时预览，松手后将本地 SenseVoice 识别结果写入草稿；默认不会自动发送。","en":"Hold the DSH Web composer to record, preview live transcription in an overlay, and release to insert locally decoded SenseVoice text into the draft; auto-send stays off by default."},"reason":{"zh":"0.1.2 已发布到 npm；注册表包与所审提交中的运行时代码、manifest 和 patch 逐字一致，GitHub 的 Node 22/24 检查通过。交互完整，识别放在 worker 中本地执行，适合经常口述中文长提示的用户。","en":"Version 0.1.2 is published on npm; its runtime files, manifest, and patch match the reviewed commit byte for byte, and GitHub checks pass on Node 22 and 24. The interaction is complete and local worker-based decoding is useful for frequent long-form dictation."},"safety":{"risk":"medium","zh":"中风险：插件会请求麦克风权限，把音频经 DSH 自定义 HTTP 路由送到同机宿主，并首次从 hf-mirror.com 下载约 230MB 模型；模型只校验大小，未固定哈希。依赖包含 sherpa-onnx 原生二进制，仓库无锁文件；自定义路由只检查 sec-fetch-site，缺少独立令牌，DSH 暴露到局域网时会增加服务攻击面。静态检查未发现遥测、密钥读取或音频外发，默认仅写入草稿。建议只在回环地址使用、保留 autoSend=false，并改用可信镜像或预先校验模型。","en":"Medium risk: the plugin requests microphone access, sends audio over a custom DSH HTTP route to the same-machine host, and downloads about 230 MB of model files from hf-mirror.com on first use; files are checked by size, not a pinned hash. It depends on native sherpa-onnx binaries, has no lockfile, and its route relies only on sec-fetch-site without a separate token, increasing the service attack surface if DSH is exposed to a LAN. Static review found no telemetry, credential access, or audio egress, and the default only edits the draft. Keep DSH loopback-only, leave autoSend off, and use a trusted mirror or pre-verified model."}}},{"id":"leeyoung1/dsh-advisor-plugin","order":301,"name":"dsh-advisor-plugin","owner":"leeyoung1","repo":"leeyoung1/dsh-advisor-plugin","url":"https://github.com/leeyoung1/dsh-advisor-plugin","category":"workflow","description":{"zh":"给 DSH 增加独立审查模型：执行模型可按需调用 advisor，也可按步数自动巡逻，由审查模型返回计划、纠偏或停止信号。","en":"Adds an independent reviewer model to DSH: the executor can call advisor on demand or run step-based patrols that return plans, corrections, or stop signals."},"added":"2026-09-11","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-11T08:52:02Z","updatedAt":"2026-09-14T02:21:45Z","createdAt":"2026-09-11T07:17:49Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-advisor-plugin","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-advisor-plugin","version":"0.2.6","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c2299977d2e488415bef0203483e29ce46147b44","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-11T11:03:14.750Z","lastSeenAt":"2026-09-15T12:00:43.847Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-15T12:00:43.847Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","lib/index.js","lib/client/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"leeyoung1/dsh-advisor-plugin@c2299977d2e488415bef0203483e29ce46147b44#scan-2","versionCount":1,"latestCommit":"c2299977d2e488415bef0203483e29ce46147b44","latestCheckedAt":"2026-09-15T12:00:43.847Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"leeyoung1/dsh-advisor-plugin","pickedAt":"2026-09-11T11:03:14.750Z","reviewedCommit":"c2299977d2e488415bef0203483e29ce46147b44","category":"workflow","summary":{"zh":"给 DSH 增加独立审查模型：执行模型可按需调用 advisor，也可按步数自动巡逻，由审查模型返回计划、纠偏或停止信号。","en":"Adds an independent reviewer model to DSH: the executor can call advisor on demand or run step-based patrols that return plans, corrections, or stop signals."},"reason":{"zh":"它直接缓解同一模型自写自审的盲区；v0.2.6 已发布 npm 包与 GitHub Release，标签源码和 npm 包内源码一致，生产依赖审计为 0。实现包含 compaction 感知的会话转发、失败隔离、上下文溢出降级、巡逻冷却以及工作区内只读核实工具。","en":"It directly addresses self-review blind spots. Version 0.2.6 has both an npm package and GitHub release; the tagged source matches the source shipped to npm, and the production dependency audit reports zero known vulnerabilities. It includes compaction-aware context forwarding, failure isolation, overflow fallback, patrol cooldowns, and workspace-bounded read-only investigation tools."},"safety":{"risk":"medium","zh":"会把当前模型可见的整段会话、工具 schema，以及调查时读取的工作区文件发送给所选审查 provider；巡逻默认每 6 步自动调用并产生额外费用。调查工具限制为工作区内只读且拒绝符号链接越界，但模型提供的搜索正则缺少复杂度限制。建议先关闭巡逻与 investigate，选择同一信任域的 provider 小范围试用，再按成本开启自动巡逻。","en":"It sends the model-visible conversation, tool schemas, and any workspace files read during investigation to the selected reviewer provider. Patrol defaults to an automatic call every six steps and adds model cost. Investigation is read-only, workspace-bounded, and blocks symlink escapes, but model-supplied search regexes have no complexity guard. Start with patrol and investigate disabled, use a provider in the same trust domain, then enable automation after observing cost and behavior."}}},{"id":"wings1848/dsh-mcp-lazy","order":302,"name":"dsh-mcp-lazy","owner":"wings1848","repo":"wings1848/dsh-mcp-lazy","url":"https://github.com/wings1848/dsh-mcp-lazy","category":"tools","description":{"zh":"把多个 MCP 服务器收敛为一个固定代理工具，按需连接、空闲回收并缓存工具元数据，显著降低每轮工具 schema 的上下文占用。","en":"Collapses multiple MCP servers behind one stable proxy tool, with on-demand connections, idle reaping, and a metadata cache to cut per-turn tool-schema overhead."},"added":"2026-09-11","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-15T08:45:55Z","updatedAt":"2026-09-15T08:34:18Z","createdAt":"2026-09-10T23:36:15Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-mcp-lazy","version":"0.3.3","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"155eaf4790402469265880aa4d25debcb2ef31e4","installCommand":"dsh plugin --profile web add github:wings1848/dsh-mcp-lazy#155eaf4790402469265880aa4d25debcb2ef31e4","discovery":{"source":"topic","firstSeenAt":"2026-09-11T05:06:50.548Z","lastSeenAt":"2026-09-15T12:00:42.362Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-15T12:00:42.362Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"wings1848/dsh-mcp-lazy@155eaf4790402469265880aa4d25debcb2ef31e4#scan-2","versionCount":1,"latestCommit":"155eaf4790402469265880aa4d25debcb2ef31e4","latestCheckedAt":"2026-09-15T12:00:42.362Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"wings1848/dsh-mcp-lazy","pickedAt":"2026-09-11T05:06:50.548Z","reviewedCommit":"eec9958d9c35fba437270eca89cea9ad64f1cf13","category":"tools","summary":{"zh":"把多个 MCP 服务器收敛为一个固定代理工具，按需连接、空闲回收并缓存工具元数据，显著降低每轮工具 schema 的上下文占用。","en":"Collapses multiple MCP servers behind one stable proxy tool, with on-demand connections, idle reaping, and a metadata cache to cut per-turn tool-schema overhead."},"reason":{"zh":"首个 npm 与 GitHub Release 已发布，标签源码和 npm 包内源码一致；CI、CodeQL、密钥扫描与依赖审计均通过。项目实测 chrome-devtools-mcp 的每请求工具定义由约 5313 降至 381 token，适合 MCP 工具较多的本地配置。","en":"The first npm package and GitHub release are published, the tagged source matches the source shipped to npm, and CI, CodeQL, secret scanning, and dependency audit pass. The project measures chrome-devtools-mcp tool definitions dropping from about 5,313 to 381 tokens per request, making it useful for tool-heavy local setups."},"safety":{"risk":"medium","zh":"会按配置启动 stdio 子进程或连接远程 HTTP；代理调用统一经过 mcp 工具且没有逐个 MCP 工具审批，headers/env 也可能含密钥。只配置可信、固定版本的服务器并沿用严格的 DSH 权限预设；需要逐工具策略时将敏感工具直接提升。默认 lazy 激活不会启动子进程，超大文本输出会截断并以 0600 写入临时文件。","en":"It can spawn configured stdio processes or connect to remote HTTP servers. Proxied calls share the single mcp permission surface with no per-underlying-tool approval, and headers or env values may contain secrets. Use trusted, pinned servers with a strict DSH permission preset, and directly promote sensitive tools when per-tool policy is needed. Default lazy activation spawns nothing; oversized text is truncated and spilled to a mode-0600 temp file."}}},{"id":"wx-yss/dsh-composer-enter","order":303,"name":"dsh-composer-enter","owner":"wx-yss","repo":"wx-yss/dsh-composer-enter","url":"https://github.com/wx-yss/dsh-composer-enter","category":"ui","description":{"zh":"把 DSH Web 输入框改成 Enter 换行、Cmd/Ctrl+Enter 提交，适合写多段提示词。","en":"Changes the DSH Web composer to Enter for line breaks and Cmd/Ctrl+Enter for submission, making multiline prompts easier to write."},"added":"2026-09-10","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-10T17:38:17Z","updatedAt":"2026-09-10T17:38:26Z","createdAt":"2026-09-10T17:10:56Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-composer-enter","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.bundle.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"af9106f10d1877065b66b27b3cf5ad978bebcb2b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-10T23:03:31.749Z","lastSeenAt":"2026-09-16T12:02:09.543Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-16T12:02:09.543Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.bundle.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"wx-yss/dsh-composer-enter@af9106f10d1877065b66b27b3cf5ad978bebcb2b#scan-2","versionCount":1,"latestCommit":"af9106f10d1877065b66b27b3cf5ad978bebcb2b","latestCheckedAt":"2026-09-16T12:02:09.543Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7},"codexPick":{"repo":"wx-yss/dsh-composer-enter","pickedAt":"2026-09-10T23:03:31.749Z","reviewedCommit":"af9106f10d1877065b66b27b3cf5ad978bebcb2b","category":"ui","summary":{"zh":"把 DSH Web 输入框改成 Enter 换行、Cmd/Ctrl+Enter 提交，适合写多段提示词。","en":"Changes the DSH Web composer to Enter for line breaks and Cmd/Ctrl+Enter for submission, making multiline prompts easier to write."},"reason":{"zh":"v0.1.0 已发布到 npm；核对的六个发布包文件与审查提交逐字节一致。插件只有 1.6 KB 客户端逻辑、零运行依赖和零生命周期脚本，并保留官方 Cmd/Ctrl+Enter 的发送与插话语义。","en":"v0.1.0 is published on npm, and all six package files match the reviewed commit byte-for-byte. The plugin has only 1.6 KB of client logic, zero runtime dependencies, no lifecycle scripts, and preserves the official Cmd/Ctrl+Enter send and steering semantics."},"safety":{"risk":"low","zh":"低风险：纯浏览器键盘事件插件，不访问网络、凭据、文件或存储。它通过 Lexical 私有字段寻找换行命令，DSH 内部升级后可能静默失效；还会把普通 Enter 的默认发送行为改为换行，安装前应确认符合个人输入习惯。","en":"Low risk: a browser-only keyboard event plugin with no network, credential, file, or storage access. It discovers the line-break command through Lexical private fields and may silently stop working after an internal DSH upgrade; it also changes plain Enter from submit to newline, so users should confirm that preference first."}}},{"id":"techflag/dsh-plugin-ssh","order":304,"name":"dsh-plugin-ssh","owner":"techflag","repo":"techflag/dsh-plugin-ssh","url":"https://github.com/techflag/dsh-plugin-ssh","category":"tools","description":{"zh":"把 SSH 终端、SFTP 文件管理和宿主模型辅助带进 DSH Web；支持多主机会话、指纹校验、可审阅远程命令、原子文件替换与 @服务器 工具调用。","en":"Brings SSH terminals, SFTP file management, and host-model assistance into DSH Web, with multi-host sessions, fingerprint verification, reviewable remote commands, atomic file replacement, and @server tools."},"added":"2026-09-09","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-09T04:58:18Z","updatedAt":"2026-09-16T01:26:41Z","createdAt":"2026-09-08T09:18:23Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/techflag/dsh-plugin-ssh#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-ssh","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3ae87385bf379d6c2df82fab1856cabe3553e758","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-09T05:06:14.333Z","lastSeenAt":"2026-09-16T12:05:18.904Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-16T12:05:18.904Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现主动网络请求能力"]},"passport":{"evidenceId":"techflag/dsh-plugin-ssh@3ae87385bf379d6c2df82fab1856cabe3553e758#scan-2","versionCount":1,"latestCommit":"3ae87385bf379d6c2df82fab1856cabe3553e758","latestCheckedAt":"2026-09-16T12:05:18.904Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"techflag/dsh-plugin-ssh","pickedAt":"2026-09-09T05:06:14.333Z","reviewedCommit":"0342ca8fc8087b007aaa88cb65cc0e49d9bee624","category":"tools","summary":{"zh":"把 SSH 终端、SFTP 文件管理和宿主模型辅助带进 DSH Web；支持多主机会话、指纹校验、可审阅远程命令、原子文件替换与 @服务器 工具调用。","en":"Brings SSH terminals, SFTP file management, and host-model assistance into DSH Web, with multi-host sessions, fingerprint verification, reviewable remote commands, atomic file replacement, and @server tools."},"reason":{"zh":"v0.1.0 同时发布 npm 与 GitHub Release；预构建包的 SHA-256、内容及不可变发布 tag 已核对。项目完成 macOS 真机 SSH/SFTP 验证，跨平台 CI、22 项测试和官方 CLI 安装冒烟通过。AI 不会自动运行命令，终端内容需显式选择后才发送给模型。","en":"Version 0.1.0 ships on npm and GitHub Releases; the prebuilt archive SHA-256, contents, and immutable release tag were verified. The project reports real macOS SSH/SFTP validation, cross-platform CI, 22 tests, and an official-CLI install smoke check. AI does not execute commands automatically, and terminal content is sent to a model only after explicit selection."},"safety":{"risk":"high","zh":"高风险：插件拥有 SSH/SFTP 权限，可在远程主机执行 Shell、读取、修改和上传文件。可选保存的密码使用本地 AES-256-GCM 文件保护，不具备系统钥匙串的隔离能力。Web 路由限制环回地址与同源写请求，并校验服务器指纹；命令和文件修改接入 DSH 权限确认。建议只接测试主机，使用低权限账号，不保存生产密码，通过 --ignore-scripts 安装，并先在独立 profile 验证。当前最低兼容 DSH 0.1.2-rc.1。","en":"High risk: the plugin has SSH/SFTP authority to execute shell commands and read, modify, or upload files on remote hosts. Optionally saved passwords use local AES-256-GCM files and do not provide system-keychain isolation. Web routes restrict loopback access and same-origin writes, server fingerprints are verified, and command/file mutations use DSH permission confirmation. Use a low-privilege account on a test host, avoid storing production passwords, install with --ignore-scripts, and validate in a separate profile first. Minimum compatibility is DSH 0.1.2-rc.1."}}},{"id":"softspark/dsh-file-preview","order":305,"name":"dsh-file-preview","owner":"softspark","repo":"softspark/dsh-file-preview","url":"https://github.com/softspark/dsh-file-preview","category":"ui","description":{"zh":"在 DSH 对话里直接预览代码、Markdown、HTML/SVG、图片和 PDF，不支持的文件继续走系统原生打开。","en":"Previews code, Markdown, sanitized HTML and SVG, images and PDFs inside a DSH conversation while leaving unsupported files to the native opener."},"added":"2026-09-06","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":1,"watchers":0,"pushedAt":"2026-09-11T06:24:33Z","updatedAt":"2026-09-06T19:56:26Z","createdAt":"2026-09-04T08:58:52Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://github.com/softspark/dsh-file-preview#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@softspark/dsh-file-preview","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f42f4981bcf189ade05ccde9b3cf54438c96b2b1","installCommand":"dsh plugin --profile web add github:softspark/dsh-file-preview#f42f4981bcf189ade05ccde9b3cf54438c96b2b1","discovery":{"source":"topic","firstSeenAt":"2026-09-06T22:44:45.564Z","lastSeenAt":"2026-09-16T12:05:15.692Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-16T12:05:15.692Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"softspark/dsh-file-preview@f42f4981bcf189ade05ccde9b3cf54438c96b2b1#scan-2","versionCount":1,"latestCommit":"f42f4981bcf189ade05ccde9b3cf54438c96b2b1","latestCheckedAt":"2026-09-16T12:05:15.692Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"softspark/dsh-file-preview","pickedAt":"2026-09-06T22:44:45.564Z","reviewedCommit":"26cf72e1c147d659df5d8f152f6d042bd8a84b41","category":"ui","summary":{"zh":"在 DSH 对话里直接预览代码、Markdown、HTML/SVG、图片和 PDF，不支持的文件继续走系统原生打开。","en":"Previews code, Markdown, sanitized HTML and SVG, images and PDFs inside a DSH conversation while leaving unsupported files to the native opener."},"reason":{"zh":"远程或容器工作区里点击 Agent 产物即可在网页查看；Host 端按会话工作区或成功写入记录授权，内容按类型限流，并对活动文档做白名单净化。","en":"Makes agent outputs easy to inspect in remote or container workspaces, with host-side authorization from session workspace or successful-write provenance, bounded reads and allowlist sanitization for active documents."},"safety":{"risk":"medium","zh":"中风险：插件新增一个 Host 文件预览 Remote，可把已授权工作区文件或该会话成功生成的文件传给当前浏览器；文本上限 1 MiB、图片和 PDF 上限 8 MiB，HTML/SVG 经过白名单重建。未发现外部网络、遥测或生命周期脚本；工作区可能含 .env 等敏感文件，请只在可信且受保护的 DSH Web 会话中使用。","en":"Medium risk: the plugin adds a Host preview Remote that can send authorized workspace files or files successfully produced by the session to the current browser; text is capped at 1 MiB, images and PDFs at 8 MiB, and HTML/SVG are rebuilt through allowlists. No external network client, telemetry or lifecycle scripts were found; workspaces may contain sensitive files such as .env, so use it only in a trusted and protected DSH Web session."}}},{"id":"softspark/dsh-process-console","order":306,"name":"dsh-process-console","owner":"softspark","repo":"softspark/dsh-process-console","url":"https://github.com/softspark/dsh-process-console","category":"ui","description":{"zh":"在 DSH 会话里增加 Processes 标签页，把主 Agent、子 Agent和外部委派的实时请求、工具调用、结果与耗时放进同一棵进程树。","en":"Adds a Processes tab that places the main agent, subagents and external delegations in one live tree with requests, tool calls, results and timing."},"added":"2026-09-06","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-08T10:04:21Z","updatedAt":"2026-09-08T10:06:09Z","createdAt":"2026-09-05T14:34:13Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@softspark/dsh-process-console","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e34192c2231071e913d5e55312940e1bb3d8e8a4","installCommand":"dsh plugin --profile web add github:softspark/dsh-process-console#e34192c2231071e913d5e55312940e1bb3d8e8a4","discovery":{"source":"topic","firstSeenAt":"2026-09-06T22:44:45.564Z","lastSeenAt":"2026-09-16T12:02:15.280Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-16T12:02:15.280Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"softspark/dsh-process-console@e34192c2231071e913d5e55312940e1bb3d8e8a4#scan-2","versionCount":1,"latestCommit":"e34192c2231071e913d5e55312940e1bb3d8e8a4","latestCheckedAt":"2026-09-16T12:02:15.280Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"softspark/dsh-process-console","pickedAt":"2026-09-06T22:44:45.564Z","reviewedCommit":"225f11ddca0fb3d5d313313cac2934e5ab1c9038","category":"ui","summary":{"zh":"在 DSH 会话里增加 Processes 标签页，把主 Agent、子 Agent和外部委派的实时请求、工具调用、结果与耗时放进同一棵进程树。","en":"Adds a Processes tab that places the main agent, subagents and external delegations in one live tree with requests, tool calls, results and timing."},"reason":{"zh":"多 Agent 任务出问题时无需逐个打开子会话；可以沿进程树查看每一步的原始参数、结果、待审批和错误，并追踪仍在运行的调用。","en":"Makes multi-agent debugging practical by exposing each process raw arguments, results, pending approvals, errors and live calls without opening child sessions one by one."},"safety":{"risk":"medium","zh":"中风险：插件是浏览器端只读视图，不新增 Host Remote、工具、网络客户端、遥测或生命周期脚本；它会集中展示已授权会话中的提示、推理、工具参数、结果和审批，其中可能含敏感信息。复制只在显式点击后发生，请仅在可信浏览器会话中使用。","en":"Medium risk: this is a read-only browser view with no new Host Remote, tool, network client, telemetry or lifecycle script; it centralizes prompts, reasoning, tool arguments, results and approvals from already authorized sessions, which may contain sensitive data. Copying requires an explicit click, so use it only in a trusted browser session."}}},{"id":"michengai/dsh-simplify","order":307,"name":"dsh-simplify","owner":"michengai","repo":"michengai/dsh-simplify","url":"https://github.com/michengai/dsh-simplify","category":"tools","description":{"zh":"把当前 Git 变更收敛为可核对的文件与行范围，再交给当前 DSH Agent 做保持行为的代码简化。","en":"Scopes current Git changes to verifiable files and line ranges, then asks the active DSH Agent to simplify code while preserving behavior."},"added":"2026-09-06","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-06T16:48:11.434Z","lastSeenAt":"2026-09-06T16:48:11.434Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-06T16:48:11.434Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"michengai/dsh-simplify","pickedAt":"2026-09-06T16:48:11.434Z","reviewedCommit":"d20229e3afaa818c602a5d4f456df0738126037e","category":"tools","summary":{"zh":"把当前 Git 变更收敛为可核对的文件与行范围，再交给当前 DSH Agent 做保持行为的代码简化。","en":"Scopes current Git changes to verifiable files and line ranges, then asks the active DSH Agent to simplify code while preserving behavior."},"reason":{"zh":"把常见的变更清理流程做成一条 /simplify 命令；支持未跟踪文件、暂存区、指定提交和路径筛选，并在入队前复核 HEAD、索引与文件哈希。","en":"Turns changed-code cleanup into one /simplify command, with untracked, staged, ref and path scopes plus HEAD, index and file-hash verification before enqueueing."},"safety":{"risk":"medium","zh":"运行时仅执行只读 Git 查询，无遥测、运行时依赖或安装脚本；它会让当前 Agent 读取并编辑所选代码，代码可能发送给已配置的模型服务商，行范围属于提示约束而非硬权限边界。","en":"Runtime behavior is limited to read-only Git queries with no telemetry, runtime dependencies or install scripts; it asks the active Agent to read and edit selected code, which may reach the configured model provider, and line scope is prompt guidance rather than a hard permission boundary."}}},{"id":"pure-craft/dsh-capability-panel","order":308,"name":"dsh-capability-panel","owner":"pure-craft","repo":"pure-craft/dsh-capability-panel","url":"https://github.com/pure-craft/dsh-capability-panel","category":"tools","description":{"zh":"在 DSH Web 中查看当前会话真正进入模型上下文的 Skills、MCP 与系统工具，并按会话或 preset 即时开关能力。","en":"Inspect the Skills, MCP servers, and system tools truly present in a DSH session context, then toggle them per session or preset."},"added":"2026-09-05","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-05T22:47:42.835Z","lastSeenAt":"2026-09-05T22:47:42.835Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-05T22:47:42.835Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"pure-craft/dsh-capability-panel","pickedAt":"2026-09-05T22:47:42.835Z","reviewedCommit":"f7657972d555c160b7a2eb923349d2ddde3d0462","category":"tools","summary":{"zh":"在 DSH Web 中查看当前会话真正进入模型上下文的 Skills、MCP 与系统工具，并按会话或 preset 即时开关能力。","en":"Inspect the Skills, MCP servers, and system tools truly present in a DSH session context, then toggle them per session or preset."},"reason":{"zh":"把已安装与模型当前可见区分开，直接标出 loaded、truncated、evicted 状态；开关可逆，390 余项测试和覆盖率门禁已在 CI 通过。","en":"It separates installed capabilities from what the model can actually see, exposes loaded, truncated, and evicted states, and adds reversible scoped toggles backed by 390+ tests and CI coverage gates."},"safety":{"risk":"low","zh":"低风险：无运行时依赖、安装脚本、外部网络、遥测或密钥读取；只经回环接口写入 DSH settings 与本地统计。能力开关会改变 Agent 行为，建议先在单会话范围试用。","en":"Low risk: no runtime dependencies, install hooks, outbound network, telemetry, or credential reads; it only writes DSH settings and local stats through a loopback-only API. Capability switches alter agent behavior, so start at session scope."}}},{"id":"extracurricular-ai/dsh-filesnap","order":309,"name":"dsh-filesnap","owner":"extracurricular-ai","repo":"extracurricular-ai/dsh-filesnap","url":"https://github.com/extracurricular-ai/dsh-filesnap","category":"session","description":{"zh":"把 DSH 对话与相关文件一起做成可回退检查点；/rewind 会先 fork 会话再恢复文件，/redo 可撤销，Git、stash 与工作树状态保持原样。","en":"Creates rewindable checkpoints for a DSH conversation and its related files. /rewind forks the session before restoring files, /redo reverses the operation, and Git, stash, and worktree state stay untouched."},"added":"2026-09-04","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-04T22:46:34.982Z","lastSeenAt":"2026-09-04T22:46:34.982Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-04T22:46:34.982Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"extracurricular-ai/dsh-filesnap","pickedAt":"2026-09-04T22:46:34.982Z","reviewedCommit":"857481528bd17c2ea5434c8d358ad6ede7f8b844","category":"session","summary":{"zh":"把 DSH 对话与相关文件一起做成可回退检查点；/rewind 会先 fork 会话再恢复文件，/redo 可撤销，Git、stash 与工作树状态保持原样。","en":"Creates rewindable checkpoints for a DSH conversation and its related files. /rewind forks the session before restoring files, /redo reverses the operation, and Git, stash, and worktree state stay untouched."},"reason":{"zh":"v0.2.2 新增 dsh.bundle，标准安装后即可自动挂载，并明确适配官方 0.1.2-rc.1。源码、GitHub Release 与带 provenance 的 npm 包绑定同一 40 位提交；CI 覆盖真实 Harness、预编译 Rust 引擎、类型检查和测试，生产依赖审计为零漏洞。","en":"v0.2.2 adds a dsh.bundle for automatic mounting after the standard install and explicitly targets official DSH 0.1.2-rc.1. Source, GitHub Release, and the provenance-backed npm package resolve to the same 40-character commit; CI exercises a real Harness checkout, the prebuilt Rust engine, type checks, and tests, with zero production audit findings."},"safety":{"risk":"medium","zh":"中风险：插件每轮读取工作区及被 DSH 文件工具观测到的外部路径，并把内容以未加密快照存入平台数据目录；回退会覆盖或删除与目标快照不一致的文件，同时执行预编译 filesnap 原生二进制。它要求明确选择 turn，活跃 turn 禁止回退，写入前创建救援点，/redo 可恢复；忽略规则对捕获、恢复和删除保持一致，发布带 npm provenance 且无 install/postinstall。卸载后，含自定义事件的会话会暂时无法打开，重装可恢复。建议先在测试仓库验证，用 .filesnapignore 排除密钥和大文件，并保留常规备份。","en":"Medium risk: the plugin reads the workspace and external paths observed through DSH file tools, stores their contents unencrypted in the platform data directory, executes a prebuilt native filesnap binary, and may overwrite or delete files during restore. It requires an explicit turn, refuses rewinds during an active turn, captures a rescue point before writes, supports /redo, and applies ignore rules symmetrically to capture, restore, and deletion. Releases carry npm provenance and have no install/postinstall hook. Uninstalling temporarily makes sessions containing its custom events unreadable until the plugin is reinstalled. Validate it in a test repository first, exclude secrets and large files with .filesnapignore, and keep normal backups."}}},{"id":"higekibaka/dsh-ciel","order":310,"name":"dsh-ciel","owner":"higekibaka","repo":"higekibaka/dsh-ciel","url":"https://github.com/higekibaka/dsh-ciel","category":"workflow","description":{"zh":"为 DSH 引入可配置的第二模型顾问与批评者：规划前提供思路、先例和陷阱，回复后通过只读取证生成块级批注，支持分诊并把选中的意见回传主模型。","en":"Adds configurable second-model advisor and critic roles to DSH: advice before planning, then read-only evidence gathering and block-level annotations after a draft, with triage and selected feedback returned to the main model."},"added":"2026-09-04","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-04T16:47:41.371Z","lastSeenAt":"2026-09-04T16:47:41.371Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-04T16:47:41.371Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"higekibaka/dsh-ciel","pickedAt":"2026-09-04T16:47:41.371Z","reviewedCommit":"c2e85189db188e3af3a1777c6918c7a59f91f9e6","category":"workflow","summary":{"zh":"为 DSH 引入可配置的第二模型顾问与批评者：规划前提供思路、先例和陷阱，回复后通过只读取证生成块级批注，支持分诊并把选中的意见回传主模型。","en":"Adds configurable second-model advisor and critic roles to DSH: advice before planning, then read-only evidence gathering and block-level annotations after a draft, with triage and selected feedback returned to the main model."},"reason":{"zh":"v0.13.0 把评审升级为存疑、核实、断言流程，只开放 read、grep、glob，并用默认 5 次预算和证据强制约束批评者；48 项测试、GitHub CI 与 npm Trusted Publishing 均通过，npm provenance 精确绑定已核实提交，安装路径明确。","en":"v0.13.0 upgrades review into suspect, verify, and assert phases, allowing only read, grep, and glob while enforcing a default five-call budget and evidence-backed findings. All 48 tests and GitHub CI pass, npm Trusted Publishing provenance matches the verified commit, and installation is documented."},"safety":{"risk":"medium","zh":"中风险：顾问会把问题和提供的上下文发送给配置的第二模型；批评者还会发送当前请求、工具摘要与回复草稿，并可读取、搜索工作区文件，读到的内容会经所选模型提供商离开本机。源码未发现 Shell、写工作区、浏览器控制、独立遥测、直接外联或安装脚本；评审和分诊记录会写入 DSH_HOME 下的 dsh-advisor JSONL。敏感仓库应使用可信或私有模型路由，保持较低探索预算，并先核对顾问与批评者 provider。","en":"Medium risk: the advisor sends the question and supplied context to the configured second model; the critic also sends the request, tool digest, and draft, and may read or search workspace files whose contents then leave the machine through the selected provider. Static review found no shell execution, workspace writes, browser control, independent telemetry, direct network client, or install scripts; review and triage records are stored as JSONL under DSH_HOME/dsh-advisor. For sensitive repositories, use a trusted or private provider, keep the exploration budget low, and verify both model routes first."}}},{"id":"rogerdigital/dsh-searxng","order":311,"name":"dsh-searxng","owner":"rogerdigital","repo":"rogerdigital/dsh-searxng","url":"https://github.com/rogerdigital/dsh-searxng","category":"tools","description":{"zh":"为 DSH 提供可自托管、免搜索 API Key 的 SearXNG web_search；一条 setup 命令可建立环回 Docker 服务或接入现有实例。","en":"Adds a self-hosted, search-API-key-free SearXNG web_search provider to DSH, with one-command setup for a loopback Docker service or an existing instance."},"added":"2026-09-02","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-09-02T22:42:39.725Z","lastSeenAt":"2026-09-02T22:42:39.725Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-09-02T22:42:39.725Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"rogerdigital/dsh-searxng","pickedAt":"2026-09-02T22:42:39.725Z","reviewedCommit":"510a5c98268d0b99f9342f0a97768846721eebba","category":"tools","summary":{"zh":"为 DSH 提供可自托管、免搜索 API Key 的 SearXNG web_search；一条 setup 命令可建立环回 Docker 服务或接入现有实例。","en":"Adds a self-hosted, search-API-key-free SearXNG web_search provider to DSH, with one-command setup for a loopback Docker service or an existing instance."},"reason":{"zh":"v0.2.1 已同时发布 GitHub Release 与 npm；核对的包内配置和 Docker 资产与发布源码一致。三平台验证、真实 Docker 管理流程和发布包 CLI 检查均通过，镜像固定到不可变 digest。","en":"v0.2.1 is published on both GitHub Releases and npm; reviewed package configuration and Docker assets match the release source. Cross-platform verification, the real managed-Docker journey, and packed CLI checks pass, with the image pinned by immutable digest."},"safety":{"risk":"medium","zh":"中风险：setup 会修改指定 DSH Profile，并执行 Docker Compose 创建容器、网络、卷和本地状态；搜索词会发送给 SearXNG 及其上游引擎，外部实例的授权头保存在 Profile。托管服务仅监听 127.0.0.1，镜像固定 digest，资源有归属标签，永久删除需确认，诊断输出会脱敏。建议使用独立 Profile，敏感查询接入可信自建实例。","en":"Medium risk: setup edits the selected DSH profile and runs Docker Compose to create a container, network, volume, and local state. Queries reach SearXNG and its upstream engines, while an external instance authorization header is stored in the profile. The managed service binds only to 127.0.0.1, pins the image digest, labels owned resources, confirms permanent deletion, and redacts diagnostics. Use a dedicated profile and a trusted private instance for sensitive searches."}}},{"id":"d3vmeh/dsh-logbook","order":312,"name":"dsh-logbook","owner":"d3vmeh","repo":"d3vmeh/dsh-logbook","url":"https://github.com/d3vmeh/dsh-logbook","category":"dev","description":{"zh":"补上 DSH 当前缺失的日志出口：把插件 warning/error 实时写到 stderr，并通过 /logs 按级别、插件名、关键词和时间查看最近日志。","en":"Adds the missing DSH log sink: streams plugin warnings and errors to stderr and provides /logs filters by level, logger name, text, and time."},"added":"2026-08-31","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-31T04:16:53.533Z","lastSeenAt":"2026-08-31T04:16:53.533Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-31T04:16:53.533Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"d3vmeh/dsh-logbook","pickedAt":"2026-08-31T04:16:53.533Z","reviewedCommit":"c4ced44ab9babd920631939e23f7e4b614d7f5b6","category":"dev","summary":{"zh":"补上 DSH 当前缺失的日志出口：把插件 warning/error 实时写到 stderr，并通过 /logs 按级别、插件名、关键词和时间查看最近日志。","en":"Adds the missing DSH log sink: streams plugin warnings and errors to stderr and provides /logs filters by level, logger name, text, and time."},"reason":{"zh":"它解决 Cordis 默认缓冲区会静默丢弃 warn/debug 的真实问题，特别适合排查插件加载、路由和模型故障；v0.1.0 的 Git 标签、npm gitHead 与发布包源码完全一致，依赖审计为零漏洞。","en":"It fixes a real Cordis behavior where the default buffer silently drops warn and debug records, making plugin loading, routing, and model failures much easier to diagnose. The v0.1.0 Git tag, npm gitHead, and packaged source match exactly, with zero audit findings."},"safety":{"risk":"medium","zh":"中风险：插件自身不访问文件、网络、凭据或 Shell，只在内存环形缓冲区保存日志并输出到 stderr；但它会捕获所有插件日志，日志内容可能包含端点、路径或被其他插件误写入的敏感值。仅在可信本机使用，执行 /logs 或分享终端输出前先检查并脱敏。","en":"Medium risk: the plugin itself does not access files, network, credentials, or shell; it keeps logs in an in-memory ring and writes selected records to stderr. However, it captures logs from every plugin, which may include endpoints, paths, or sensitive values logged by another plugin. Use it on a trusted local host and redact output before sharing."}}},{"id":"d3vmeh/dsh-turn-doctor","order":313,"name":"dsh-turn-doctor","owner":"d3vmeh","repo":"d3vmeh/dsh-turn-doctor","url":"https://github.com/d3vmeh/dsh-turn-doctor","category":"dev","description":{"zh":"记录模型请求的首字节、最长静默与总耗时，判断一次失败究竟来自 DSH 看门狗、SDK、Undici、模型服务、压缩或工具超时。","en":"Measures time to first byte, longest silent gap, and total request time to identify whether a failed turn came from DSH, the SDK, Undici, the model server, compaction, or a tool timeout."},"added":"2026-08-30","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":1,"watchers":0,"pushedAt":"2026-09-03T16:56:57Z","updatedAt":"2026-09-03T14:22:58Z","createdAt":"2026-08-30T19:05:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-turn-doctor","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7282f61460c7f18bff61a11f3cf2e05b879faf0e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-30T22:15:49.501Z","lastSeenAt":"2026-09-16T12:02:15.089Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-16T12:02:15.089Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"d3vmeh/dsh-turn-doctor@7282f61460c7f18bff61a11f3cf2e05b879faf0e#scan-2","versionCount":1,"latestCommit":"7282f61460c7f18bff61a11f3cf2e05b879faf0e","latestCheckedAt":"2026-09-16T12:02:15.089Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"d3vmeh/dsh-turn-doctor","pickedAt":"2026-08-30T22:15:49.501Z","reviewedCommit":"db7d111f3e78ab0d1e6e84295fc5b0622554b05a","category":"dev","summary":{"zh":"记录模型请求的首字节、最长静默与总耗时，判断一次失败究竟来自 DSH 看门狗、SDK、Undici、模型服务、压缩或工具超时。","en":"Measures time to first byte, longest silent gap, and total request time to identify whether a failed turn came from DSH, the SDK, Undici, the model server, compaction, or a tool timeout."},"reason":{"zh":"它把最难排查的超时层级变成明确诊断，并提供 /why 查看当前会话及子 Agent 的最近结论；v0.1.0 的 Git 标签、npm gitHead 与包内源码完全一致，依赖审计为零漏洞。","en":"It turns ambiguous timeout layers into actionable diagnoses and adds /why for recent verdicts from the current session and subagents. The v0.1.0 Git tag, npm gitHead, and packaged source match exactly, with zero audit findings."},"safety":{"risk":"low","zh":"低风险：只监听本地 LLM 流和会话错误事件，记录时间、错误码与诊断结论；不读取提示正文，不访问凭据、文件或网络，也不执行 Shell。原始错误信息会进入本地 session log，分享日志前仍应检查是否包含端点或服务端细节。","en":"Low risk: it only observes local LLM stream timing and session error events, storing timing, error codes, and diagnoses. It does not read prompt text, access credentials or files, call the network, or execute shell commands. Raw errors are written to the local session log, so review logs before sharing them."}}},{"id":"rianico/dsh-better-edit","order":314,"name":"dsh-better-edit","owner":"rianico","repo":"rianico/dsh-better-edit","url":"https://github.com/rianico/dsh-better-edit","category":"tools","description":{"zh":"用三字符内容哈希给代码行生成稳定锚点，为 DSH 提供可校验的 read、edit 和跨重启 undo_last_edit；外部改动、陈旧锚点或歧义范围会在写入前被拒绝。","en":"Adds hash-anchored read, edit, and restart-persistent undo_last_edit tools to DSH. External changes, stale anchors, and ambiguous ranges are rejected before any write."},"added":"2026-08-29","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-29T22:13:55.864Z","lastSeenAt":"2026-08-29T22:13:55.864Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-29T22:13:55.864Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"rianico/dsh-better-edit","pickedAt":"2026-08-29T22:13:55.864Z","reviewedCommit":"bf0d967f183a07cf21ccd534d08d9cd4014108df","category":"tools","summary":{"zh":"用三字符内容哈希给代码行生成稳定锚点，为 DSH 提供可校验的 read、edit 和跨重启 undo_last_edit；外部改动、陈旧锚点或歧义范围会在写入前被拒绝。","en":"Adds hash-anchored read, edit, and restart-persistent undo_last_edit tools to DSH. External changes, stale anchors, and ambiguous ranges are rejected before any write."},"reason":{"zh":"v0.5.0 已正式发布，npm 包的 gitHead 与已核实标签提交一致，并明确适配本机 DSH 0.1.0-rc.6。新版本补齐多行锚点自愈、HASH 预览误写防护、原子写入与用户可见的漂移提示；安装、配置、持久化位置和失败回滚路径均有源码与测试覆盖。","en":"v0.5.0 is released, with the npm gitHead matching the verified tagged commit and explicit compatibility with local DSH 0.1.0-rc.6. It adds multi-line anchor healing, guards against accidental HASH preview writes, atomic file writes, and user-visible drift details, with documented install, configuration, persistence, and rollback paths backed by source and tests."},"safety":{"risk":"medium","zh":"中风险：插件会覆盖 DSH 内置 read/edit 工具、写入工作区文件，并把哈希、已展示行和撤销快照保存在 DSH home 下的 SQLite 中，源码内容可能进入本地撤销历史。运行时未发现网络外发、遥测、凭据读取或 Shell 执行；默认不会修改 .gitignore。清单含 prepare 脚本（tsc 与 husky），Git/源码安装可能执行它，建议只走 npm 包安装，并先在测试仓库验证撤销与沙箱边界。","en":"Medium risk: the plugin shadows DSH built-in read/edit tools, writes workspace files, and stores hashes, served rows, and undo snapshots in SQLite under DSH home, so source content may enter local undo history. Runtime code shows no network egress, telemetry, credential access, or shell execution, and .gitignore mutation is off by default. The manifest includes a prepare script using tsc and husky that may run for Git/source installs; use the npm package route and validate undo and sandbox boundaries in a test repository first."}}},{"id":"wsl043/dsh-codex-subscription","order":315,"name":"dsh-codex-subscription","owner":"wsl043","repo":"wsl043/dsh-codex-subscription","url":"https://github.com/wsl043/dsh-codex-subscription","category":"tools","description":{"zh":"把现有 ChatGPT/Codex 订阅接入 DSH 原生模型选择、Agent 工具、订阅搜索、配额和 GPT Image；无需 OpenAI API Key 或 Codex CLI。","en":"Connects an existing ChatGPT/Codex subscription to DSH native model selection, agent tools, subscription search, quota, and GPT Image without an OpenAI API key or Codex CLI."},"added":"2026-08-29","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-29T16:13:26.929Z","lastSeenAt":"2026-08-29T16:13:26.929Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-29T16:13:26.929Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"wsl043/dsh-codex-subscription","pickedAt":"2026-08-29T16:13:26.929Z","reviewedCommit":"109477ad1364ddc7ce4a1674a648452a521af65f","category":"tools","summary":{"zh":"把现有 ChatGPT/Codex 订阅接入 DSH 原生模型选择、Agent 工具、订阅搜索、配额和 GPT Image；无需 OpenAI API Key 或 Codex CLI。","en":"Connects an existing ChatGPT/Codex subscription to DSH native model selection, agent tools, subscription search, quota, and GPT Image without an OpenAI API key or Codex CLI."},"reason":{"zh":"v1.11.0 已正式发布并在官方 DSH Discussion 展示，标准插件安装路径明确；源码标签、GitHub Release 与带 SLSA provenance 的 npm 包均可核实。它覆盖本机 DSH 0.1.0-rc.6，并为图片原图下载、区域备注和可选配额续航估算补齐了完整交互。","en":"v1.11.0 is released and showcased in the official DSH Discussion with a clear standard plugin install path. Its source tag, GitHub Release, and npm package with SLSA provenance are verifiable. It supports local DSH 0.1.0-rc.6 and completes the image workflow with exact-original downloads, region notes, and an opt-in quota runway estimate."},"safety":{"risk":"medium","zh":"中风险：OAuth 令牌交由 DSH 凭据服务保存，模型请求、搜索词、图片与配额操作会发送到 OpenAI/ChatGPT 官方端点；插件可打开授权页、读取系统代理，并在明确确认后消耗一次配额重置。发布包无 install/postinstall、遥测或任意 Shell，外部打开仅允许 https://auth.openai.com。建议先确认账户资格与订阅规则，在本机环回地址使用，并谨慎操作配额重置。","en":"Medium risk: OAuth tokens are stored through the DSH credential service, while prompts, search queries, images, and quota actions go to official OpenAI/ChatGPT endpoints. The plugin can open the authorization page, inspect system proxy settings, and consume one quota reset after explicit confirmation. The package has no install/postinstall hook, telemetry, or arbitrary shell execution, and external opening is restricted to https://auth.openai.com. Confirm account eligibility and subscription rules, keep DSH on loopback, and use quota reset carefully."}}},{"id":"lemoncat7/dsh-knowledge","order":316,"name":"dsh-knowledge","owner":"lemoncat7","repo":"lemoncat7/dsh-knowledge","url":"https://github.com/lemoncat7/dsh-knowledge","category":"workflow","description":{"zh":"为 DSH 提供本地或远程知识库、自动召回与回写，以及可由 AI 安全维护的分层笔记工作区。","en":"Adds local or remote knowledge bases, automatic recall and write-back, plus a hierarchical note workspace that AI can maintain through guarded tools."},"added":"2026-08-28","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-28T16:09:44.492Z","lastSeenAt":"2026-08-28T16:09:44.492Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-28T16:09:44.492Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"lemoncat7/dsh-knowledge","pickedAt":"2026-08-28T16:09:44.492Z","reviewedCommit":"6c1af1d3a6e7fff70e376f385bd33381afb2fd94","category":"workflow","summary":{"zh":"为 DSH 提供本地或远程知识库、自动召回与回写，以及可由 AI 安全维护的分层笔记工作区。","en":"Adds local or remote knowledge bases, automatic recall and write-back, plus a hierarchical note workspace that AI can maintain through guarded tools."},"reason":{"zh":"v2.0 把跨会话知识沉淀和普通资料管理接成一条完整工作流：笔记可搜索、分页读取、创建、修改、移动和安全删除，也能与知识文档建立稳定引用；会话签名句柄与当前用户指令校验让 AI 操作边界足够清楚，适合需要长期积累项目规范、研究资料和决策记录的人。","en":"Version 2.0 turns cross-session knowledge and ordinary reference material into one coherent workflow: notes can be searched, paged, created, edited, moved, safely deleted, and linked to knowledge documents. Session-signed handles and current-turn intent checks make the AI mutation boundary clear enough for people maintaining long-lived project rules, research material, and decisions."},"safety":{"risk":"medium","zh":"中风险：插件会持久化本地 SQLite 与笔记文件，回答后可再次调用当前模型做知识提取；远程模式会向配置的中央库发送内容，write/admin 权限还能修改或删除知识与笔记。默认使用本地后端、远程 API 关闭；远程地址强制 HTTPS（回环除外），令牌仅存摘要，AI 笔记操作要求当前用户直接指令并使用会话签名句柄，被引用笔记受删除保护。静态审查未发现 install/postinstall、Shell 执行或独立遥测。建议先用本地模式、保持 DSH 仅受信访问，并在授予远程 write/admin 前做好备份。","en":"Medium risk: the plugin persists local SQLite and note files, and may call the active model after a response to extract knowledge. Remote mode sends content to the configured central store, while write/admin permissions can modify or delete knowledge and notes. The default backend is local with the remote API disabled; remote URLs require HTTPS except on loopback, tokens are stored as hashes, AI note actions require a direct current-turn request and session-signed handles, and referenced notes are deletion-protected. Static review found no install/postinstall hook, shell execution, or independent telemetry. Start in local mode, keep DSH access trusted, back up data, and grant remote write/admin only when needed."}}},{"id":"rongyishuaige7/dsh-stats","order":317,"name":"dsh-stats","owner":"rongyishuaige7","repo":"rongyishuaige7/dsh-stats","url":"https://github.com/rongyishuaige7/dsh-stats","category":"ui","description":{"zh":"在 DSH Web 里按项目、日期和模型查看 Token、开发时长与估算费用，并查询多个模型平台的余额或套餐额度。","en":"Adds a DSH Web dashboard for project-, date-, and model-level token usage, development time, estimated cost, and provider balance or plan quota."},"added":"2026-08-27","curated":false,"topic":true,"stars":1,"forks":2,"openIssues":2,"watchers":0,"pushedAt":"2026-09-11T08:33:49Z","updatedAt":"2026-09-11T08:33:53Z","createdAt":"2026-08-15T05:18:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@rongyi7/dsh-stats","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"546c2b4a3ec293994c21d621fe2de875d9863c4b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-27T16:31:56.411Z","lastSeenAt":"2026-09-16T12:02:08.423Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-16T12:02:08.423Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"rongyishuaige7/dsh-stats@546c2b4a3ec293994c21d621fe2de875d9863c4b#scan-2","versionCount":1,"latestCommit":"546c2b4a3ec293994c21d621fe2de875d9863c4b","latestCheckedAt":"2026-09-16T12:02:08.423Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"rongyishuaige7/dsh-stats","pickedAt":"2026-08-27T16:31:56.411Z","reviewedCommit":"01690e81af7f1924ec2812f809bc28143f107c02","category":"ui","summary":{"zh":"在 DSH Web 里按项目、日期和模型查看 Token、开发时长与估算费用，并查询多个模型平台的余额或套餐额度。","en":"Adds a DSH Web dashboard for project-, date-, and model-level token usage, development time, estimated cost, and provider balance or plan quota."},"reason":{"zh":"v0.3.0 重做宿主聚合、模型计价与账户查询，peer 范围覆盖本机 DSH 0.1.0-rc.6；发布标签、40 位提交与 npm gitHead 一致，16 个发布文件逐字节匹配，npm 包有签名且只有 zod 一个运行依赖。仓库还提供 DSH 0.1.1-rc.2 浏览器冒烟证据。","en":"v0.3.0 rebuilds host-side aggregation, model pricing, and account queries, with a peer range covering the local DSH 0.1.0-rc.6. The release tag, immutable commit, and npm gitHead match; all 16 published files match byte-for-byte, the npm tarball is signed, and zod is the only runtime dependency. The repository also documents a DSH 0.1.1-rc.2 browser smoke run."},"safety":{"risk":"medium","zh":"中风险：会读取本地会话日志、项目与模型元数据，并可把统计导出为 CSV/JSON；余额查询通过宿主 credentials 解析密钥，再发往官方或用户配置的同源 HTTPS 账户端点。自定义账户模板允许把密钥放入请求头或请求体。未发现遥测、Shell、install/postinstall；建议只在可信的环回 Web 使用，先核对自定义 Provider 的账户模板，导出前检查项目标识。","en":"Medium risk: it reads local session logs, project identity, and model metadata and can export statistics as CSV or JSON. Balance checks resolve secrets through the host credentials service and send them to official or user-configured same-origin HTTPS account endpoints; custom account templates may place keys in headers or bodies. No telemetry, shell execution, install, or postinstall hook was found. Keep the Web UI on trusted loopback, review custom provider account templates, and inspect project identity before exporting."}}},{"id":"sirilee/dsh-rewind","order":318,"name":"dsh-rewind","owner":"sirilee","repo":"sirilee/dsh-rewind","url":"https://github.com/sirilee/dsh-rewind","category":"session","description":{"zh":"把当前会话回退到任意更早的用户消息，并可连同已跟踪的工作区文件一起恢复；v0.4.2 加入原子检查点和日志化文件还原。","en":"Rewinds the current session to any earlier user message and can restore tracked workspace files with it; v0.4.2 adds atomic checkpoints and journaled file restores."},"added":"2026-08-27","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-27T10:07:28.673Z","lastSeenAt":"2026-08-27T10:07:28.673Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-27T10:07:28.673Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"sirilee/dsh-rewind","pickedAt":"2026-08-27T10:07:28.673Z","reviewedCommit":"64c78c3898a969a777b243c64d515fb5c30e269c","category":"session","summary":{"zh":"把当前会话回退到任意更早的用户消息，并可连同已跟踪的工作区文件一起恢复；v0.4.2 加入原子检查点和日志化文件还原。","en":"Rewinds the current session to any earlier user message and can restore tracked workspace files with it; v0.4.2 adds atomic checkpoints and journaled file restores."},"reason":{"zh":"它补上了 DSH 实用的 /rewind 体验：先看文件影响，再确认仅回退对话或同时还原代码。0.4.2 的 npm 发布包有 provenance、零运行时依赖，兼容本机 DSH rc.6，源码含崩溃恢复与重启场景测试。","en":"It adds a practical /rewind flow to DSH: preview file impact, then confirm a conversation-only rewind or restore code too. The 0.4.2 npm artifact has provenance, zero runtime dependencies, supports the local DSH rc.6, and includes crash-recovery and restart tests."},"safety":{"risk":"medium","zh":"中风险：both 模式会覆盖或删除已跟踪文件，并把文件原文备份到 ~/.dsh/rewind-snapshots；执行前展示影响清单并二次确认，跳过软链接和硬链接，0.4.2 使用原子写入与恢复日志。运行包无外部联网、遥测、密钥读取、Shell 执行或运行时依赖。崩溃后的继续/回滚能力目前只暴露为程序接口，尚无用户界面。","en":"Medium risk: both mode overwrites or deletes tracked files and stores their original contents under ~/.dsh/rewind-snapshots. It previews the impact and requires confirmation, skips symlinks and hard links, and uses atomic writes plus restore journals in 0.4.2. The runtime has no external network access, telemetry, credential reads, shell execution, or runtime dependencies. Continue/rollback after a crash is currently exposed only as a programmatic API, with no user-facing UI."}}},{"id":"icearia0219/dsh-memory-spaces","order":319,"name":"dsh-memory-spaces","owner":"icearia0219","repo":"icearia0219/dsh-memory-spaces","url":"https://github.com/icearia0219/dsh-memory-spaces","category":"session","description":{"zh":"让用户把指定会话明确连接到命名记忆空间，按来源、使用者和注入模式控制跨会话共享。","en":"Adds explicitly governed cross-session memory spaces with separate source, consumer, and injection controls."},"added":"2026-08-26","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-26T10:06:58.123Z","lastSeenAt":"2026-08-26T10:06:58.123Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-26T10:06:58.123Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"icearia0219/dsh-memory-spaces","pickedAt":"2026-08-26T10:06:58.123Z","reviewedCommit":"5944dd403e0a184e68d2116db2a3f3919e4042e3","category":"session","summary":{"zh":"让用户把指定会话明确连接到命名记忆空间，按来源、使用者和注入模式控制跨会话共享。","en":"Adds explicitly governed cross-session memory spaces with separate source, consumer, and injection controls."},"reason":{"zh":"适合长期项目在调研、架构和编码会话间复用已确认约束；本地 Profile 级 SQLite、发送前预览、来源与版本记录让共享边界可检查。","en":"Useful for long-running projects that reuse verified constraints across research, architecture, and coding sessions; profile-local SQLite, pre-send previews, provenance, and versioning keep sharing inspectable."},"safety":{"risk":"medium","zh":"中风险：记忆与快照以未加密 SQLite 存在本机，逻辑删除不保证物理擦除；注入内容仍有 Prompt Injection 风险。快照链接是可过期 Bearer 凭证，可经浏览器历史、日志或剪贴板泄漏；可选历史摘要会把所选内容发送给当前模型服务。数据库在非 Windows 设为 0600，旧 schema 迁移备份仍需用户保护。","en":"Medium risk: memories and snapshots remain in unencrypted local SQLite, and logical deletion is not secure erasure; injected content can still carry prompt injection. Expiring bearer snapshot URLs may leak through browser history, logs, or clipboard history, and optional history summaries send selected content to the active model provider. The database is chmod 0600 on non-Windows; legacy-schema migration backups still require user protection."}}},{"id":"yangbobo2021/relay-dsh-plugin-codex","order":320,"name":"relay-dsh-plugin-codex","owner":"yangbobo2021","repo":"yangbobo2021/relay-dsh-plugin-codex","url":"https://github.com/yangbobo2021/relay-dsh-plugin-codex","category":"workflow","description":{"zh":"把官方 Codex App Server 接入 DSH 会话模式，保留流式输出、审批、提问、图片和历史续聊。","en":"Adds the official Codex App Server as a native DSH conversation mode with streaming, approvals, questions, images, and resumable history."},"added":"2026-08-26","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-26T04:06:02.849Z","lastSeenAt":"2026-08-26T04:06:02.849Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-26T04:06:02.849Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"yangbobo2021/relay-dsh-plugin-codex","pickedAt":"2026-08-26T04:06:02.849Z","reviewedCommit":"5fff6c6c825f8d817fc640c5b89f799786ecc045","category":"workflow","summary":{"zh":"把官方 Codex App Server 接入 DSH 会话模式，保留流式输出、审批、提问、图片和历史续聊。","en":"Adds the official Codex App Server as a native DSH conversation mode with streaming, approvals, questions, images, and resumable history."},"reason":{"zh":"适合把现有 Codex 登录与会话历史带进 DSH；0.1.2 固定官方运行时版本，本机 Node 22 与 DSH rc.6 满足其声明范围，CI 和 npm 发布来源可核验。","en":"A practical bridge for bringing existing Codex authentication and conversation history into DSH; v0.1.2 pins the official runtime, matches the local Node 22 and DSH rc.6 ranges, and has verifiable CI and npm provenance."},"safety":{"risk":"medium","zh":"中风险：会启动官方 Codex 子进程，并把提示词和所选文件交给 Codex 服务；默认 workspace-write 与按需审批，Workspace 沙盒禁网。远程导入需要 Bearer Token，本机 loopback 路由对本地进程开放；App Server 以 analytics 默认启用参数启动。","en":"Medium risk: it spawns the official Codex runtime and sends prompts and selected files to the Codex service. Defaults are workspace-write, on-request approvals, and no network in the workspace sandbox. Remote import requires a bearer token, loopback routes remain callable by local processes, and App Server starts with analytics enabled by default."}}},{"id":"tyeclipse/dsh-netdoctor","order":321,"name":"dsh-netdoctor","owner":"tyeclipse","repo":"TYEclipse/dsh-netdoctor","url":"https://github.com/TYEclipse/dsh-netdoctor","category":"tools","description":{"zh":"给 DSH Agent 增加 DNS、Ping、端口、TLS、路由、公网 IP 与 WHOIS 七种结构化网络诊断工具。","en":"Adds seven structured network diagnostics to DSH agents: DNS, ping, TCP port, TLS, traceroute, public IP, and WHOIS."},"added":"2026-08-25","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":6,"watchers":0,"pushedAt":"2026-09-10T16:43:04Z","updatedAt":"2026-09-12T14:37:49Z","createdAt":"2026-08-13T17:32:56Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-netdoctor","version":"0.2.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2b940860f537551d8306da065581b39809c3e564","installCommand":"dsh plugin --profile web add github:TYEclipse/dsh-netdoctor#2b940860f537551d8306da065581b39809c3e564","discovery":{"source":"topic","firstSeenAt":"2026-08-25T22:04:54.042Z","lastSeenAt":"2026-09-16T12:02:09.457Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-16T12:02:09.457Z","findings":[],"filesInspected":["package.json","dist/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"tyeclipse/dsh-netdoctor@2b940860f537551d8306da065581b39809c3e564#scan-2","versionCount":1,"latestCommit":"2b940860f537551d8306da065581b39809c3e564","latestCheckedAt":"2026-09-16T12:02:09.457Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"tyeclipse/dsh-netdoctor","pickedAt":"2026-08-25T22:04:54.042Z","reviewedCommit":"289f3df178a07fa48b2578ae4072cb656232461b","category":"tools","summary":{"zh":"给 DSH Agent 增加 DNS、Ping、端口、TLS、路由、公网 IP 与 WHOIS 七种结构化网络诊断工具。","en":"Adds seven structured network diagnostics to DSH agents: DNS, ping, TCP port, TLS, traceroute, public IP, and WHOIS."},"reason":{"zh":"零运行时依赖、兼容本机 DSH rc.6，源码与 v0.2.0 发布完整；固定参数调用系统工具并设硬超时，适合稳定排查连通性、DNS 与证书问题。","en":"It has zero runtime dependencies, supports the local DSH rc.6 line, and ships complete source plus a tagged v0.2.0 release. Fixed argument arrays and hard timeouts make connectivity, DNS, and certificate checks predictable."},"safety":{"risk":"medium","zh":"中风险：工具不会写文件或修改系统，外部命令不经 Shell；但 Agent 可探测公网、局域网和本机端口，my_ip 默认会向 ip-api.com（HTTP）或 ipify 外发公网 IP，WHOIS 会向注册局发送查询目标。建议仅在可信会话启用，并将 includeGeo 设为 false。","en":"Medium risk: the tools do not write files or change system state, and subprocesses never use a shell. However, an agent can probe public, LAN, and loopback targets; my_ip sends the public IP to ip-api.com over HTTP or to ipify by default, and WHOIS sends the queried target to registries. Enable it only in trusted sessions and set includeGeo to false."}}},{"id":"tqsy114514/dsh-ui-appearance","order":322,"name":"dsh-ui-appearance","owner":"tqsy114514","repo":"tqsy114514/dsh-ui-appearance","url":"https://github.com/tqsy114514/dsh-ui-appearance","category":"ui","description":{"zh":"在 DSH Web 设置中实时调整主题色、壁纸或视频背景、透明度与模糊效果，并支持导入导出配色。","en":"Adds live theme colors, image or video wallpapers, opacity and blur controls, plus theme import and export to DSH Web settings."},"added":"2026-08-24","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-24T10:01:19.989Z","lastSeenAt":"2026-08-24T10:01:19.989Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-24T10:01:19.989Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"tqsy114514/dsh-ui-appearance","pickedAt":"2026-08-24T10:01:19.989Z","reviewedCommit":"c947e0f24a36802d660f9979d1b0e506590d4216","category":"ui","summary":{"zh":"在 DSH Web 设置中实时调整主题色、壁纸或视频背景、透明度与模糊效果，并支持导入导出配色。","en":"Adds live theme colors, image or video wallpapers, opacity and blur controls, plus theme import and export to DSH Web settings."},"reason":{"zh":"v0.1.5 有正式 GitHub Release 与签名 npm 包；发布包 source map 中 12 个源码文件与对应 Git 标签逐字一致，CI 的构建、97 项测试和 CodeQL 均通过，本机 rc.6 已具备它依赖的主题覆写与设置插槽接口。","en":"Version 0.1.5 has a formal GitHub release and a signed npm package. All 12 source files embedded in the published source map match the Git tag byte for byte, CI passes its build, 97 tests, and CodeQL, and the local rc.6 already exposes the theme override and settings slot APIs it uses."},"safety":{"risk":"medium","zh":"代码仅在浏览器侧修改主题与保存本地外观数据，没有遥测、密钥读取或宿主文件访问，生产依赖审计为零漏洞。插件仍拥有 DSH 同源页面执行权限；使用远程壁纸 URL 会向目标站点发起请求，Windows 一键脚本还会修改 profile。建议固定安装 npm 版本 dsh-ui-appearance@0.1.5，优先上传本地壁纸，并避免执行 main 分支上的可变安装脚本。","en":"The code only changes browser-side theme state and stores local appearance data, with no telemetry, credential access, or host file access; the production dependency audit reports zero vulnerabilities. It still executes in the DSH same-origin page, remote wallpaper URLs contact the chosen host, and the Windows helper edits the profile. Pin dsh-ui-appearance@0.1.5, prefer local wallpaper uploads, and avoid the mutable installer script from main."}}},{"id":"saya-ch/dsh-mobile","order":323,"name":"dsh-mobile","owner":"saya-ch","repo":"saya-ch/dsh-mobile","url":"https://github.com/saya-ch/dsh-mobile","category":"ui","description":{"zh":"让 Android App 或手机浏览器通过配对 HTTPS 网关继续使用同一份 DSH 会话、工作区、消息与工具，并支持局域网及可选远程通道。","en":"Lets an Android app or mobile browser use the same DSH sessions, workspaces, messages, and tools through a paired HTTPS gateway, with LAN and optional remote access."},"added":"2026-08-24","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-24T04:01:16.734Z","lastSeenAt":"2026-08-24T04:01:16.734Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-24T04:01:16.734Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"saya-ch/dsh-mobile","pickedAt":"2026-08-24T04:01:16.734Z","reviewedCommit":"e1f72c5130d97cc38dca8fa398f42487caad0cdc","category":"ui","summary":{"zh":"让 Android App 或手机浏览器通过配对 HTTPS 网关继续使用同一份 DSH 会话、工作区、消息与工具，并支持局域网及可选远程通道。","en":"Lets an Android app or mobile browser use the same DSH sessions, workspaces, messages, and tools through a paired HTTPS gateway, with LAN and optional remote access."},"reason":{"zh":"v0.2.0 兼容本机 DSH rc.6，GitHub Release 与 npm 包哈希一致，CI 覆盖网关、Android 和当前 DSH 前端契约；配对、设备撤销与移动布局完成度高。","en":"Version 0.2.0 supports the local DSH rc.6; its GitHub release and npm package hashes match, and CI covers the gateway, Android app, and current DSH frontend contract. Pairing, revocation, and the mobile layout are unusually complete."},"safety":{"risk":"high","zh":"配对设备等同完整 DSH 操作者；可选远程通道、兼容 DSH 所需的宽松脚本 CSP、mobile.js 以及未沙箱化的 host.mjs 会扩大攻击面。默认局域网与远程访问关闭，设备凭据只持久化摘要并限制文件权限，同时具备 CSRF、短会话、CIDR、撤销和速率限制。首试应只用可信局域网，并关闭远程和自定义扩展。","en":"A paired device is a fully trusted DSH operator. Optional remote tunnels, the permissive script CSP required by DSH, mobile.js, and unsandboxed host.mjs extensions expand the attack surface. LAN and remote access are off by default; only device-token digests are persisted with restricted permissions, and CSRF, short sessions, CIDR checks, revocation, and rate limits are enforced. First trials should stay on a trusted LAN with remote access and custom extensions disabled."}}},{"id":"hytime/dsh-client-ui-shortcuts","order":324,"name":"dsh-client-ui-shortcuts","owner":"hytime","repo":"hytime/dsh-client-ui-shortcuts","url":"https://github.com/hytime/dsh-client-ui-shortcuts","category":"ui","description":{"zh":"为 DSH Web 增加平台感知、可配置的键盘操作，可直接处理提问与审批，并快速切换会话和工作区。","en":"Adds platform-aware, configurable keyboard controls to DSH Web for questions, approvals, sessions, and workspaces."},"added":"2026-08-23","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-09-10T16:10:57Z","updatedAt":"2026-09-12T14:39:16Z","createdAt":"2026-08-20T17:27:32Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@hytime/dsh-client-ui-shortcuts","version":"0.1.21","lifecycleScripts":["prepare"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9aa6681931a0b969a531adf6965bf124583ce446","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-23T22:00:55.425Z","lastSeenAt":"2026-09-16T12:05:18.588Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-16T12:05:18.588Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"hytime/dsh-client-ui-shortcuts@9aa6681931a0b969a531adf6965bf124583ce446#scan-2","versionCount":1,"latestCommit":"9aa6681931a0b969a531adf6965bf124583ce446","latestCheckedAt":"2026-09-16T12:05:18.588Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"hytime/dsh-client-ui-shortcuts","pickedAt":"2026-08-23T22:00:55.425Z","reviewedCommit":"98d7de1790024f1f17c64a52ebdf8ff7e29fb303","category":"ui","summary":{"zh":"为 DSH Web 增加平台感知、可配置的键盘操作，可直接处理提问与审批，并快速切换会话和工作区。","en":"Adds platform-aware, configurable keyboard controls to DSH Web for questions, approvals, sessions, and workspaces."},"reason":{"zh":"v0.1.12 同时有 GitHub Release、npm 签名包和对应源码标签；浏览器端实现覆盖高频交互，能明显减少鼠标操作。","en":"Version 0.1.12 has a GitHub release, a signed npm package, and a matching source tag; its browser-side implementation covers the highest-frequency DSH interactions."},"safety":{"risk":"medium","zh":"未发现遥测、外部网络请求、安装生命周期脚本或本地文件访问。插件可提交提问答案、允许一次工具审批、取消任务以及创建或切换会话，需防范回车快捷键误操作；要求 DSH 0.1.0-rc.8 或更高版本。","en":"No telemetry, external network requests, install lifecycle scripts, or local file access were found. The plugin can submit answers, allow a tool once, cancel tasks, and create or switch sessions, so Enter-key mistakes remain possible; DSH 0.1.0-rc.8 or newer is required."}}},{"id":"dhicoc/dsh-reverse-skill","order":325,"name":"@dhicoc/dsh-reverse-skill","owner":"dhicoc","repo":"dhicoc/dsh-reverse-skill","url":"https://github.com/dhicoc/dsh-reverse-skill","category":"dev","description":{"zh":"Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.","en":"Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack."},"added":"2026-08-23","curated":false,"topic":true,"stars":66,"forks":10,"openIssues":1,"watchers":66,"pushedAt":"2026-08-22T08:43:14Z","updatedAt":"2026-08-22T18:00:10Z","createdAt":"2026-08-14T13:32:19Z","license":"MIT","language":"PowerShell","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@dhicoc/dsh-reverse-skill","version":"1.0.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1bc4d63ee9a5268419170f4c5fb4a4e59e0e815c","installCommand":"dsh plugin --profile web add github:dhicoc/dsh-reverse-skill#1bc4d63ee9a5268419170f4c5fb4a4e59e0e815c","discovery":{"source":"topic","firstSeenAt":"2026-08-23","lastSeenAt":"2026-08-23T00:00:21.407Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-23T00:00:21.407Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"dhicoc/dsh-reverse-skill@1bc4d63ee9a5268419170f4c5fb4a4e59e0e815c#scan-2","versionCount":1,"latestCommit":"1bc4d63ee9a5268419170f4c5fb4a4e59e0e815c","latestCheckedAt":"2026-08-23T00:00:21.407Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"flg1217/dsh-llm-agy","order":326,"name":"@flg1217/dsh-llm-agy","owner":"flg1217","repo":"flg1217/dsh-llm-agy","url":"https://github.com/flg1217/dsh-llm-agy","category":"ui","description":{"zh":"AGY (Antigravity CLI) integration for DeepSeek Harness: LLM adapter subagents, deep web search, connectivity diagnostics panel","en":"AGY (Antigravity CLI) integration for DeepSeek Harness: LLM adapter subagents, deep web search, connectivity diagnostics panel"},"added":"2026-08-23","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-22T08:44:49Z","updatedAt":"2026-08-22T08:45:29Z","createdAt":"2026-08-16T12:21:27Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@flg1217/dsh-llm-agy","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"39899b46946ee96f638730232174d0086d13b9a6","installCommand":"dsh plugin --profile web add github:flg1217/dsh-llm-agy#39899b46946ee96f638730232174d0086d13b9a6","discovery":{"source":"topic","firstSeenAt":"2026-08-23","lastSeenAt":"2026-08-23T00:00:19.144Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-23T00:00:19.144Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"flg1217/dsh-llm-agy@39899b46946ee96f638730232174d0086d13b9a6#scan-2","versionCount":1,"latestCommit":"39899b46946ee96f638730232174d0086d13b9a6","latestCheckedAt":"2026-08-23T00:00:19.144Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"wqy8593521/dsh-model-pro","order":327,"name":"dsh-model-pro","owner":"wqy8593521","repo":"wqy8593521/dsh-model-pro","url":"https://github.com/wqy8593521/dsh-model-pro","category":"dev","description":{"zh":"Model Pro — DSH plugin for llm-pi-ai provider lifecycle management","en":"Model Pro — DSH plugin for llm-pi-ai provider lifecycle management"},"added":"2026-08-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-22T08:44:21Z","updatedAt":"2026-08-22T08:45:21Z","createdAt":"2026-08-18T15:09:28Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-model-pro","version":"1.1.6","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/host.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"16e7ef32e531d26b5d9acc5e3a78e2724e7f76cb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-23","lastSeenAt":"2026-08-23T00:00:20.270Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T00:00:20.270Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"wqy8593521/dsh-model-pro@16e7ef32e531d26b5d9acc5e3a78e2724e7f76cb#scan-2","versionCount":1,"latestCommit":"16e7ef32e531d26b5d9acc5e3a78e2724e7f76cb","latestCheckedAt":"2026-08-23T00:00:20.270Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"abbno/dsh-open-in-code","order":328,"name":"dsh-open-in-code","owner":"abbno","repo":"abbno/dsh-open-in-code","url":"https://github.com/abbno/dsh-open-in-code","category":"tools","description":{"zh":"dsh-open-in-code","en":"dsh-open-in-code"},"added":"2026-08-23","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-22T08:44:28Z","updatedAt":"2026-08-22T08:44:59Z","createdAt":"2026-08-22T08:12:43Z","license":"Apache-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-open-in-code","version":"0.0.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5bdbd2c7af77c42b97e57b19fa3947211afe550b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-23","lastSeenAt":"2026-08-23T00:00:20.205Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T00:00:20.205Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"abbno/dsh-open-in-code@5bdbd2c7af77c42b97e57b19fa3947211afe550b#scan-2","versionCount":1,"latestCommit":"5bdbd2c7af77c42b97e57b19fa3947211afe550b","latestCheckedAt":"2026-08-23T00:00:20.205Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"may3rr/dsh-tool-result-guard","order":329,"name":"dsh-tool-result-guard","owner":"may3rr","repo":"may3rr/dsh-tool-result-guard","url":"https://github.com/may3rr/dsh-tool-result-guard","category":"tools","description":{"zh":"把超过阈值的纯文本工具结果先完整落盘，再以首尾预览、精确省略区间和可恢复路径返回给模型，补齐 DSH 中等长度输出在压缩时缺少取回入口的空档。","en":"Spills oversized plain-text tool results before pruning, then returns a bounded head/tail preview with exact omitted offsets and a recovery locator, closing DSH recoverability gaps for mid-sized outputs."},"added":"2026-08-22","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22T16:10:46.007Z","lastSeenAt":"2026-08-22T16:10:46.007Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-22T16:10:46.007Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"may3rr/dsh-tool-result-guard","pickedAt":"2026-08-22T16:10:46.007Z","reviewedCommit":"45313fed7dfb8063930457fdcd68f54f6ce4f449","category":"tools","summary":{"zh":"把超过阈值的纯文本工具结果先完整落盘，再以首尾预览、精确省略区间和可恢复路径返回给模型，补齐 DSH 中等长度输出在压缩时缺少取回入口的空档。","en":"Spills oversized plain-text tool results before pruning, then returns a bounded head/tail preview with exact omitted offsets and a recovery locator, closing DSH recoverability gaps for mid-sized outputs."},"reason":{"zh":"官方 rc.2 的压缩剪枝器默认在 8192 字符后仅保留首尾，而 spill policy 到 50000 字节才触发；该插件以零运行依赖和单命令安装提供可回读中段，适合经常跑构建、测试和日志分析的本地工作流。","en":"In official rc.2, the compaction pruner keeps only head and tail after 8,192 characters while spill policy starts at 50,000 bytes. This zero-runtime-dependency plugin gives build, test, and log-heavy workflows a recoverable middle through one-command installation."},"safety":{"risk":"medium","zh":"中风险：核心包无运行依赖、无生命周期脚本、无网络或遥测；它会把长工具输出写入权限为 0700 的目录和 0600 的文件，回退临时文件没有内建清理期限，输出可能含密钥或业务数据，建议沿用 Harness spillStore 并定期清理。","en":"Medium risk: the core package has no runtime dependencies, lifecycle scripts, network calls, or telemetry. It writes long tool output to 0700 directories and 0600 files; fallback temp files have no built-in retention deadline and may contain secrets or business data, so prefer the Harness spillStore and clean up regularly."}}},{"id":"liznee/dsh-file-resource","order":330,"name":"dsh-file-resource","owner":"liznee","repo":"liznee/dsh-file-resource","url":"https://github.com/liznee/dsh-file-resource","category":"tools","description":{"zh":"把图片、PDF、Word、Excel、PPT、ODF、EPUB 与常见代码文件统一接入 DSH Web 的 + 菜单；文档在本机解析，模型按页、工作表、幻灯片或文本块按需读取。","en":"Adds one attachment entry to the DSH Web + menu for images, PDF, Office, ODF, EPUB, and common code files; documents are parsed locally and read by the model on demand by page, sheet, slide, or bounded text chunk."},"added":"2026-08-22","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22T04:05:48.052Z","lastSeenAt":"2026-08-22T04:05:48.052Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-22T04:05:48.052Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"liznee/dsh-file-resource","pickedAt":"2026-08-22T04:05:48.052Z","reviewedCommit":"a3a4f49151ebf4cb7c7134b61cc65ee4fa6374a8","category":"tools","summary":{"zh":"把图片、PDF、Word、Excel、PPT、ODF、EPUB 与常见代码文件统一接入 DSH Web 的 + 菜单；文档在本机解析，模型按页、工作表、幻灯片或文本块按需读取。","en":"Adds one attachment entry to the DSH Web + menu for images, PDF, Office, ODF, EPUB, and common code files; documents are parsed locally and read by the model on demand by page, sheet, slide, or bounded text chunk."},"reason":{"zh":"v0.1.0 把文档附件做成顺手的原生交互，避免把全文一次性塞进上下文。发布标签对应 npm gitHead，npm 签名与 tarball 完整性已核对，发布包和标签源码逐文件一致；Node 22/24 CI 通过，生产依赖审计为 0 个漏洞，安装与卸载命令完整。","en":"v0.1.0 makes document attachments feel native and avoids injecting entire files into context. The release tag matches the npm gitHead, the npm signature and tarball integrity were verified, and the published package matches the tagged source file for file. Node 22/24 CI passed, the production dependency audit reports zero vulnerabilities, and install and removal paths are documented."},"safety":{"risk":"medium","zh":"中风险：无遥测、无第三方上传、无安装期生命周期脚本；原文件与派生文本以 0600 文件权限保存在 DSH_HOME 下，会话绑定与同源检查限制读取，单次读取硬上限 24000 字符。风险来自敏感文档会在模型实际调用读取工具后进入当前模型提供方，以及 PDF/ZIP/Office 解析器的攻击面；只选择愿意交给当前模型提供方处理的文件，并保持插件与 pdfjs-dist 更新。","en":"Medium risk: there is no telemetry, third-party upload, or install-time lifecycle script. Original and derived files are stored under DSH_HOME with mode 0600, while session binding and same-origin checks restrict reads and each tool response is capped at 24,000 characters. Sensitive content reaches the configured model provider after the model invokes the read tool, and PDF/ZIP/Office parsers retain an attack surface; attach only files suitable for that provider and keep the plugin and pdfjs-dist updated."}}},{"id":"creativedswork/dsh-uni-editor","order":331,"name":"@creative-dswork/dsh-uni-editor","owner":"creativedswork","repo":"creativedswork/dsh-uni-editor","url":"https://github.com/creativedswork/dsh-uni-editor","category":"dev","description":{"zh":"All Editors, one DSH Editor. Unified Editor runtime for DeepSeek Harness, powered by MCP Apps.","en":"All Editors, one DSH Editor. Unified Editor runtime for DeepSeek Harness, powered by MCP Apps."},"added":"2026-08-22","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-21T13:17:27Z","updatedAt":"2026-08-21T13:16:53Z","createdAt":"2026-08-15T13:31:04Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/@creative-dswork/dsh-mcp-apps","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@creative-dswork/dsh-uni-editor","version":"0.3.1","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"90b578c84f6a4c3fe7fd4f158112f56107550e18","installCommand":"dsh plugin --profile web add github:creativedswork/dsh-uni-editor#90b578c84f6a4c3fe7fd4f158112f56107550e18","discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:26.804Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-22T00:00:26.804Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"creativedswork/dsh-uni-editor@90b578c84f6a4c3fe7fd4f158112f56107550e18#scan-2","versionCount":1,"latestCommit":"90b578c84f6a4c3fe7fd4f158112f56107550e18","latestCheckedAt":"2026-08-22T00:00:26.804Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"necokeine/dsh-calendar","order":332,"name":"@necokeine/dsh-calendar","owner":"necokeine","repo":"necokeine/dsh-calendar","url":"https://github.com/necokeine/dsh-calendar","category":"tools","description":{"zh":"@necokeine/dsh-calendar","en":"@necokeine/dsh-calendar"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-22T02:16:38Z","updatedAt":"2026-08-22T02:17:00Z","createdAt":"2026-08-14T19:32:25Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@necokeine/dsh-calendar","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"dff0ca27cb9a2412f36de8d482d85ffa31dcc3ce","installCommand":"dsh plugin --profile web add github:necokeine/dsh-calendar#dff0ca27cb9a2412f36de8d482d85ffa31dcc3ce","discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T12:00:56.927Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-22T12:00:56.927Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"necokeine/dsh-calendar@dff0ca27cb9a2412f36de8d482d85ffa31dcc3ce#scan-2","versionCount":1,"latestCommit":"dff0ca27cb9a2412f36de8d482d85ffa31dcc3ce","latestCheckedAt":"2026-08-22T12:00:56.927Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"uckkk/dsh-hair-dryer","order":333,"name":"dsh-hair-dryer","owner":"uckkk","repo":"uckkk/dsh-hair-dryer","url":"https://github.com/uckkk/dsh-hair-dryer","category":"tools","description":{"zh":"吹风机选择","en":"吹风机选择"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:19:43Z","updatedAt":"2026-08-21T13:28:08Z","createdAt":"2026-08-21T13:19:36Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-hair-dryer","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b376074b77c39fb101bb428ef74c076e6efa8b5e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:22.137Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:22.137Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-hair-dryer@b376074b77c39fb101bb428ef74c076e6efa8b5e#scan-2","versionCount":1,"latestCommit":"b376074b77c39fb101bb428ef74c076e6efa8b5e","latestCheckedAt":"2026-08-22T00:00:22.137Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-is-square","order":334,"name":"dsh-is-square","owner":"uckkk","repo":"uckkk/dsh-is-square","url":"https://github.com/uckkk/dsh-is-square","category":"tools","description":{"zh":"平方数判断","en":"平方数判断"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:19:47Z","updatedAt":"2026-08-21T13:20:37Z","createdAt":"2026-08-21T11:49:12Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-is-square","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a7a15ac7acd557e2e931d1703bf9ec432d5d3b45","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:21.027Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:21.027Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-is-square@a7a15ac7acd557e2e931d1703bf9ec432d5d3b45#scan-2","versionCount":1,"latestCommit":"a7a15ac7acd557e2e931d1703bf9ec432d5d3b45","latestCheckedAt":"2026-08-22T00:00:21.027Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-lithuania","order":335,"name":"dsh-lithuania","owner":"uckkk","repo":"uckkk/dsh-lithuania","url":"https://github.com/uckkk/dsh-lithuania","category":"tools","description":{"zh":"立陶宛国家","en":"立陶宛国家"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:14:18Z","updatedAt":"2026-08-21T13:18:55Z","createdAt":"2026-08-21T13:14:11Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-lithuania","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0434fd4d247f15a7bd85fc6d686cf584937c4bc2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:29.907Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:29.907Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-lithuania@0434fd4d247f15a7bd85fc6d686cf584937c4bc2#scan-2","versionCount":1,"latestCommit":"0434fd4d247f15a7bd85fc6d686cf584937c4bc2","latestCheckedAt":"2026-08-22T00:00:29.907Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"chou109/dsh-msgrail","order":336,"name":"dsh-msgrail","owner":"chou109","repo":"chou109/dsh-msgrail","url":"https://github.com/chou109/dsh-msgrail","category":"session","description":{"zh":"MsgRail（消息轨道） —— DeepSeek Harness 的窄消息轨道插件：在对话左侧，为每条你发送的消息显示一根细横线。悬停看预览、点击即跳转，更早消息自动加载；全量历史、实时更新、中英双语。  MsgRail is a narrow message rail for DeepSeek Harness: one thin bar on the left of the chat for each message you sent. Hover to preview, click to jump — older messages load automatically. Full history, live, bilingual.","en":"MsgRail（消息轨道） —— DeepSeek Harness 的窄消息轨道插件：在对话左侧，为每条你发送的消息显示一根细横线。悬停看预览、点击即跳转，更早消息自动加载；全量历史、实时更新、中英双语。  MsgRail is a narrow message rail for DeepSeek Harness: one thin bar on the left of the chat for each message you sent. Hover to preview, click to jump — older messages load automatically. Full history, live, bilingual."},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-22T02:18:15Z","updatedAt":"2026-08-22T02:18:30Z","createdAt":"2026-08-15T10:01:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-msgrail","version":"1.0.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"928be55fb7e7688527c36976c70954758db3d246","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T12:00:21.450Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T12:00:21.450Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"chou109/dsh-msgrail@928be55fb7e7688527c36976c70954758db3d246#scan-2","versionCount":1,"latestCommit":"928be55fb7e7688527c36976c70954758db3d246","latestCheckedAt":"2026-08-22T12:00:21.450Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"wsl043/dsh-native-session-delete","order":337,"name":"dsh-native-session-delete","owner":"WSL043","repo":"WSL043/dsh-native-session-delete","url":"https://github.com/WSL043/dsh-native-session-delete","category":"session","description":{"zh":"Permanent session deletion in the native DeepSeek Harness menu, with second confirmation and in-place refresh","en":"Permanent session deletion in the native DeepSeek Harness menu, with second confirmation and in-place refresh"},"added":"2026-08-22","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-21T13:19:13Z","updatedAt":"2026-08-21T13:19:07Z","createdAt":"2026-08-15T13:29:07Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-native-session-delete","version":"1.0.7","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"38c77d3765d81d5702202e68ed7b77f5ea0afe04","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:22.658Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:22.658Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","src/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现本地文件写入能力"]},"passport":{"evidenceId":"wsl043/dsh-native-session-delete@38c77d3765d81d5702202e68ed7b77f5ea0afe04#scan-2","versionCount":1,"latestCommit":"38c77d3765d81d5702202e68ed7b77f5ea0afe04","latestCheckedAt":"2026-08-22T00:00:22.658Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"uckkk/dsh-pluto","order":338,"name":"dsh-pluto","owner":"uckkk","repo":"uckkk/dsh-pluto","url":"https://github.com/uckkk/dsh-pluto","category":"tools","description":{"zh":"冥王星","en":"冥王星"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:16:42Z","updatedAt":"2026-08-21T13:18:13Z","createdAt":"2026-08-21T13:16:35Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-pluto","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c18914856696d5df82acc20943581840cb2de0ca","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:27.270Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:27.270Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-pluto@c18914856696d5df82acc20943581840cb2de0ca#scan-2","versionCount":1,"latestCommit":"c18914856696d5df82acc20943581840cb2de0ca","latestCheckedAt":"2026-08-22T00:00:27.270Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-plutonium","order":339,"name":"dsh-plutonium","owner":"uckkk","repo":"uckkk/dsh-plutonium","url":"https://github.com/uckkk/dsh-plutonium","category":"tools","description":{"zh":"钚元素","en":"钚元素"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:18:51Z","updatedAt":"2026-08-21T13:20:07Z","createdAt":"2026-08-21T13:18:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-plutonium","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"84be03013b8e050a461848eaab87322477103667","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:25.411Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:25.411Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-plutonium@84be03013b8e050a461848eaab87322477103667#scan-2","versionCount":1,"latestCommit":"84be03013b8e050a461848eaab87322477103667","latestCheckedAt":"2026-08-22T00:00:25.411Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"licat2023/dsh-session-tabs","order":340,"name":"dsh-session-tabs","owner":"licat2023","repo":"licat2023/dsh-session-tabs","url":"https://github.com/licat2023/dsh-session-tabs","category":"session","description":{"zh":"dsh-session-tabs","en":"dsh-session-tabs"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:18:02Z","updatedAt":"2026-08-21T13:18:44Z","createdAt":"2026-08-17T02:28:00Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-session-tabs","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"dd605cd07724f6381b98f375537d46a3578988f5","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:25.835Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:25.835Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"licat2023/dsh-session-tabs@dd605cd07724f6381b98f375537d46a3578988f5#scan-2","versionCount":1,"latestCommit":"dd605cd07724f6381b98f375537d46a3578988f5","latestCheckedAt":"2026-08-22T00:00:25.835Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zootguru/dsh-vpn-ops","order":341,"name":"dsh-vpn-ops","owner":"zootguru","repo":"zootguru/dsh-vpn-ops","url":"https://github.com/zootguru/dsh-vpn-ops","category":"tools","description":{"zh":"Safety-gated WireGuard and VLESS Reality operations for DeepSeek Harness","en":"Safety-gated WireGuard and VLESS Reality operations for DeepSeek Harness"},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":7,"watchers":0,"pushedAt":"2026-08-22T02:11:56Z","updatedAt":"2026-08-22T02:10:35Z","createdAt":"2026-08-22T02:10:01Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-vpn-ops","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fe6418e1af6b72064197392d5213c0c3da281ab5","installCommand":"dsh plugin --profile web add github:zootguru/dsh-vpn-ops#fe6418e1af6b72064197392d5213c0c3da281ab5","discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T12:00:58.128Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-22T12:00:58.128Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"zootguru/dsh-vpn-ops@fe6418e1af6b72064197392d5213c0c3da281ab5#scan-2","versionCount":1,"latestCommit":"fe6418e1af6b72064197392d5213c0c3da281ab5","latestCheckedAt":"2026-08-22T12:00:58.128Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"jyjays/dsh-websearch-custom","order":342,"name":"dsh-websearch-custom","owner":"Jyjays","repo":"Jyjays/dsh-websearch-custom","url":"https://github.com/Jyjays/dsh-websearch-custom","category":"ui","description":{"zh":"Configurable OpenAI Responses-compatible native web search provider for DeepSeek Harness, with a Settings UI to configure endpoint, model, and API key.","en":"Configurable OpenAI Responses-compatible native web search provider for DeepSeek Harness, with a Settings UI to configure endpoint, model, and API key."},"added":"2026-08-22","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T13:19:05Z","updatedAt":"2026-08-21T13:22:41Z","createdAt":"2026-08-21T13:06:30Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-websearch-custom","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.mjs","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3a39a9f06f3bb183f1b905c3c95579f91796ae71","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:23.272Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:23.272Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"jyjays/dsh-websearch-custom@3a39a9f06f3bb183f1b905c3c95579f91796ae71#scan-2","versionCount":1,"latestCommit":"3a39a9f06f3bb183f1b905c3c95579f91796ae71","latestCheckedAt":"2026-08-22T00:00:23.272Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"seven282/oss-prompt-optimizer","order":343,"name":"oss-prompt-optimizer","owner":"seven282","repo":"seven282/oss-prompt-optimizer","url":"https://github.com/seven282/oss-prompt-optimizer","category":"tools","description":{"zh":"用于优化 DeepSeek harness提示词优化器，提升 AI 输出质量","en":"用于优化 DeepSeek harness提示词优化器，提升 AI 输出质量"},"added":"2026-08-22","curated":false,"topic":true,"stars":5,"forks":0,"openIssues":1,"watchers":5,"pushedAt":"2026-08-21T13:16:10Z","updatedAt":"2026-08-21T13:17:08Z","createdAt":"2026-08-16T08:15:39Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"oss-prompt-optimizer","version":"1.6.6","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"50dd9205a9aa1dc969a310515f34000fe7060acb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-22","lastSeenAt":"2026-08-22T00:00:27.985Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-22T00:00:27.985Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"seven282/oss-prompt-optimizer@50dd9205a9aa1dc969a310515f34000fe7060acb#scan-2","versionCount":1,"latestCommit":"50dd9205a9aa1dc969a310515f34000fe7060acb","latestCheckedAt":"2026-08-22T00:00:27.985Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"alloevil/dsh-xray","order":344,"name":"dsh-xray","owner":"alloevil","repo":"alloevil/dsh-xray","url":"https://github.com/alloevil/dsh-xray","category":"tools","description":{"zh":"给 DSH 组合树做只读诊断：追踪插件来源、配置冲突、依赖级联、运行健康与上下文成本，并提供 CLI、Web 面板和 Agent 自省工具。","en":"Provides read-only diagnostics for the DSH composition tree: plugin provenance, configuration conflicts, dependency cascades, runtime health, and context cost through a CLI, Web panel, and agent introspection tool."},"added":"2026-08-21","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21T04:00:13.727Z","lastSeenAt":"2026-08-21T04:00:13.727Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-21T04:00:13.727Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"alloevil/dsh-xray","pickedAt":"2026-08-21T04:00:13.727Z","reviewedCommit":"ae44549c9290b1d6c8a7f48463f606377cd12ad9","category":"tools","summary":{"zh":"给 DSH 组合树做只读诊断：追踪插件来源、配置冲突、依赖级联、运行健康与上下文成本，并提供 CLI、Web 面板和 Agent 自省工具。","en":"Provides read-only diagnostics for the DSH composition tree: plugin provenance, configuration conflicts, dependency cascades, runtime health, and context cost through a CLI, Web panel, and agent introspection tool."},"reason":{"zh":"v0.6.0 能在 DSH 启动失败时用静态 CLI 定位孤立 patch 和配置冲突，挂载后还能查看实时依赖、健康与成本；对插件较多的本机和插件 Hub 复核流程都很有价值。审核的发布提交与 npm gitHead 一致，Node 22/24 CI 通过，npm 包带 SLSA provenance，生产依赖审计为 0 个漏洞。","en":"v0.6.0 can use static CLI analysis to find orphaned patches and configuration conflicts even when DSH cannot start, then adds live dependency, health, and cost views when mounted. It is useful for plugin-heavy local setups and Hub review workflows. The reviewed release commit matches the npm gitHead, Node 22/24 CI passed, the npm package carries SLSA provenance, and the production dependency audit reports zero vulnerabilities."},"safety":{"risk":"medium","zh":"中风险：无遥测和外部网络请求，安装无生命周期脚本；但 CLI 会读取 DSH profile、patch 和第三方插件源码，diff 会通过 execFile 启动本机 dsh --dump-config。挂载后会把插件与服务信息、fiber 错误、工具 schema 的名称/描述/参数、prompt section 名称和 token 估算写入 $DSH_HOME/xray/runtime.json，并通过同一 DSH 服务的 /xray 暴露诊断元数据；不会采集会话正文、prompt section 正文或凭据。仅在回环地址或有认证的反向代理后启用；v0.6.0 Git 标签未签名。","en":"Medium risk: there is no telemetry or external network request and installation has no lifecycle scripts, but the CLI reads DSH profiles, patches, and third-party plugin source, while diff starts the local dsh --dump-config command through execFile. When mounted, it writes plugin and service data, fiber errors, tool-schema names/descriptions/parameters, prompt-section names, and token estimates to $DSH_HOME/xray/runtime.json and exposes diagnostic metadata at /xray on the same DSH server; it does not collect conversation text, prompt-section bodies, or credentials. Enable it only on loopback or behind an authenticated reverse proxy; the v0.6.0 Git tag is unsigned."}}},{"id":"lhh010/dsh-input-history","order":345,"name":"@dsh-external/dsh-input-history","owner":"lhh010","repo":"lhh010/dsh-input-history","url":"https://github.com/lhh010/dsh-input-history","category":"session","description":{"zh":"DSH Web 输入历史插件：Ctrl+Up / Ctrl+Down 像终端一样召回与切换已发送消息，零核心改动","en":"DSH Web 输入历史插件：Ctrl+Up / Ctrl+Down 像终端一样召回与切换已发送消息，零核心改动"},"added":"2026-08-21","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-21T08:21:48Z","updatedAt":"2026-08-21T08:22:09Z","createdAt":"2026-08-13T13:09:51Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@dsh-external/dsh-input-history","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2235ca96a4101b57d1c1c9c4ad3ea2cd939c35d2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:23.934Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:23.934Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"lhh010/dsh-input-history@2235ca96a4101b57d1c1c9c4ad3ea2cd939c35d2#scan-2","versionCount":1,"latestCommit":"2235ca96a4101b57d1c1c9c4ad3ea2cd939c35d2","latestCheckedAt":"2026-08-21T12:00:23.934Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"omdsh-dev/dsh-advisor","order":346,"name":"dsh-advisor","owner":"omdsh-dev","repo":"omdsh-dev/dsh-advisor","url":"https://github.com/omdsh-dev/dsh-advisor","category":"dev","description":{"zh":"Advisor - Pair a second model that passively reviews each turn and injects notes.  搭配一个会在每轮对话被动注入见解和审查的副模型。","en":"Advisor - Pair a second model that passively reviews each turn and injects notes.  搭配一个会在每轮对话被动注入见解和审查的副模型。"},"added":"2026-08-21","curated":false,"topic":true,"stars":15,"forks":3,"openIssues":0,"watchers":15,"pushedAt":"2026-08-21T08:21:49Z","updatedAt":"2026-08-21T08:23:21Z","createdAt":"2026-08-07T16:48:49Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-advisor","version":"0.2.4","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"afe8bdbf17a83826cd6fdfc3b21e9850ecc43395","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:23.704Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:23.704Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"omdsh-dev/dsh-advisor@afe8bdbf17a83826cd6fdfc3b21e9850ecc43395#scan-2","versionCount":1,"latestCommit":"afe8bdbf17a83826cd6fdfc3b21e9850ecc43395","latestCheckedAt":"2026-08-21T12:00:23.704Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"omdsh-dev/dsh-advisor","pickedAt":"2026-09-03T10:41:48.583Z","reviewedCommit":"1eda7b2026864f331dcb934a9861bdb3cbae6a9e","category":"workflow","summary":{"zh":"为每个 DSH 会话配一个独立评审模型，在主 Agent 完成每轮后注入按严重度分级的建议。","en":"Pairs each DSH session with an independent reviewer model that injects severity-ranked advice after completed turns."},"reason":{"zh":"评审者以零工具的异步旁路运行，失败只丢弃自身队列，不阻塞主循环；支持 Web/TUI 配置和会话级开关，v0.3.1 已适配官方 0.1.2-rc.1。","en":"The zero-tool reviewer runs asynchronously, drops only its own backlog on failure, and never blocks the main loop; it supports Web/TUI configuration and per-session controls, with v0.3.1 compatible with official 0.1.2-rc.1."},"safety":{"risk":"medium","zh":"会把主会话增量（可能含密钥或私密内容）发送给指定评审模型，并将其输出注入或 steer 回主 Agent，额外消耗 token。插件默认关闭，provider/model 必填，具备长度、冷却、超时和失败门禁；静态审查未见独立遥测、Shell 执行或运行时文件读写。建议选择可信模型并先在非敏感会话试用。","en":"Sends primary-session deltas, which may contain secrets or private content, to the configured reviewer model and injects or steers its output back into the main agent, adding token cost. It is disabled by default, requires an explicit provider/model, and bounds output, cooldown, timeout, and failures; static review found no independent telemetry, shell execution, or runtime file I/O. Start with a trusted model on non-sensitive sessions."}}},{"id":"keynowu/dsh-ai-news","order":347,"name":"dsh-ai-news","owner":"KeynoWu","repo":"KeynoWu/dsh-ai-news","url":"https://github.com/KeynoWu/dsh-ai-news","category":"ui","description":{"zh":"DeepSeek Harness AI 新闻插件：多源聚合（HN/ArXiv/官方博客/中文媒体）+ 侧边栏大弹窗新闻流 + 面板内 LLM 总结","en":"DeepSeek Harness AI 新闻插件：多源聚合（HN/ArXiv/官方博客/中文媒体）+ 侧边栏大弹窗新闻流 + 面板内 LLM 总结"},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T08:21:44Z","updatedAt":"2026-08-21T08:21:39Z","createdAt":"2026-08-21T08:21:24Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-ai-news","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["src/index.ts","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7ec2f95afa85ab2c990f2c4dd2cc253143563b2e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:24.953Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:24.953Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"keynowu/dsh-ai-news@7ec2f95afa85ab2c990f2c4dd2cc253143563b2e#scan-2","versionCount":1,"latestCommit":"7ec2f95afa85ab2c990f2c4dd2cc253143563b2e","latestCheckedAt":"2026-08-21T12:00:24.953Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-amount-calc","order":348,"name":"dsh-amount-calc","owner":"uckkk","repo":"uckkk/dsh-amount-calc","url":"https://github.com/uckkk/dsh-amount-calc","category":"tools","description":{"zh":"火锅分量计算","en":"火锅分量计算"},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-20T18:43:31Z","updatedAt":"2026-08-20T18:45:51Z","createdAt":"2026-08-20T18:43:24Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-amount-calc","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"30b5ca1b5565e8df809ad68a74f64a7331e54c6e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T00:00:52.283Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T00:00:52.283Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-amount-calc@30b5ca1b5565e8df809ad68a74f64a7331e54c6e#scan-2","versionCount":1,"latestCommit":"30b5ca1b5565e8df809ad68a74f64a7331e54c6e","latestCheckedAt":"2026-08-21T00:00:52.283Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-doc-sort","order":349,"name":"dsh-doc-sort","owner":"uckkk","repo":"uckkk/dsh-doc-sort","url":"https://github.com/uckkk/dsh-doc-sort","category":"tools","description":{"zh":"档案分类","en":"档案分类"},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-20T18:42:57Z","updatedAt":"2026-08-20T18:44:17Z","createdAt":"2026-08-20T18:42:48Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-doc-sort","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ddc4fa294c439ce761dfa87cb75bb9c4fab59e67","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T00:00:53.632Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T00:00:53.632Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-doc-sort@ddc4fa294c439ce761dfa87cb75bb9c4fab59e67#scan-2","versionCount":1,"latestCommit":"ddc4fa294c439ce761dfa87cb75bb9c4fab59e67","latestCheckedAt":"2026-08-21T00:00:53.632Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"monotykamary/dsh-fovea","order":350,"name":"dsh-fovea","owner":"monotykamary","repo":"monotykamary/dsh-fovea","url":"https://github.com/monotykamary/dsh-fovea","category":"tools","description":{"zh":"Foveated repository intelligence for DeepSeek Harness: token-budgeted code graphs, focus, impact, and continuous sync.","en":"Foveated repository intelligence for DeepSeek Harness: token-budgeted code graphs, focus, impact, and continuous sync."},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T08:19:58Z","updatedAt":"2026-08-21T08:20:53Z","createdAt":"2026-08-16T18:39:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-fovea","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8cf1fb831a4e55ef67a667ded951aac865150f5c","installCommand":"dsh plugin --profile web add github:monotykamary/dsh-fovea#8cf1fb831a4e55ef67a667ded951aac865150f5c","discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:29.244Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-21T12:00:29.244Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"monotykamary/dsh-fovea@8cf1fb831a4e55ef67a667ded951aac865150f5c#scan-2","versionCount":1,"latestCommit":"8cf1fb831a4e55ef67a667ded951aac865150f5c","latestCheckedAt":"2026-08-21T12:00:29.244Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"vincent-guo/dsh-loading-phrases","order":351,"name":"dsh-loading-phrases","owner":"vincent-guo","repo":"vincent-guo/dsh-loading-phrases","url":"https://github.com/vincent-guo/dsh-loading-phrases","category":"tools","description":{"zh":"DeepSeek Harness Web GUI plugin — replaces the \"Deep diving...\" running status with rotating witty phrases and practical tips.","en":"DeepSeek Harness Web GUI plugin — replaces the \"Deep diving...\" running status with rotating witty phrases and practical tips."},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-21T08:19:17Z","updatedAt":"2026-08-21T08:32:08Z","createdAt":"2026-08-21T07:28:36Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-loading-phrases","version":"0.6.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ca3bf05b4202e126b07f4551b83e395895d1995b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:32.388Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:32.388Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"vincent-guo/dsh-loading-phrases@ca3bf05b4202e126b07f4551b83e395895d1995b#scan-2","versionCount":1,"latestCommit":"ca3bf05b4202e126b07f4551b83e395895d1995b","latestCheckedAt":"2026-08-21T12:00:32.388Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"uckkk/dsh-posture","order":352,"name":"dsh-posture","owner":"uckkk","repo":"uckkk/dsh-posture","url":"https://github.com/uckkk/dsh-posture","category":"tools","description":{"zh":"执笔坐姿","en":"执笔坐姿"},"added":"2026-08-21","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-20T18:43:41Z","updatedAt":"2026-08-20T18:45:33Z","createdAt":"2026-08-20T18:43:33Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-posture","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2890df8dfb60f989d89fbf4563dfb1106274d2b2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T00:00:49.967Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T00:00:49.967Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"uckkk/dsh-posture@2890df8dfb60f989d89fbf4563dfb1106274d2b2#scan-2","versionCount":1,"latestCommit":"2890df8dfb60f989d89fbf4563dfb1106274d2b2","latestCheckedAt":"2026-08-21T00:00:49.967Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"haoyueqin/dsh-usage-statistics-panel","order":353,"name":"dsh-usage-statistics-panel","owner":"HaoyueQin","repo":"HaoyueQin/dsh-usage-statistics-panel","url":"https://github.com/HaoyueQin/dsh-usage-statistics-panel","category":"ui","description":{"zh":"DSH web plugin: per-day token usage statistics with a GitHub-style activity heatmap, cache hit-rate curve and per-model breakdown","en":"DSH web plugin: per-day token usage statistics with a GitHub-style activity heatmap, cache hit-rate curve and per-model breakdown"},"added":"2026-08-21","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-21T08:21:17Z","updatedAt":"2026-08-21T08:21:58Z","createdAt":"2026-08-19T18:10:59Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-usage-statistics-panel","version":"0.1.2","lifecycleScripts":["prepare"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6dd2528977531357bdb0ca152ef0b708b95e787a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:26.070Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:26.070Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"haoyueqin/dsh-usage-statistics-panel@6dd2528977531357bdb0ca152ef0b708b95e787a#scan-2","versionCount":1,"latestCommit":"6dd2528977531357bdb0ca152ef0b708b95e787a","latestCheckedAt":"2026-08-21T12:00:26.070Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"sunyuhuirong/shl-session-history","order":354,"name":"shl-session-history","owner":"sunyuhuirong","repo":"sunyuhuirong/shl-session-history","url":"https://github.com/sunyuhuirong/shl-session-history","category":"session","description":{"zh":"DeepSeek Harness plugin: conversation history request rail (ZCode-style) - 会话历史请求迷你滑轨","en":"DeepSeek Harness plugin: conversation history request rail (ZCode-style) - 会话历史请求迷你滑轨"},"added":"2026-08-21","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-21T08:19:45Z","updatedAt":"2026-08-21T08:20:40Z","createdAt":"2026-08-19T14:11:51Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"shl-session-history","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"20083223a47ff8a1d05b9c864578018427a842a2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-21","lastSeenAt":"2026-08-21T12:00:29.481Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-21T12:00:29.481Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"sunyuhuirong/shl-session-history@20083223a47ff8a1d05b9c864578018427a842a2#scan-2","versionCount":1,"latestCommit":"20083223a47ff8a1d05b9c864578018427a842a2","latestCheckedAt":"2026-08-21T12:00:29.481Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"mantonlove/dsh-conversation-landmarks","order":355,"name":"dsh-conversation-landmarks","owner":"mantonlove","repo":"mantonlove/dsh-conversation-landmarks","url":"https://github.com/mantonlove/dsh-conversation-landmarks","category":"ui","description":{"zh":"在 DSH Web 长会话左侧增加任务地标轨，悬停预览请求与最近回答，点击后自动加载旧历史并跳到对应消息。","en":"Adds a task landmark rail to long DSH Web conversations, with request and latest-answer previews plus automatic older-history loading and exact-message jumps."},"added":"2026-08-20","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20T20:41:37.185Z","lastSeenAt":"2026-08-20T20:41:37.185Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-20T20:41:37.185Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"mantonlove/dsh-conversation-landmarks","pickedAt":"2026-08-20T20:41:37.185Z","reviewedCommit":"d9d7e974181c3b095a557c92b12ddf46fd03406a","category":"ui","summary":{"zh":"在 DSH Web 长会话左侧增加任务地标轨，悬停预览请求与最近回答，点击后自动加载旧历史并跳到对应消息。","en":"Adds a task landmark rail to long DSH Web conversations, with request and latest-answer previews plus automatic older-history loading and exact-message jumps."},"reason":{"zh":"它只索引直接用户任务，使用官方 session projection 与 client slot 扩展点，不改 DSH 源码。v0.1.0 已提交预构建产物，安装不触发构建脚本；静态核对源码与 lib 未发现网络、遥测、Shell 或文件写入，生产依赖审计为 0 个漏洞。适合经常在长会话里回找需求与答案的人。","en":"It indexes direct user tasks through the official session projection and client slot extension points without patching DSH. v0.1.0 commits prebuilt artifacts so installation runs no build hook; static review of source and lib found no network, telemetry, shell, or file writes, and the production dependency audit reports zero vulnerabilities. It suits users who often revisit requests and answers in long sessions."},"safety":{"risk":"low","zh":"低风险：会读取会话中的用户请求与最近一条助手文本，并在当前 Web 页面显示最多 320 字预览；不会外发、持久化或读取凭据。点击地标会调用官方分页接口加载更早的本地历史。共享屏幕或多人可访问 Web UI 时，预览可能暴露会话内容；v0.1.0 标签未签名且没有公开 CI，升级前应重新核对提交。","en":"Low risk: it reads user requests and the latest assistant text from the active session and shows previews of up to 320 characters in the current Web page; it does not transmit, persist, or access credentials. Clicking a landmark uses the official paging API to load older local history. Previews can expose session content during screen sharing or multi-user Web access; the v0.1.0 tag is unsigned and has no public CI, so re-check the commit before upgrading."}}},{"id":"armywas/dsh-plugin-reducer","order":356,"name":"dsh-plugin-reducer","owner":"armywas","repo":"armywas/dsh-plugin-reducer","url":"https://github.com/armywas/dsh-plugin-reducer","category":"dev","description":{"zh":"在真实 Profile 外部自动缩减插件组合，找出能稳定复现启动或命令故障的 1-最小 bundle 集，并输出脱敏 JSON 证据。","en":"Reduces plugin combinations outside the live Profile to find a 1-minimal bundle set that reproduces startup or command failures, with redacted JSON evidence."},"added":"2026-08-20","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20T18:41:06.642Z","lastSeenAt":"2026-08-20T18:41:06.642Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-20T18:41:06.642Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"armywas/dsh-plugin-reducer","pickedAt":"2026-08-20T18:41:06.642Z","reviewedCommit":"a17be6e0369ca775aef07e1346c9db71f50e52d1","category":"dev","summary":{"zh":"在真实 Profile 外部自动缩减插件组合，找出能稳定复现启动或命令故障的 1-最小 bundle 集，并输出脱敏 JSON 证据。","en":"Reduces plugin combinations outside the live Profile to find a 1-minimal bundle set that reproduces startup or command failures, with redacted JSON evidence."},"reason":{"zh":"它能处理 A、B 单独正常但组合后故障的插件冲突。v0.3.0 提供版本化 JSON 与 Schema，运行时零依赖；核实提交与 Release 一致，发布资产 SHA-256 匹配，38 项测试以及 Windows、macOS、Linux 的 Node 22.19/24 CI 全部通过。每次探针使用新的影子 DSH_HOME，并校验源 Profile 指纹未变。","en":"It diagnoses interaction failures where plugins A and B work alone but fail together. v0.3.0 adds versioned JSON and schemas with zero runtime dependencies. The reviewed commit matches the release, the asset SHA-256 verifies, and 38 tests pass across Windows, macOS, and Linux on Node 22.19 and 24. Every probe uses a fresh shadow DSH_HOME and verifies that the source Profile fingerprint is unchanged."},"safety":{"risk":"medium","zh":"中风险：会读取 Profile manifest、patch 和 settings，链接现有 node_modules，并以当前用户权限重复运行已安装插件或用户明确提供的探针；影子 DSH_HOME 只隔离配置，不提供文件、进程、环境变量或网络沙箱。它不复制凭据库、会话或工作区文件，不安装包，也没有安装生命周期脚本，报告会尽力脱敏。仅用于可信插件和探针，分享报告前人工复核，敏感配置场景不要保留影子目录。","en":"Medium risk: it reads Profile manifests, patches, and settings, links existing node_modules, and repeatedly runs installed plugins or an explicitly supplied probe with the current user permissions. The shadow DSH_HOME isolates configuration only; it is not a filesystem, process, environment, or network sandbox. It does not copy credential stores, sessions, or workspace files, installs no packages, has no install lifecycle scripts, and applies best-effort report redaction. Use trusted plugins and probes only, review reports before sharing, and avoid keeping the shadow lab when configuration is sensitive."}}},{"id":"nickhelion/dsh-qwen-token-plan-cn-responses","order":357,"name":"dsh-qwen-token-plan-cn-responses","owner":"nickhelion","repo":"nickhelion/dsh-qwen-token-plan-cn-responses","url":"https://github.com/nickhelion/dsh-qwen-token-plan-cn-responses","category":"tools","description":{"zh":"为 DSH 接入千问 Token Plan 个人版 Responses API，同时保留本地函数工具，并按官方文档同步模型与内置搜索、代码解释器等能力。","en":"Adds Qwen Token Plan Personal Responses API support to DSH while preserving local function tools and syncing model plus built-in search and code-interpreter capabilities from official documentation."},"added":"2026-08-20","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20T14:38:05.763Z","lastSeenAt":"2026-08-20T14:38:05.763Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-20T14:38:05.763Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"nickhelion/dsh-qwen-token-plan-cn-responses","pickedAt":"2026-08-20T14:38:05.763Z","reviewedCommit":"4b5dc07a446e9c8d03234d4f6b953db952344560","category":"tools","summary":{"zh":"为 DSH 接入千问 Token Plan 个人版 Responses API，同时保留本地函数工具，并按官方文档同步模型与内置搜索、代码解释器等能力。","en":"Adds Qwen Token Plan Personal Responses API support to DSH while preserving local function tools and syncing model plus built-in search and code-interpreter capabilities from official documentation."},"reason":{"zh":"v0.1.0 提供独立 LlmAdapter、图片输入、Responses SSE 映射和原子目录缓存；Release tag 绑定核实提交，CI 的语法、测试与打包检查通过，安装路径明确。适合已订阅千问 Token Plan 个人版、想在 DSH 使用服务端内置工具的人小范围试用。","en":"v0.1.0 ships a dedicated LlmAdapter, image input, Responses SSE mapping, and atomic catalog caching. The release tag resolves to the reviewed commit, and CI passes syntax, tests, and package checks with a clear install path. It is ready for limited trials by Qwen Token Plan Personal subscribers who want server-side tools in DSH."},"safety":{"risk":"medium","zh":"中风险：每次请求会把完整对话、所选图片、工具声明和工具结果发送到千问北京 Responses 端点，并可启用联网搜索、代码解释器和网页抓取；目录同步还会读取四份千问官方 Markdown，并把公开目录缓存到本机 0600 文件。静态审查未发现遥测、安装生命周期脚本或运行时 Shell，Key 逐请求从 DSH 凭据服务解析且不会写入缓存；端点和文档 URL 可配置，修改时必须防止把 Key 或内容转发到不可信地址。项目刚发布，维护历史很短，建议固定 v0.1.0 并先用非敏感会话。","en":"Medium risk: every request sends the full conversation, selected images, tool declarations, and tool outputs to the Qwen Beijing Responses endpoint and may enable web search, code interpreter, and page extraction. Catalog sync reads four official Qwen Markdown files and stores public metadata in a local mode-0600 cache. Static review found no telemetry, install lifecycle hook, or runtime shell execution; the key is resolved per request through DSH credentials and is not cached. Because endpoint and documentation URLs are configurable, changes must not redirect secrets or content to untrusted hosts. The project is newly released with a very short maintenance history, so pin v0.1.0 and start with non-sensitive sessions."}}},{"id":"goodandready/dsh-fal-image-gen","order":358,"name":"dsh-fal-image-gen","owner":"goodandready","repo":"goodandready/dsh-fal-image-gen","url":"https://github.com/goodandready/dsh-fal-image-gen","category":"fun","description":{"zh":"给 DSH 增加 generate_image 工具，支持 FAL 队列和 OpenAI 兼容图像 API；生成结果可在对话中显示，并保存到当前会话工作区。","en":"Adds a generate_image tool to DSH with support for the FAL queue and OpenAI-compatible image APIs; results render in the conversation and are saved in the active session workspace."},"added":"2026-08-20","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20T10:36:04.694Z","lastSeenAt":"2026-08-20T10:36:04.694Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-20T10:36:04.694Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"goodandready/dsh-fal-image-gen","pickedAt":"2026-08-20T10:36:04.694Z","reviewedCommit":"af40a36842ba5a13de1e384ad5686fee720a10b5","category":"fun","summary":{"zh":"给 DSH 增加 generate_image 工具，支持 FAL 队列和 OpenAI 兼容图像 API；生成结果可在对话中显示，并保存到当前会话工作区。","en":"Adds a generate_image tool to DSH with support for the FAL queue and OpenAI-compatible image APIs; results render in the conversation and are saved in the active session workspace."},"reason":{"zh":"v0.5.1 的 npm 包绑定已核实的 Git 提交，没有运行时依赖和安装生命周期脚本；本地 12 项 provider 测试全部通过。v0.5.0 抽出了统一 provider 层，v0.5.1 修复设置卡片因 Host 注册竞态而长期缺失的问题。","en":"The v0.5.1 npm package is bound to the verified Git commit and has no runtime dependencies or install lifecycle hooks; all 12 provider tests passed locally. v0.5.0 introduced a shared provider layer, and v0.5.1 fixes a Host registration race that could leave the settings card missing."},"safety":{"risk":"medium","zh":"中风险：提示词和 API 凭据会发送给用户选择的 FAL 或自定义端点，插件还会下载 provider 返回的图片 URL，并把结果写入会话工作区或用户配置的绝对目录。静态检查未发现 Shell 执行、遥测、额外运行时依赖或安装脚本；建议只使用可信端点、保持 Web UI 监听在本机，并保留相对 outputDir。","en":"Medium risk: prompts and API credentials are sent to the selected FAL or custom endpoint, the plugin downloads image URLs returned by that provider, and it writes results to the session workspace or a user-configured absolute directory. Static review found no shell execution, telemetry, extra runtime dependencies, or install hooks; use trusted endpoints, keep the Web UI on loopback, and retain a relative outputDir."}}},{"id":"totoro-qaq/dsh-plugin-bridge","order":359,"name":"dsh-plugin-bridge","owner":"totoro-qaq","repo":"Totoro-qaq/dsh-plugin-bridge","url":"https://github.com/Totoro-qaq/dsh-plugin-bridge","category":"workflow","description":{"zh":"把已有内容的 DSH 会话通过可预览、可编辑的固定五段交接摘要迁到另一套 Agent Preset，原会话保持不动；v0.2.3 支持单轮复述并继续工作。","en":"Migrates a non-empty DSH session to another Agent Preset through a previewable, editable five-section handoff while leaving the source session untouched; v0.2.3 can restate and continue in one target turn."},"added":"2026-08-20","curated":false,"topic":true,"stars":164,"forks":11,"openIssues":1,"watchers":164,"pushedAt":"2026-09-15T09:23:00Z","updatedAt":"2026-09-15T09:22:11Z","createdAt":"2026-08-17T07:52:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-bridge","version":"0.3.6","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9ca4a24cdd458e0cb90563215b94e658d7149b95","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20T08:34:02.981Z","lastSeenAt":"2026-09-15T12:00:39.869Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-15T12:00:39.869Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"totoro-qaq/dsh-plugin-bridge@9ca4a24cdd458e0cb90563215b94e658d7149b95#scan-2","versionCount":1,"latestCommit":"9ca4a24cdd458e0cb90563215b94e658d7149b95","latestCheckedAt":"2026-09-15T12:00:39.869Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"totoro-qaq/dsh-plugin-bridge","pickedAt":"2026-08-20T08:34:02.981Z","reviewedCommit":"34777d9b532404b016831577d729fe23973c633d","category":"workflow","summary":{"zh":"把已有内容的 DSH 会话通过可预览、可编辑的固定五段交接摘要迁到另一套 Agent Preset，原会话保持不动；v0.2.3 支持单轮复述并继续工作。","en":"Migrates a non-empty DSH session to another Agent Preset through a previewable, editable five-section handoff while leaving the source session untouched; v0.2.3 can restate and continue in one target turn."},"reason":{"zh":"安装路径绑定 Git tag，仓库提交预构建 lib，无安装脚本；Node 22/24 的 111 项测试、包内容检查和 CodeQL 均通过。默认先预览，目标 goal 在 kickoff 前暂停，暂停失败会停止自动启动。","en":"The Git-tag install carries committed prebuilt lib files and no install lifecycle hook; 111 tests on Node 22/24, package checks, and CodeQL pass. Preview is the default, the target goal is paused before kickoff, and pause failure cancels automatic startup."},"safety":{"risk":"medium","zh":"中风险：插件会读取源会话历史并交给当前配置的工作模型生成摘要，敏感内容会进入该模型供应商；它还能创建和重命名会话、创建及暂停 goal、归档临时工人，并在系统临时目录写入可编辑摘要。静态检查未发现 Shell 执行、遥测、独立外联服务或凭据读取；建议先预览，敏感会话使用可信模型端点。","en":"Medium risk: the plugin reads source-session history and sends it to the configured worker model for summarization, so sensitive content reaches that model provider. It can also create and rename sessions, create and pause goals, archive temporary workers, and write editable summaries under the OS temp directory. Static review found no shell execution, telemetry, independent remote service, or credential access; preview first and use a trusted model endpoint for sensitive sessions."}}},{"id":"beiyege-01/dsh-voice-ai-girlfriend-plugin","order":360,"name":"@beiyege-01/dsh-voice-ai-girlfriend","owner":"beiyege-01","repo":"beiyege-01/dsh-voice-ai-girlfriend-plugin","url":"https://github.com/beiyege-01/dsh-voice-ai-girlfriend-plugin","category":"tools","description":{"zh":"@beiyege-01/dsh-voice-ai-girlfriend","en":"@beiyege-01/dsh-voice-ai-girlfriend"},"added":"2026-08-20","curated":false,"topic":true,"stars":1,"forks":2,"openIssues":0,"watchers":1,"pushedAt":"2026-08-19T19:44:52Z","updatedAt":"2026-08-19T19:45:21Z","createdAt":"2026-08-16T17:41:07Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@beiyege-01/dsh-voice-ai-girlfriend","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d50e1980bda452a2297fd46aa401367f49027032","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:52.810Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:52.810Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"beiyege-01/dsh-voice-ai-girlfriend-plugin@d50e1980bda452a2297fd46aa401367f49027032#scan-2","versionCount":1,"latestCommit":"d50e1980bda452a2297fd46aa401367f49027032","latestCheckedAt":"2026-08-20T00:00:52.810Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"kitup666/dsh-plugin-kmanager","order":361,"name":"@deepseek-ai/dsh-plugin-kmanager","owner":"Kitup666","repo":"Kitup666/dsh-plugin-kmanager","url":"https://github.com/Kitup666/dsh-plugin-kmanager","category":"tools","description":{"zh":"Deepseek harness插件安装管理助手","en":"Deepseek harness插件安装管理助手"},"added":"2026-08-20","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-19T19:49:12Z","updatedAt":"2026-08-19T19:50:11Z","createdAt":"2026-08-16T15:51:02Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@deepseek-ai/dsh-plugin-kmanager","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8701577405c92588373afbd9f79df477053836f6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:48.952Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:48.952Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"kitup666/dsh-plugin-kmanager@8701577405c92588373afbd9f79df477053836f6#scan-2","versionCount":1,"latestCommit":"8701577405c92588373afbd9f79df477053836f6","latestCheckedAt":"2026-08-20T00:00:48.952Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"syncended/deepseek-harness-openai-codex","order":362,"name":"@syncended/dsh-codex","owner":"syncended","repo":"syncended/deepseek-harness-openai-codex","url":"https://github.com/syncended/deepseek-harness-openai-codex","category":"tools","description":{"zh":"@syncended/dsh-codex","en":"@syncended/dsh-codex"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:38:57Z","updatedAt":"2026-08-19T19:41:40Z","createdAt":"2026-08-15T15:27:01Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@syncended/dsh-codex","version":"0.0.7","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4486d153936338d29d5002abf6ccd4327572680c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:58.420Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:58.420Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"syncended/deepseek-harness-openai-codex@4486d153936338d29d5002abf6ccd4327572680c#scan-2","versionCount":1,"latestCommit":"4486d153936338d29d5002abf6ccd4327572680c","latestCheckedAt":"2026-08-20T00:00:58.420Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"feibi-mochi/deepseek-harness-control-center","order":363,"name":"deepseek-harness-wallet","owner":"feibi-mochi","repo":"feibi-mochi/deepseek-harness-control-center","url":"https://github.com/feibi-mochi/deepseek-harness-control-center","category":"ui","description":{"zh":"DeepSeek Harness account monitoring, usage accounting, completion alerts, official recharge, flexible layout, and agent-assisted session controls. / 账户监控、提醒、充值与会话控制中心","en":"DeepSeek Harness account monitoring, usage accounting, completion alerts, official recharge, flexible layout, and agent-assisted session controls. / 账户监控、提醒、充值与会话控制中心"},"added":"2026-08-20","curated":false,"topic":true,"stars":56,"forks":3,"openIssues":1,"watchers":56,"pushedAt":"2026-08-20T09:16:00Z","updatedAt":"2026-08-20T10:34:35Z","createdAt":"2026-08-14T10:43:58Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"deepseek-harness-wallet","version":"0.2.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9cc3bef27dcc8a56f3fab46061ea61bf79ebf5c3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T12:01:00.785Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T12:01:00.785Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"feibi-mochi/deepseek-harness-control-center@9cc3bef27dcc8a56f3fab46061ea61bf79ebf5c3#scan-2","versionCount":1,"latestCommit":"9cc3bef27dcc8a56f3fab46061ea61bf79ebf5c3","latestCheckedAt":"2026-08-20T12:01:00.785Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"babkiny/dsh-arxiv-ml-search","order":364,"name":"dsh-arxiv-ml-search","owner":"babkiny","repo":"babkiny/dsh-arxiv-ml-search","url":"https://github.com/babkiny/dsh-arxiv-ml-search","category":"tools","description":{"zh":"dsh-arxiv-ml-search","en":"dsh-arxiv-ml-search"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:46:33Z","updatedAt":"2026-08-19T19:54:49Z","createdAt":"2026-08-19T14:22:24Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-arxiv-ml-search","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e1c122051a72ed414ddf1c05094e1d47f62e1286","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:50.094Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:50.094Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索"]},"passport":{"evidenceId":"babkiny/dsh-arxiv-ml-search@e1c122051a72ed414ddf1c05094e1d47f62e1286#scan-2","versionCount":1,"latestCommit":"e1c122051a72ed414ddf1c05094e1d47f62e1286","latestCheckedAt":"2026-08-20T00:00:50.094Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"satan9394/dsh-bash-scripting","order":365,"name":"dsh-bash-scripting","owner":"satan9394","repo":"satan9394/dsh-bash-scripting","url":"https://github.com/satan9394/dsh-bash-scripting","category":"workflow","description":{"zh":"DSH skill: Bash 脚本防御模式，set -euo pipefail/参数校验/错误处理/安全（受 wshobson/agents 启发）","en":"DSH skill: Bash 脚本防御模式，set -euo pipefail/参数校验/错误处理/安全（受 wshobson/agents 启发）"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:43:31Z","updatedAt":"2026-08-19T19:45:17Z","createdAt":"2026-08-19T19:43:26Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-bash-scripting","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e9b421d420fe824f4d44e0344d6e22de2b3cb712","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:52.797Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:52.797Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"satan9394/dsh-bash-scripting@e9b421d420fe824f4d44e0344d6e22de2b3cb712#scan-2","versionCount":1,"latestCommit":"e9b421d420fe824f4d44e0344d6e22de2b3cb712","latestCheckedAt":"2026-08-20T00:00:52.797Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"noirbright/dsh-codex-sidebar","order":366,"name":"dsh-codex-sidebar","owner":"NOirBRight","repo":"NOirBRight/dsh-codex-sidebar","url":"https://github.com/NOirBRight/dsh-codex-sidebar","category":"ui","description":{"zh":"Codex-app-style sidebar for a DeepSeek Harness 主会话","en":"Codex-app-style sidebar for a DeepSeek Harness 主会话"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:46:56Z","updatedAt":"2026-08-19T19:48:57Z","createdAt":"2026-08-19T18:14:56Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-codex-sidebar","version":"0.2.4","lifecycleScripts":[],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a39504769deb6df5e0ad3ab0d54cef0aeafcb59a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:49.421Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:49.421Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"noirbright/dsh-codex-sidebar@a39504769deb6df5e0ad3ab0d54cef0aeafcb59a#scan-2","versionCount":1,"latestCommit":"a39504769deb6df5e0ad3ab0d54cef0aeafcb59a","latestCheckedAt":"2026-08-20T00:00:49.421Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"satan9394/dsh-data-quality","order":367,"name":"dsh-data-quality","owner":"satan9394","repo":"satan9394/dsh-data-quality","url":"https://github.com/satan9394/dsh-data-quality","category":"workflow","description":{"zh":"DSH skill: 数据质量框架，校验规则/数据契约/质量监控/CI 自动化（受 wshobson/agents 38k★ 启发）","en":"DSH skill: 数据质量框架，校验规则/数据契约/质量监控/CI 自动化（受 wshobson/agents 38k★ 启发）"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:43:21Z","updatedAt":"2026-08-19T19:45:44Z","createdAt":"2026-08-19T19:43:17Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-data-quality","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2bb3100a876011b8310f818397dd7c7ea4a4bf1b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:53.801Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:53.801Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"satan9394/dsh-data-quality@2bb3100a876011b8310f818397dd7c7ea4a4bf1b#scan-2","versionCount":1,"latestCommit":"2bb3100a876011b8310f818397dd7c7ea4a4bf1b","latestCheckedAt":"2026-08-20T00:00:53.801Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"scotlight/dsh-guardian-approval","order":368,"name":"dsh-guardian-approval","owner":"Scotlight","repo":"Scotlight/dsh-guardian-approval","url":"https://github.com/Scotlight/dsh-guardian-approval","category":"dev","description":{"zh":"Independent model-backed automatic approval plugin for DSH (Codex Guardian-style auto-review)","en":"Independent model-backed automatic approval plugin for DSH (Codex Guardian-style auto-review)"},"added":"2026-08-20","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-20T09:19:41Z","updatedAt":"2026-08-20T09:21:29Z","createdAt":"2026-08-18T03:50:51Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-guardian-approval","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bd8c18abcf583f26cc8490c216bbc914446ecdc0","installCommand":"dsh plugin --profile web add github:Scotlight/dsh-guardian-approval#bd8c18abcf583f26cc8490c216bbc914446ecdc0","discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T12:00:54.012Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-20T12:00:54.012Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"scotlight/dsh-guardian-approval@bd8c18abcf583f26cc8490c216bbc914446ecdc0#scan-2","versionCount":1,"latestCommit":"bd8c18abcf583f26cc8490c216bbc914446ecdc0","latestCheckedAt":"2026-08-20T12:00:54.012Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"satan9394/dsh-llm-eval","order":369,"name":"dsh-llm-eval","owner":"satan9394","repo":"satan9394/dsh-llm-eval","url":"https://github.com/satan9394/dsh-llm-eval","category":"workflow","description":{"zh":"DSH skill: LLM 评估，忠实度/相关性/测试集/幻觉检测/回归守护（受 wshobson/agents 启发）","en":"DSH skill: LLM 评估，忠实度/相关性/测试集/幻觉检测/回归守护（受 wshobson/agents 启发）"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T19:37:23Z","updatedAt":"2026-08-19T19:38:48Z","createdAt":"2026-08-19T19:37:18Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-llm-eval","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7690b6ae38c1fb14a6672df82b2be9227bb77226","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:58.453Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T00:00:58.453Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"satan9394/dsh-llm-eval@7690b6ae38c1fb14a6672df82b2be9227bb77226#scan-2","versionCount":1,"latestCommit":"7690b6ae38c1fb14a6672df82b2be9227bb77226","latestCheckedAt":"2026-08-20T00:00:58.453Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"dream-num/dsh-univer-office","order":370,"name":"dsh-univer-office","owner":"dream-num","repo":"dream-num/dsh-univer-office","url":"https://github.com/dream-num/dsh-univer-office","category":"tools","description":{"zh":"Preview, create, edit office spreadsheets, docs & slides inside DeepSeek Harness. Power by Univer.","en":"Preview, create, edit office spreadsheets, docs & slides inside DeepSeek Harness. Power by Univer."},"added":"2026-08-20","curated":false,"topic":true,"stars":24,"forks":2,"openIssues":0,"watchers":24,"pushedAt":"2026-08-19T19:41:39Z","updatedAt":"2026-08-19T23:41:35Z","createdAt":"2026-08-15T16:29:45Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://univer.ai","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-univer-office","version":"0.2.6","lifecycleScripts":[],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8f987d57e01e7c3feb521f50fdbda249449c107c","installCommand":"dsh plugin --profile web add github:dream-num/dsh-univer-office#8f987d57e01e7c3feb521f50fdbda249449c107c","discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T00:00:54.941Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-20T00:00:54.941Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"dream-num/dsh-univer-office@8f987d57e01e7c3feb521f50fdbda249449c107c#scan-2","versionCount":1,"latestCommit":"8f987d57e01e7c3feb521f50fdbda249449c107c","latestCheckedAt":"2026-08-20T00:00:54.941Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xia-sc/dsh-update-notifier","order":371,"name":"dsh-update-notifier","owner":"xia-sc","repo":"xia-sc/dsh-update-notifier","url":"https://github.com/xia-sc/dsh-update-notifier","category":"tools","description":{"zh":"DSH 启动时检测 @deepseek-ai/dsh 可更新版本（npm + GitHub Tags 交叉验证）","en":"DSH 启动时检测 @deepseek-ai/dsh 可更新版本（npm + GitHub Tags 交叉验证）"},"added":"2026-08-20","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-20T09:20:52Z","updatedAt":"2026-08-20T09:22:30Z","createdAt":"2026-08-20T08:03:44Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-update-notifier","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b339fc74a526cd9b98a4ee5ca49974125648db89","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T12:00:51.740Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T12:00:51.740Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"xia-sc/dsh-update-notifier@b339fc74a526cd9b98a4ee5ca49974125648db89#scan-2","versionCount":1,"latestCommit":"b339fc74a526cd9b98a4ee5ca49974125648db89","latestCheckedAt":"2026-08-20T12:00:51.740Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"enter3211/dsh-web-search-all-modes","order":372,"name":"dsh-web-search-all-modes","owner":"Enter3211","repo":"Enter3211/dsh-web-search-all-modes","url":"https://github.com/Enter3211/dsh-web-search-all-modes","category":"tools","description":{"zh":"所有 dsh 对话模式支持联网搜索，极简模式可用。Web search for all dsh conversation modes, minimal included.","en":"所有 dsh 对话模式支持联网搜索，极简模式可用。Web search for all dsh conversation modes, minimal included."},"added":"2026-08-20","curated":false,"topic":true,"stars":5,"forks":0,"openIssues":0,"watchers":5,"pushedAt":"2026-08-20T09:15:44Z","updatedAt":"2026-08-20T09:32:56Z","createdAt":"2026-08-20T08:47:26Z","license":"MIT","language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-web-search-all-modes","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"09df9fbd018e3191e7619efb376ba1ea9eba0dcf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T12:01:00.638Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T12:01:00.638Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"enter3211/dsh-web-search-all-modes@09df9fbd018e3191e7619efb376ba1ea9eba0dcf#scan-2","versionCount":1,"latestCommit":"09df9fbd018e3191e7619efb376ba1ea9eba0dcf","latestCheckedAt":"2026-08-20T12:01:00.638Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tiz36/evo","order":373,"name":"evo","owner":"TIZ36","repo":"TIZ36/evo","url":"https://github.com/TIZ36/evo","category":"session","description":{"zh":"agent memory plugin based on CLP","en":"agent memory plugin based on CLP"},"added":"2026-08-20","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-20T09:16:19Z","updatedAt":"2026-08-20T09:18:04Z","createdAt":"2026-08-14T04:43:04Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"evo","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","dist/index.mjs","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"56d2c81133174ddf88d69b86390baba9591b9911","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-20","lastSeenAt":"2026-08-20T12:00:58.001Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-20T12:00:58.001Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"tiz36/evo@56d2c81133174ddf88d69b86390baba9591b9911#scan-2","versionCount":1,"latestCommit":"56d2c81133174ddf88d69b86390baba9591b9911","latestCheckedAt":"2026-08-20T12:00:58.001Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"sirilee/dsh-edit-approval","order":374,"name":"dsh-edit-approval","owner":"sirilee","repo":"sirilee/dsh-edit-approval","url":"https://github.com/sirilee/dsh-edit-approval","category":"tools","description":{"zh":"在 Agent 写文件前展示红绿行级 diff，让用户逐次批准或拒绝 write、edit 与 str_replace_editor；v0.2.1 新增长 diff 折叠。","en":"Shows a red and green line-level diff before agent file edits, allowing per-call approval or rejection for write, edit, and str_replace_editor; v0.2.1 adds collapsible long diffs."},"added":"2026-08-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-edit-approval","version":"0.3.2","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"33dc0f9ab6eb9fd6de1b664fdda1fb7f66ede608","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19T08:31:35.214Z","lastSeenAt":"2026-09-17T00:01:45.249Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T00:01:45.249Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"sirilee/dsh-edit-approval@33dc0f9ab6eb9fd6de1b664fdda1fb7f66ede608#scan-2","versionCount":1,"latestCommit":"33dc0f9ab6eb9fd6de1b664fdda1fb7f66ede608","latestCheckedAt":"2026-09-17T00:01:45.249Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"sirilee/dsh-edit-approval","pickedAt":"2026-08-19T08:31:35.214Z","reviewedCommit":"d50ae758f415986437748abb22afdfb15f4470b0","category":"tools","summary":{"zh":"在 Agent 写文件前展示红绿行级 diff，让用户逐次批准或拒绝 write、edit 与 str_replace_editor；v0.2.1 新增长 diff 折叠。","en":"Shows a red and green line-level diff before agent file edits, allowing per-call approval or rejection for write, edit, and str_replace_editor; v0.2.1 adds collapsible long diffs."},"reason":{"zh":"它把文件修改审批放在真正落盘前，直接补足 Web 工作流的安全感。v0.2.1 已发布至 npm，包带 OIDC/SLSA provenance，发布校验通过；源码包含 54 项测试，折叠功能另有 jsdom 测试。","en":"It places file-edit approval before disk writes, adding a useful safety gate to the Web workflow. v0.2.1 is published on npm with OIDC/SLSA provenance and passing release checks; the source includes 54 tests plus dedicated jsdom coverage for collapse behavior."},"safety":{"risk":"medium","zh":"中风险：插件会读取目标文件内容、重建拟写入结果并拦截写工具，因此可见工作区代码，也可能因误判阻塞编辑。静态审查未发现网络外发、遥测、Shell 或凭据访问；bash/pwsh 内的文件修改不受保护。registry 安装使用预构建包，GitHub 源码安装会触发 prepare 构建并需显式放行。","en":"Medium risk: the plugin reads target files, reconstructs proposed content, and intercepts write tools, so it can see workspace code and may block edits on false positives. Static review found no network egress, telemetry, shell execution, or credential access; file changes inside bash or pwsh are not covered. Registry installs use the prebuilt package, while GitHub source installs trigger the prepare build and require explicit approval."}}},{"id":"trapstreet/dsh-trapstreet","order":375,"name":"@trapstreet/dsh-trapstreet","owner":"trapstreet","repo":"trapstreet/dsh-trapstreet","url":"https://github.com/trapstreet/dsh-trapstreet","category":"tools","description":{"zh":"Check which DeepSeek Harness plugins actually loaded, and look up public evaluation boards on trapstreet.run","en":"Check which DeepSeek Harness plugins actually loaded, and look up public evaluation boards on trapstreet.run"},"added":"2026-08-19","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-18T21:04:08Z","updatedAt":"2026-08-18T21:05:37Z","createdAt":"2026-08-17T08:06:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@trapstreet/dsh-trapstreet","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e3a89f6915c5810764213bad84cf64656be33f72","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T00:00:56.914Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T00:00:56.914Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"trapstreet/dsh-trapstreet@e3a89f6915c5810764213bad84cf64656be33f72#scan-2","versionCount":1,"latestCommit":"e3a89f6915c5810764213bad84cf64656be33f72","latestCheckedAt":"2026-08-19T00:00:56.914Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"chiang21fcb/cn-linebreak","order":376,"name":"cn-linebreak","owner":"chiang21fcb","repo":"chiang21fcb/cn-linebreak","url":"https://github.com/chiang21fcb/cn-linebreak","category":"tools","description":{"zh":"中文网页文案断行审查与修复工具：按《中文网页文案断行修复指南》检查孤字行/词组被拆/缺 keep-all 等问题，并自动插入。","en":"中文网页文案断行审查与修复工具：按《中文网页文案断行修复指南》检查孤字行/词组被拆/缺 keep-all 等问题，并自动插入。"},"added":"2026-08-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T10:38:29Z","updatedAt":"2026-08-19T10:39:34Z","createdAt":"2026-08-17T10:42:01Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"cn-linebreak","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/engine.js"],"invalidDeclaredPaths":[]},"screenedCommit":"983fc99a96fab6dd94104ea485b4e1cd354c3e2a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T12:00:54.778Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T12:00:54.778Z","findings":[{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["src/engine.js"]}],"filesInspected":["package.json","src/engine.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现遥测或分析服务线索"]},"passport":{"evidenceId":"chiang21fcb/cn-linebreak@983fc99a96fab6dd94104ea485b4e1cd354c3e2a#scan-2","versionCount":1,"latestCommit":"983fc99a96fab6dd94104ea485b4e1cd354c3e2a","latestCheckedAt":"2026-08-19T12:00:54.778Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"yaoay/dsh-gpt-compat","order":377,"name":"dsh-gpt-compat","owner":"YaoaY","repo":"YaoaY/dsh-gpt-compat","url":"https://github.com/YaoaY/dsh-gpt-compat","category":"dev","description":{"zh":"DSH 的 GPT/Codex 沙箱提权参数兼容插件 | Fail-closed GPT/Codex sandbox escalation compatibility for DeepSeek Harness","en":"DSH 的 GPT/Codex 沙箱提权参数兼容插件 | Fail-closed GPT/Codex sandbox escalation compatibility for DeepSeek Harness"},"added":"2026-08-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-18T21:08:14Z","updatedAt":"2026-08-18T21:25:23Z","createdAt":"2026-08-18T20:31:25Z","license":"MIT","language":"JavaScript","homepage":"https://www.npmjs.com/package/dsh-gpt-compat","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-gpt-compat","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b794be800607330d80cfd4ec870e6765ae89c386","installCommand":"dsh plugin --profile web add github:YaoaY/dsh-gpt-compat#b794be800607330d80cfd4ec870e6765ae89c386","discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T00:00:57.050Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-19T00:00:57.050Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"yaoay/dsh-gpt-compat@b794be800607330d80cfd4ec870e6765ae89c386#scan-2","versionCount":1,"latestCommit":"b794be800607330d80cfd4ec870e6765ae89c386","latestCheckedAt":"2026-08-19T00:00:57.050Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"kyincode/dsh-hooks-plugin","order":378,"name":"dsh-hooks-plugin","owner":"KYinCode","repo":"KYinCode/dsh-hooks-plugin","url":"https://github.com/KYinCode/dsh-hooks-plugin","category":"workflow","description":{"zh":"Claude Code 风格的 DSH hooks：通过 .dsh/hooks.json 在智能体/工具生命周期事件上运行 shell 命令 ｜ Claude Code style hooks for DeepSeek Harness: shell commands on agent/tool events via .dsh/hooks.json","en":"Claude Code 风格的 DSH hooks：通过 .dsh/hooks.json 在智能体/工具生命周期事件上运行 shell 命令 ｜ Claude Code style hooks for DeepSeek Harness: shell commands on agent/tool events via .dsh/hooks.json"},"added":"2026-08-19","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-19T10:38:01Z","updatedAt":"2026-08-19T10:39:44Z","createdAt":"2026-08-18T17:58:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-hooks-plugin","version":"0.2.11","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1c16ac8202cc4bbcfab7b857e516a4296fa54e41","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T12:00:55.965Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T12:00:55.965Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.mjs","client/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","client/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"kyincode/dsh-hooks-plugin@1c16ac8202cc4bbcfab7b857e516a4296fa54e41#scan-2","versionCount":1,"latestCommit":"1c16ac8202cc4bbcfab7b857e516a4296fa54e41","latestCheckedAt":"2026-08-19T12:00:55.965Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"jcs130/dsh-minecraft-agent","order":379,"name":"dsh-minecraft-agent","owner":"jcs130","repo":"jcs130/dsh-minecraft-agent","url":"https://github.com/jcs130/dsh-minecraft-agent","category":"workflow","description":{"zh":"dsh-minecraft-agent","en":"dsh-minecraft-agent"},"added":"2026-08-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-19T10:37:47Z","updatedAt":"2026-08-19T10:41:12Z","createdAt":"2026-08-15T10:21:37Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-minecraft-agent","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/bootstrap.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"edcad8efaa0ec1197a62928b534da0a37ec22a6d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T12:00:58.389Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T12:00:58.389Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/bootstrap.mjs"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"jcs130/dsh-minecraft-agent@edcad8efaa0ec1197a62928b534da0a37ec22a6d#scan-2","versionCount":1,"latestCommit":"edcad8efaa0ec1197a62928b534da0a37ec22a6d","latestCheckedAt":"2026-08-19T12:00:58.389Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"rand0wn/dsh-minimal-anchor","order":380,"name":"dsh-minimal-anchor","owner":"rand0wn","repo":"rand0wn/dsh-minimal-anchor","url":"https://github.com/rand0wn/dsh-minimal-anchor","category":"session","description":{"zh":"DeepSeek Harness (dsh) plugin: prune the tool schema and inject a structural preamble on a session's first turn only","en":"DeepSeek Harness (dsh) plugin: prune the tool schema and inject a structural preamble on a session's first turn only"},"added":"2026-08-19","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-18T21:14:26Z","updatedAt":"2026-08-18T21:16:26Z","createdAt":"2026-08-17T10:28:37Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-minimal-anchor","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d450e212eadecf5e8370e6dba870f03e5b4d2977","installCommand":"dsh plugin --profile web add github:rand0wn/dsh-minimal-anchor#d450e212eadecf5e8370e6dba870f03e5b4d2977","discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T00:00:48.847Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-19T00:00:48.847Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"rand0wn/dsh-minimal-anchor@d450e212eadecf5e8370e6dba870f03e5b4d2977#scan-2","versionCount":1,"latestCommit":"d450e212eadecf5e8370e6dba870f03e5b4d2977","latestCheckedAt":"2026-08-19T00:00:48.847Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"drscrewdriver/dsh-thinking-levels","order":381,"name":"dsh-thinking-levels","owner":"drscrewdriver","repo":"drscrewdriver/dsh-thinking-levels","url":"https://github.com/drscrewdriver/dsh-thinking-levels","category":"tools","description":{"zh":"deepseek-harness dsh thinging levels 调整 reasoning强度调整","en":"deepseek-harness dsh thinging levels 调整 reasoning强度调整"},"added":"2026-08-19","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-18T21:11:15Z","updatedAt":"2026-08-18T21:13:01Z","createdAt":"2026-08-18T15:39:30Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-thinking-levels","version":"0.4.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"036295b4dc2482a8cdaa75fc2bad3b0213085eaf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T00:00:52.035Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T00:00:52.035Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"drscrewdriver/dsh-thinking-levels@036295b4dc2482a8cdaa75fc2bad3b0213085eaf#scan-2","versionCount":1,"latestCommit":"036295b4dc2482a8cdaa75fc2bad3b0213085eaf","latestCheckedAt":"2026-08-19T00:00:52.035Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"chongcyrus/vibe-mathematics","order":382,"name":"dsh-vibe-math","owner":"ChongCyrus","repo":"ChongCyrus/Vibe-Mathematics","url":"https://github.com/ChongCyrus/Vibe-Mathematics","category":"workflow","description":{"zh":"Vibe Mathematics —— 多代理数学问题求解与形式化验证框架","en":"Vibe Mathematics —— 多代理数学问题求解与形式化验证框架"},"added":"2026-08-19","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-19T10:37:40Z","updatedAt":"2026-08-19T10:38:55Z","createdAt":"2026-08-02T05:36:53Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-vibe-math","version":"0.3.18","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","installer.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2d216e054b452f1078593084b7160884bce43e1f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T12:00:58.303Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T12:00:58.303Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["installer.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["installer.js"]}],"filesInspected":["package.json","installer.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"chongcyrus/vibe-mathematics@2d216e054b452f1078593084b7160884bce43e1f#scan-2","versionCount":1,"latestCommit":"2d216e054b452f1078593084b7160884bce43e1f","latestCheckedAt":"2026-08-19T12:00:58.303Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zuorn/tydora","order":383,"name":"tydora","owner":"zuorn","repo":"zuorn/Tydora","url":"https://github.com/zuorn/Tydora","category":"ui","description":{"zh":"Let Your Ideas Flow — Tydora is a modern desktop Markdown editor combining WYSIWYG editing, bidirectional links, mind maps, and an infinite canvas — empowering deep thinking and effortless expression.","en":"Let Your Ideas Flow — Tydora is a modern desktop Markdown editor combining WYSIWYG editing, bidirectional links, mind maps, and an infinite canvas — empowering deep thinking and effortless expression."},"added":"2026-08-19","curated":false,"topic":true,"stars":50,"forks":5,"openIssues":5,"watchers":50,"pushedAt":"2026-08-19T10:38:49Z","updatedAt":"2026-08-19T11:57:09Z","createdAt":"2026-06-19T12:07:06Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://zuorn.github.io/Tydora/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"tydora","version":"0.1.8","lifecycleScripts":["postinstall"],"runtimeDependencies":77,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"8a244efd4e76eb114cb5c8782996c664385ec941","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-19","lastSeenAt":"2026-08-19T12:00:54.896Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-19T12:00:54.896Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：postinstall"]},"passport":{"evidenceId":"zuorn/tydora@8a244efd4e76eb114cb5c8782996c664385ec941#scan-2","versionCount":1,"latestCommit":"8a244efd4e76eb114cb5c8782996c664385ec941","latestCheckedAt":"2026-08-19T12:00:54.896Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"cc19990113/dsh-plugin-codegraph","order":384,"name":"dsh-plugin-codegraph","owner":"cc19990113","repo":"cc19990113/dsh-plugin-codegraph","url":"https://github.com/cc19990113/dsh-plugin-codegraph","category":"tools","description":{"zh":"用本地 Tree-sitter 代码图给 DSH Agent 提供声明、调用者、影响范围、调用路径和任务上下文查询，并支持自动刷新索引。","en":"Adds a local Tree-sitter code graph to DSH for declaration, caller, impact, trace, and task-context queries, with automatic index refresh."},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-plugin-codegraph-root","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["packages/bundle/cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"fff66800577770a2f92af0418cb9e336fd6086b2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18T06:08:30.452Z","lastSeenAt":"2026-09-17T00:01:45.122Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T00:01:45.122Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","packages/bundle/cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"cc19990113/dsh-plugin-codegraph@fff66800577770a2f92af0418cb9e336fd6086b2#scan-2","versionCount":1,"latestCommit":"fff66800577770a2f92af0418cb9e336fd6086b2","latestCheckedAt":"2026-09-17T00:01:45.122Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7},"codexPick":{"repo":"cc19990113/dsh-plugin-codegraph","pickedAt":"2026-08-18T06:08:30.452Z","reviewedCommit":"213651b48be765936ead1ef706cd4b6cfb1ad9b2","category":"tools","summary":{"zh":"用本地 Tree-sitter 代码图给 DSH Agent 提供声明、调用者、影响范围、调用路径和任务上下文查询，并支持自动刷新索引。","en":"Adds a local Tree-sitter code graph to DSH for declaration, caller, impact, trace, and task-context queries, with automatic index refresh."},"reason":{"zh":"v0.1.1 已发布 GitHub Release 与五个 npm 包，修复监听自身数据库导致的无限重建及 macOS/Windows 忽略 .gitignore，并将文件监听设为默认开启。发布提交绑定完整 SHA，类型检查、覆盖率测试、构建和发布 CI 均通过；运行包无生命周期脚本，索引格式兼容 codegraph CLI。","en":"v0.1.1 is published as a GitHub Release and five npm packages. It fixes self-triggered rebuild loops and ignored .gitignore rules on macOS and Windows, then enables watching by default. The release is pinned to the reviewed SHA; typecheck, coverage tests, build, and publish CI pass. Runtime packages have no lifecycle scripts and use the codegraph CLI-compatible index format."},"safety":{"risk":"medium","zh":"中风险：索引器会递归读取工作区源码，在项目中写入 .codegraph/codegraph.db，并默认常驻监听文件变化后全量重建；查询工具还可通过宿主 fs 读取相关源码片段。未发现网络外发、遥测或自动 Shell；Git 探测和 Hook 安装仅作为库 API 导出，插件加载时不会调用。项目和发布都很新，大仓库建议先关闭 watch 或限制 languages、exclude 与 maxFiles。","en":"Medium risk: the indexer recursively reads workspace source, writes .codegraph/codegraph.db, and by default keeps a watcher that performs full rebuilds after changes; query tools can also read relevant source snippets through the host fs service. No network egress, telemetry, or automatic shell execution was found. Git probing and hook installation are exported library APIs and are not invoked at plugin load. The project and release are very new; on large repositories, disable watch or constrain languages, exclude, and maxFiles."}}},{"id":"mars-sea/dsh-commandcode-provider","order":385,"name":"dsh-commandcode-provider","owner":"mars-sea","repo":"mars-sea/dsh-commandcode-provider","url":"https://github.com/mars-sea/dsh-commandcode-provider","category":"tools","description":{"zh":"把 Command Code 的实时模型目录接入 DSH，支持套餐过滤、推理强度、图片输入与账户用量面板；v0.4.1 已同步 GPT-5.6 Sol。","en":"Connects the live Command Code model catalog to DSH with plan filtering, reasoning effort, image input, and account usage; v0.4.1 adds GPT-5.6 Sol support."},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@mars-sea/dsh-commandcode-provider","version":"0.11.3","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"44498c77a321ce5de42062576507224f878faaba","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18T02:06:21.906Z","lastSeenAt":"2026-09-17T00:01:46.409Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T00:01:46.409Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"mars-sea/dsh-commandcode-provider@44498c77a321ce5de42062576507224f878faaba#scan-2","versionCount":1,"latestCommit":"44498c77a321ce5de42062576507224f878faaba","latestCheckedAt":"2026-09-17T00:01:46.409Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7},"codexPick":{"repo":"mars-sea/dsh-commandcode-provider","pickedAt":"2026-08-18T02:06:21.906Z","reviewedCommit":"1c55773f678ba9ea6604932b646a060c696e7dce","category":"tools","summary":{"zh":"把 Command Code 的实时模型目录接入 DSH，支持套餐过滤、推理强度、图片输入与账户用量面板；v0.4.1 已同步 GPT-5.6 Sol。","en":"Connects the live Command Code model catalog to DSH with plan filtering, reasoning effort, image input, and account usage; v0.4.1 adds GPT-5.6 Sol support."},"reason":{"zh":"v0.4.1 已发布到 npm 和 GitHub Release，绑定同一提交；同步官方 command-code@1.27.1，将 GPT-5.6 Sol 正确归入 GOAT 套餐。插件无运行时依赖，CI、类型检查、测试、构建、npm audit、CodeQL 与 gitleaks 均通过。","en":"v0.4.1 is published on npm and as a GitHub Release at the reviewed commit. It syncs command-code@1.27.1 and correctly exposes GPT-5.6 Sol to GOAT plans. The plugin has no runtime dependencies, and CI, typecheck, tests, build, npm audit, CodeQL, and gitleaks all pass."},"safety":{"risk":"medium","zh":"中风险：生成请求会把消息、系统提示、工具定义、图片、工作目录及运行环境元数据发送到 api.commandcode.ai，并用 API key 查询账户和账单接口；还会读取 ~/.commandcode/auth.json 作为凭据回退并写模型缓存。默认无遥测和 Shell 执行，建议只处理可发送给 Command Code 的项目数据，并固定 0.4.1。","en":"Medium risk: generation sends messages, system prompts, tool schemas, images, working-directory and runtime metadata to api.commandcode.ai, and uses the API key for account and billing calls. It also reads ~/.commandcode/auth.json as a credential fallback and writes a model cache. There is no default telemetry or shell execution; only use it with project data acceptable for Command Code and pin 0.4.1."}}},{"id":"mby159/dsh-desktop-browser","order":386,"name":"@deepseek-ai/dsh-desktop-browser","owner":"Mby159","repo":"Mby159/dsh-desktop-browser","url":"https://github.com/Mby159/dsh-desktop-browser","category":"ui","description":{"zh":"Cordis plugin that opens the dsh Web UI in a browser with no address bar (--app mode)","en":"Cordis plugin that opens the dsh Web UI in a browser with no address bar (--app mode)"},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T22:31:24Z","updatedAt":"2026-08-17T22:32:33Z","createdAt":"2026-08-15T19:54:29Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-desktop-browser","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"12324840e183f549bdd7220ba2cee7b8768bca6f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T00:00:59.286Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T00:00:59.286Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["dist/index.mjs","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dist/index.mjs","src/index.ts"]}],"filesInspected":["package.json","dist/index.mjs","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"mby159/dsh-desktop-browser@12324840e183f549bdd7220ba2cee7b8768bca6f#scan-2","versionCount":1,"latestCommit":"12324840e183f549bdd7220ba2cee7b8768bca6f","latestCheckedAt":"2026-08-18T00:00:59.286Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"jiesou/dsh-cline-free-provider","order":387,"name":"@jiesou/dsh-cline-free-provider","owner":"jiesou","repo":"jiesou/dsh-cline-free-provider","url":"https://github.com/jiesou/dsh-cline-free-provider","category":"dev","description":{"zh":"Cline 免费模型接入 DeepSeek Harness","en":"Cline 免费模型接入 DeepSeek Harness"},"added":"2026-08-18","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-18T06:39:50Z","updatedAt":"2026-08-18T06:40:46Z","createdAt":"2026-08-17T03:34:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@jiesou/dsh-cline-free-provider","version":"0.1.7","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"236f9403cdd9b6b8a0702c1a1d0a1d6111bba4a6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:04:39.994Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:04:39.994Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jiesou/dsh-cline-free-provider@236f9403cdd9b6b8a0702c1a1d0a1d6111bba4a6#scan-2","versionCount":1,"latestCommit":"236f9403cdd9b6b8a0702c1a1d0a1d6111bba4a6","latestCheckedAt":"2026-08-18T12:04:39.994Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"jiesou/dsh-opencode-zen-free-provider","order":388,"name":"@jiesou/dsh-opencode-zen-free-provider","owner":"jiesou","repo":"jiesou/dsh-opencode-zen-free-provider","url":"https://github.com/jiesou/dsh-opencode-zen-free-provider","category":"dev","description":{"zh":"OpenCode Zen 免费模型接入 DeepSeek Harness。1M 上下文，同步全部元数据","en":"OpenCode Zen 免费模型接入 DeepSeek Harness。1M 上下文，同步全部元数据"},"added":"2026-08-18","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-18T06:39:28Z","updatedAt":"2026-08-18T06:40:22Z","createdAt":"2026-08-17T06:45:04Z","license":"MIT","language":"JavaScript","homepage":"https://www.npmjs.com/package/@jiesou/dsh-opencode-zen-free-provider","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@jiesou/dsh-opencode-zen-free-provider","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b99e93d7dc48124c65feae40e22672ea21f1dfec","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:04:40.266Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:04:40.266Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jiesou/dsh-opencode-zen-free-provider@b99e93d7dc48124c65feae40e22672ea21f1dfec#scan-2","versionCount":1,"latestCommit":"b99e93d7dc48124c65feae40e22672ea21f1dfec","latestCheckedAt":"2026-08-18T12:04:40.266Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"alanzhao0128/dsh-balance-monitor","order":389,"name":"dsh-balance-monitor","owner":"alanzhao0128","repo":"alanzhao0128/dsh-balance-monitor","url":"https://github.com/alanzhao0128/dsh-balance-monitor","category":"workflow","description":{"zh":"dsh-balance-monitor","en":"dsh-balance-monitor"},"added":"2026-08-18","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-18T06:38:10Z","updatedAt":"2026-08-18T06:38:53Z","createdAt":"2026-08-17T04:26:23Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-balance-monitor","version":"0.3.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0927ae03bf933164c6b6e6b1d157f8fba88e565d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:04:45.608Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:04:45.608Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"alanzhao0128/dsh-balance-monitor@0927ae03bf933164c6b6e6b1d157f8fba88e565d#scan-2","versionCount":1,"latestCommit":"0927ae03bf933164c6b6e6b1d157f8fba88e565d","latestCheckedAt":"2026-08-18T12:04:45.608Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"3yi2u34yu32/dsh-balance-peak","order":390,"name":"dsh-balance-peak","owner":"3yi2u34yu32","repo":"3yi2u34yu32/dsh-balance-peak","url":"https://github.com/3yi2u34yu32/dsh-balance-peak","category":"dev","description":{"zh":"DeepSeek Harness balance + peak-hour indicator: [red/green dot + balance] chip next to the model name, hover shows peak pricing rules. DSH 余额+高峰时段指示插件","en":"DeepSeek Harness balance + peak-hour indicator: [red/green dot + balance] chip next to the model name, hover shows peak pricing rules. DSH 余额+高峰时段指示插件"},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-18T06:39:25Z","updatedAt":"2026-08-18T06:40:13Z","createdAt":"2026-08-18T06:16:50Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-balance-peak","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5f9477188418d611da853d7b37ad9f096838c29c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:04:42.628Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:04:42.628Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"3yi2u34yu32/dsh-balance-peak@5f9477188418d611da853d7b37ad9f096838c29c#scan-2","versionCount":1,"latestCommit":"5f9477188418d611da853d7b37ad9f096838c29c","latestCheckedAt":"2026-08-18T12:04:42.628Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"xiajiajun516/dsh-config-manager","order":391,"name":"dsh-config-manager","owner":"xiajiajun516","repo":"xiajiajun516/dsh-config-manager","url":"https://github.com/xiajiajun516/dsh-config-manager","category":"ui","description":{"zh":"Backup / export / import / migrate your DeepSeek Harness (DSH) configuration - dual-face Cordis plugin (host engine + Web UI). One-click restore on any machine.","en":"Backup / export / import / migrate your DeepSeek Harness (DSH) configuration - dual-face Cordis plugin (host engine + Web UI). One-click restore on any machine."},"added":"2026-08-18","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-17T22:37:19Z","updatedAt":"2026-08-17T22:37:49Z","createdAt":"2026-08-14T17:42:12Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-config-manager","version":"0.1.28","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9a741709af3cd1bbee86635a5062b4b5367ed415","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T00:00:54.374Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T00:00:54.374Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"xiajiajun516/dsh-config-manager@9a741709af3cd1bbee86635a5062b4b5367ed415#scan-2","versionCount":1,"latestCommit":"9a741709af3cd1bbee86635a5062b4b5367ed415","latestCheckedAt":"2026-08-18T00:00:54.374Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"thedeergod666/dsh-musage","order":392,"name":"dsh-musage","owner":"Thedeergod666","repo":"Thedeergod666/dsh-musage","url":"https://github.com/Thedeergod666/dsh-musage","category":"workflow","description":{"zh":"DSH 端的 AI 套餐余额监控插件, 跟当前模型自动切换.目前支持 5 provider (minimax / deepseek / kimi / openrouter / zhipu).｜DSH (DeepSeek Harness) plugin to monitor AI coding-plan usage. Follows active model; 5 providers (minimax, deepseek, kimi, openrouter, zhipu).","en":"DSH 端的 AI 套餐余额监控插件, 跟当前模型自动切换.目前支持 5 provider (minimax / deepseek / kimi / openrouter / zhipu).｜DSH (DeepSeek Harness) plugin to monitor AI coding-plan usage. Follows active model; 5 providers (minimax, deepseek, kimi, openrouter, zhipu)."},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-18T07:12:27Z","updatedAt":"2026-08-18T06:20:20Z","createdAt":"2026-08-17T10:37:26Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-musage","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dsh/index.js","dsh/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f3d1b62cad0cac9879b0125569552322b82ac6b8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:00:51.332Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:00:51.332Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh/index.js","dsh/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dsh/client.js"]}],"filesInspected":["package.json","dsh/index.js","dsh/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"thedeergod666/dsh-musage@f3d1b62cad0cac9879b0125569552322b82ac6b8#scan-2","versionCount":1,"latestCommit":"f3d1b62cad0cac9879b0125569552322b82ac6b8","latestCheckedAt":"2026-08-18T12:00:51.332Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"qq739844663/dsh-netcatty","order":393,"name":"dsh-netcatty","owner":"qq739844663","repo":"qq739844663/dsh-netcatty","url":"https://github.com/qq739844663/dsh-netcatty","category":"tools","description":{"zh":"dsh-netcatty 插件","en":"dsh-netcatty 插件"},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-18T06:51:59Z","updatedAt":"2026-08-18T06:51:23Z","createdAt":"2026-08-18T06:23:07Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-netcatty","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9c5d81aaf9cc089441c07e3795dcdebabe4efbf3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T12:04:36.895Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T12:04:36.895Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"qq739844663/dsh-netcatty@9c5d81aaf9cc089441c07e3795dcdebabe4efbf3#scan-2","versionCount":1,"latestCommit":"9c5d81aaf9cc089441c07e3795dcdebabe4efbf3","latestCheckedAt":"2026-08-18T12:04:36.895Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"chnjames/dsh-plugin-market","order":394,"name":"dsh-plugin-market","owner":"chnjames","repo":"chnjames/dsh-plugin-market","url":"https://github.com/chnjames/dsh-plugin-market","category":"tools","description":{"zh":"DSH 插件市场 — DeepSeek Harness 设置内一键安装社区插件，并提供公开目录站（浏览 / 复制安装命令）","en":"DSH 插件市场 — DeepSeek Harness 设置内一键安装社区插件，并提供公开目录站（浏览 / 复制安装命令）"},"added":"2026-08-18","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":2,"watchers":3,"pushedAt":"2026-08-17T22:39:11Z","updatedAt":"2026-08-17T22:39:50Z","createdAt":"2026-08-14T08:22:16Z","license":null,"language":"TypeScript","homepage":"https://dsh-plugin-market.vercel.app","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-market","version":"0.3.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4bcdfd34d0e4779e22ed5c5882db024b9a92f494","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T00:00:53.101Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T00:00:53.101Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"chnjames/dsh-plugin-market@4bcdfd34d0e4779e22ed5c5882db024b9a92f494#scan-2","versionCount":1,"latestCommit":"4bcdfd34d0e4779e22ed5c5882db024b9a92f494","latestCheckedAt":"2026-08-18T00:00:53.101Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"mrmaii/knotline","order":395,"name":"knotline-dsh","owner":"MrMaii","repo":"MrMaii/knotline","url":"https://github.com/MrMaii/knotline","category":"workflow","description":{"zh":"把 Agent 从对话框搬到一张图上——连线即执行 / Orchestrate AI agents by drawing lines","en":"把 Agent 从对话框搬到一张图上——连线即执行 / Orchestrate AI agents by drawing lines"},"added":"2026-08-18","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T22:35:17Z","updatedAt":"2026-08-17T22:36:43Z","createdAt":"2026-08-17T14:46:18Z","license":"Apache-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"knotline-dsh","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7744809cc8bc62b937de2f234a7cc633449fa9e3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-18","lastSeenAt":"2026-08-18T00:00:58.044Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T00:00:58.044Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"mrmaii/knotline@7744809cc8bc62b937de2f234a7cc633449fa9e3#scan-2","versionCount":1,"latestCommit":"7744809cc8bc62b937de2f234a7cc633449fa9e3","latestCheckedAt":"2026-08-18T00:00:58.044Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"winterhuan/dsh-shadow-mind","order":396,"name":"@winterchenhuan/dsh-shadow-mind","owner":"winterhuan","repo":"winterhuan/dsh-shadow-mind","url":"https://github.com/winterhuan/dsh-shadow-mind","category":"dev","description":{"zh":"Parallel cognitive runtime for DeepSeek Harness, ported from pi-shadow-mind","en":"Parallel cognitive runtime for DeepSeek Harness, ported from pi-shadow-mind"},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T22:33:14Z","updatedAt":"2026-08-17T22:34:03Z","createdAt":"2026-08-16T22:06:34Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@winterchenhuan/dsh-shadow-mind","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"107c337f634d33f20c0fcb8c2fbe1f922f920927","installCommand":"dsh plugin --profile web add github:winterhuan/dsh-shadow-mind#107c337f634d33f20c0fcb8c2fbe1f922f920927","discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-18T00:00:57.902Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-18T00:00:57.902Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"winterhuan/dsh-shadow-mind@107c337f634d33f20c0fcb8c2fbe1f922f920927#scan-2","versionCount":2,"latestCommit":"107c337f634d33f20c0fcb8c2fbe1f922f920927","latestCheckedAt":"2026-08-18T00:00:57.902Z","diffSeverity":"low","verificationScore":6,"verificationPossible":7}},{"id":"viger1/dsh-design","order":397,"name":"dsh-design","owner":"Viger1","repo":"Viger1/dsh-design","url":"https://github.com/Viger1/dsh-design","category":"workflow","description":{"zh":"Design taste your agent can be held to — a design-system skill plus design_audit, which measures the rendered page (type scale, contrast, spacing grid, palette drift) instead of trusting it looked right.","en":"Design taste your agent can be held to — a design-system skill plus design_audit, which measures the rendered page (type scale, contrast, spacing grid, palette drift) instead of trusting it looked right."},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:08Z","updatedAt":"2026-08-17T11:48:40Z","createdAt":"2026-08-17T05:01:02Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Viger1/dsh-preview","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-design","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"19d2d0b8d30ba6e848906b62b7fa1131aa8ddf1d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:54.008Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:54.008Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"viger1/dsh-design@19d2d0b8d30ba6e848906b62b7fa1131aa8ddf1d#scan-2","versionCount":1,"latestCommit":"19d2d0b8d30ba6e848906b62b7fa1131aa8ddf1d","latestCheckedAt":"2026-08-17T12:00:54.008Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"drscrewdriver/dsh-input-traffic","order":398,"name":"dsh-input-traffic","owner":"drscrewdriver","repo":"drscrewdriver/dsh-input-traffic","url":"https://github.com/drscrewdriver/dsh-input-traffic","category":"session","description":{"zh":"打断并输入和下一轮插入不再二选一 支持红色打断插入 黄色下一自然轮插入和绿色待整个逻辑执行完成后输入 并支持邻近高峰期冻结会话在非工作高价时间再继续会话","en":"打断并输入和下一轮插入不再二选一 支持红色打断插入 黄色下一自然轮插入和绿色待整个逻辑执行完成后输入 并支持邻近高峰期冻结会话在非工作高价时间再继续会话"},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:31Z","updatedAt":"2026-08-17T12:00:27Z","createdAt":"2026-08-17T10:31:22Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-input-traffic","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"65749c29ff53f17b86448986c410c92ee8cc2e30","installCommand":"dsh plugin --profile web add github:drscrewdriver/dsh-input-traffic#65749c29ff53f17b86448986c410c92ee8cc2e30","discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:52.164Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-17T12:00:52.164Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"drscrewdriver/dsh-input-traffic@65749c29ff53f17b86448986c410c92ee8cc2e30#scan-2","versionCount":1,"latestCommit":"65749c29ff53f17b86448986c410c92ee8cc2e30","latestCheckedAt":"2026-08-17T12:00:52.164Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"stopchewing/dsh-mcp-view","order":399,"name":"dsh-mcp-view","owner":"stopchewing","repo":"stopchewing/dsh-mcp-view","url":"https://github.com/stopchewing/dsh-mcp-view","category":"ui","description":{"zh":"MCP Tools panel for the DeepSeek Harness Web GUI: every MCP server & tool in your session, grouped by server, with JSON schemas, live search and last-used times from real session logs.","en":"MCP Tools panel for the DeepSeek Harness Web GUI: every MCP server & tool in your session, grouped by server, with JSON schemas, live search and last-used times from real session logs."},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:48Z","updatedAt":"2026-08-17T11:49:07Z","createdAt":"2026-08-17T11:01:54Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/stopchewing/dsh-mcp-view","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mcp-view","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cf05cffcf24584b350650e3f646f6b37e71a8c2c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:48.556Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:48.556Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"stopchewing/dsh-mcp-view@cf05cffcf24584b350650e3f646f6b37e71a8c2c#scan-2","versionCount":1,"latestCommit":"cf05cffcf24584b350650e3f646f6b37e71a8c2c","latestCheckedAt":"2026-08-17T12:00:48.556Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"viger1/dsh-pilot","order":400,"name":"dsh-pilot","owner":"Viger1","repo":"Viger1/dsh-pilot","url":"https://github.com/Viger1/dsh-pilot","category":"session","description":{"zh":"✋ Hands for your DeepSeek Harness agent — autonomous browser operation by accessibility refs, with a permission model that follows your dsh session.","en":"✋ Hands for your DeepSeek Harness agent — autonomous browser operation by accessibility refs, with a permission model that follows your dsh session."},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:03Z","updatedAt":"2026-08-17T11:49:44Z","createdAt":"2026-08-16T13:40:22Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Viger1/dsh-preview","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-pilot","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1e9f5b01df3fd8c7f816244376789a4988cf908a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:59.496Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:59.496Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"viger1/dsh-pilot@1e9f5b01df3fd8c7f816244376789a4988cf908a#scan-2","versionCount":1,"latestCommit":"1e9f5b01df3fd8c7f816244376789a4988cf908a","latestCheckedAt":"2026-08-17T12:00:59.496Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"viger1/dsh-preview","order":401,"name":"dsh-preview","owner":"Viger1","repo":"Viger1/dsh-preview","url":"https://github.com/Viger1/dsh-preview","category":"workflow","description":{"zh":"👁 Eyes for your DeepSeek Harness agent — it opens, sees, and fixes what it builds. Headless-browser verification tools + a bundled self-check skill.","en":"👁 Eyes for your DeepSeek Harness agent — it opens, sees, and fixes what it builds. Headless-browser verification tools + a bundled self-check skill."},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:01Z","updatedAt":"2026-08-17T11:48:55Z","createdAt":"2026-08-16T13:39:45Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Viger1/dsh-pilot","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-preview","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"161ba60adfa3524c12f9a5297bf12825a6c72b9a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:59.013Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:59.013Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现本地文件写入能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"viger1/dsh-preview@161ba60adfa3524c12f9a5297bf12825a6c72b9a#scan-2","versionCount":1,"latestCommit":"161ba60adfa3524c12f9a5297bf12825a6c72b9a","latestCheckedAt":"2026-08-17T12:00:59.013Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"viger1/dsh-review","order":402,"name":"dsh-review","owner":"Viger1","repo":"Viger1/dsh-review","url":"https://github.com/Viger1/dsh-review","category":"workflow","description":{"zh":"Packaged multi-agent adversarial code review for DeepSeek Harness — parallel finders, then a verifier per finding, so only confirmed defects survive.","en":"Packaged multi-agent adversarial code review for DeepSeek Harness — parallel finders, then a verifier per finding, so only confirmed defects survive."},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:06Z","updatedAt":"2026-08-17T11:49:26Z","createdAt":"2026-08-16T15:57:31Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Viger1/dsh-preview","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-review","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fa1200fc767bc7b95facbfbbe759dece3c5d74eb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:54.868Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:54.868Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"viger1/dsh-review@fa1200fc767bc7b95facbfbbe759dece3c5d74eb#scan-2","versionCount":1,"latestCommit":"fa1200fc767bc7b95facbfbbe759dece3c5d74eb","latestCheckedAt":"2026-08-17T12:00:54.868Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"godpanzz/dsh-usage","order":403,"name":"dsh-usage","owner":"godpanzz","repo":"godpanzz/dsh-usage","url":"https://github.com/godpanzz/dsh-usage","category":"ui","description":{"zh":"DSH 插件：统计今日 token 用量与费用（按模型价格与峰谷计费），Web 侧栏面板 + /usage 命令","en":"DSH 插件：统计今日 token 用量与费用（按模型价格与峰谷计费），Web 侧栏面板 + /usage 命令"},"added":"2026-08-17","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-17T11:48:30Z","updatedAt":"2026-08-17T11:59:27Z","createdAt":"2026-08-17T11:44:41Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-usage","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1b4607ec5845fb5f835dd0205d9b4a77479416e0","installCommand":"dsh plugin --profile web add github:godpanzz/dsh-usage#1b4607ec5845fb5f835dd0205d9b4a77479416e0","discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:52.587Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-17T12:00:52.587Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"godpanzz/dsh-usage@1b4607ec5845fb5f835dd0205d9b4a77479416e0#scan-2","versionCount":1,"latestCommit":"1b4607ec5845fb5f835dd0205d9b4a77479416e0","latestCheckedAt":"2026-08-17T12:00:52.587Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"kexuejin/dsh-zhihu-dashboard","order":404,"name":"dsh-zhihu-dashboard","owner":"kexuejin","repo":"kexuejin/dsh-zhihu-dashboard","url":"https://github.com/kexuejin/dsh-zhihu-dashboard","category":"ui","description":{"zh":"Zhihu (知乎) dashboard for DeepSeek Harness: hot list with trends, follow feed, post tracking, and app-idea distillation — UI + native agent tools","en":"Zhihu (知乎) dashboard for DeepSeek Harness: hot list with trends, follow feed, post tracking, and app-idea distillation — UI + native agent tools"},"added":"2026-08-17","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-17T11:48:54Z","updatedAt":"2026-08-17T11:50:37Z","createdAt":"2026-08-16T00:12:25Z","license":"MIT","language":"HTML","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-zhihu-dashboard","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fedc65ec1ea77858f1feaa10a954acd6c5430a32","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-17","lastSeenAt":"2026-08-17T12:00:48.140Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:48.140Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"kexuejin/dsh-zhihu-dashboard@fedc65ec1ea77858f1feaa10a954acd6c5430a32#scan-2","versionCount":1,"latestCommit":"fedc65ec1ea77858f1feaa10a954acd6c5430a32","latestCheckedAt":"2026-08-17T12:00:48.140Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bowenliang123/dsh-context","order":405,"name":"dsh-context","owner":"bowenliang123","repo":"bowenliang123/dsh-context","url":"https://github.com/bowenliang123/dsh-context","category":"session","description":{"zh":"把会话上下文组成、消耗趋势、压缩与裁剪事件做成可视面板，并新增纯前端 /context 弹窗。","en":"Visualizes session context composition, usage trends, compaction and pruning events, with a client-only /context modal."},"added":"2026-08-16","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16T15:47:47.350Z","lastSeenAt":"2026-08-16T15:47:47.350Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-16T15:47:47.350Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"bowenliang123/dsh-context","pickedAt":"2026-08-16T15:47:47.350Z","reviewedCommit":"1c6fe29021f0c126c1cb529c02e311ba24f038d4","category":"session","summary":{"zh":"把会话上下文组成、消耗趋势、压缩与裁剪事件做成可视面板，并新增纯前端 /context 弹窗。","en":"Visualizes session context composition, usage trends, compaction and pruning events, with a client-only /context modal."},"reason":{"zh":"v0.10.0 的 Git 标签、npm 包与 OIDC 构建来源均绑定同一提交；宿主侧采用纯会话投影，没有自定义 RPC、网络请求或额外持久化，源码和测试完整。","en":"The v0.10.0 Git tag, npm package and OIDC provenance resolve to the same commit. Its host side is a pure session projection with no custom RPC, network request or extra persistence, backed by complete source and tests."},"safety":{"risk":"medium","zh":"中风险：会读取并在本地 Web UI 展示模型可见消息、系统提示和工具结构，可能含敏感内容；静态审查未发现网络外发、Shell、文件写入、遥测或凭据访问。package.json 声明了 Husky prepare 脚本，但没有 install/postinstall；npm 包带 SLSA provenance。建议仅在可信界面使用。","en":"Medium risk: it reads and renders model-visible messages, system-prompt metrics and tool schemas in the local Web UI, which may contain sensitive material. Static review found no network egress, shell execution, file writes, telemetry or credential access. package.json declares a Husky prepare script but no install/postinstall, and the npm package carries SLSA provenance. Use only on a trusted UI."}}},{"id":"ayahunter/dsh-plugin-clinic","order":406,"name":"dsh-plugin-clinic","owner":"ayahunter","repo":"ayahunter/dsh-plugin-clinic","url":"https://github.com/ayahunter/dsh-plugin-clinic","category":"dev","description":{"zh":"只读体检已安装的 DSH 插件，检查加载、依赖、兼容性、安装脚本和 patch 完整性。","en":"Read-only health checks for installed DSH plugins, covering loading, dependencies, compatibility, install scripts, and patch integrity."},"added":"2026-08-16","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16T13:40:36.283Z","lastSeenAt":"2026-08-16T13:40:36.283Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-16T13:40:36.283Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"ayahunter/dsh-plugin-clinic","pickedAt":"2026-08-16T13:40:36.283Z","reviewedCommit":"c62b8136a4f71eeb6e2084e907d9e5010ab4d011","category":"dev","summary":{"zh":"只读体检已安装的 DSH 插件，检查加载、依赖、兼容性、安装脚本和 patch 完整性。","en":"Read-only health checks for installed DSH plugins, covering loading, dependencies, compatibility, install scripts, and patch integrity."},"reason":{"zh":"提供模型工具、Web 面板和稳定 JSON 报告；离线检查引擎不会执行被检插件，也不会修改配置。","en":"Provides a model tool, Web dashboard, and stable JSON report; the offline engine does not execute inspected plugins or change configuration."},"safety":{"risk":"medium","zh":"会读取 ~/.dsh 下的 profile、package.json 与 patch 文件，并通过本地 /clinic 路由展示报告；路由仅做 Host 限制且没有认证，远程暴露 DSH 时需检查反向代理。","en":"Reads profiles, package.json, and patch files under ~/.dsh and serves reports on local /clinic routes; the route uses Host filtering without authentication, so review reverse-proxy exposure when DSH is remotely reachable."}}},{"id":"uckkk/dsh-license-guard","order":407,"name":"dsh-license-guard","owner":"uckkk","repo":"uckkk/dsh-license-guard","url":"https://github.com/uckkk/dsh-license-guard","category":"dev","description":{"zh":"扫描 node_modules 许可证并做发布前合规门禁。","en":"Scans dependency licenses and adds a pre-release compliance gate."},"added":"2026-08-16","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16T10:39:31.618Z","lastSeenAt":"2026-08-16T10:39:31.618Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-16T10:39:31.618Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"uckkk/dsh-license-guard","pickedAt":"2026-08-16T10:39:31.618Z","reviewedCommit":"2ad466ac10b725730ddc400f73b8aee68cf66f0e","category":"dev","summary":{"zh":"扫描 node_modules 许可证并做发布前合规门禁。","en":"Scans dependency licenses and adds a pre-release compliance gate."},"reason":{"zh":"零运行依赖、无网络与 Shell，适合在开源或商业发布前快速排查许可证风险。","en":"Zero runtime dependencies, no network or shell access, and useful before open-source or commercial releases."},"safety":{"risk":"low","zh":"只读取 node_modules 中的 package.json；结果属于启发式筛查，仍需法律复核。","en":"Reads package.json files under node_modules only; findings remain heuristic and need legal review."}}},{"id":"luoyuejun9/dsh-project-memory","order":408,"name":"dsh-project-memory","owner":"luoyuejun9","repo":"luoyuejun9/dsh-project-memory","url":"https://github.com/luoyuejun9/dsh-project-memory","category":"session","description":{"zh":"把项目决策、约束和经验保存成带证据、可校验的长期记忆。","en":"Stores project decisions, constraints, and lessons as evidence-backed, verifiable memory."},"added":"2026-08-16","curated":false,"topic":false,"stars":null,"forks":null,"openIssues":null,"watchers":null,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":null,"maintenance":"unknown","manifest":{"state":"missing","branch":null,"kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"screenedCommit":null,"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16T09:38:31.473Z","lastSeenAt":"2026-08-16T09:38:31.473Z"},"screening":{"version":1,"scope":"manifest","state":"pending","risk":"unknown","checkedAt":"2026-08-16T09:38:31.473Z","findings":[],"filesInspected":[],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["等待定时源码检查"]},"codexPick":{"repo":"luoyuejun9/dsh-project-memory","pickedAt":"2026-08-16T09:38:31.473Z","reviewedCommit":"05215420d6853a1a0f9effcf3a96290cedcc85ed","category":"session","summary":{"zh":"把项目决策、约束和经验保存成带证据、可校验的长期记忆。","en":"Stores project decisions, constraints, and lessons as evidence-backed, verifiable memory."},"reason":{"zh":"模型只能提出候选，必须由人通过命令批准；记录可进 Git，证据变化后能检测失效。","en":"The model can only propose candidates; human approval is required, records are Git-friendly, and stale evidence is detectable."},"safety":{"risk":"medium","zh":"会在项目 .dsh 目录写入候选与记忆；不使用云数据库、向量服务或后台进程。","en":"Writes candidates and memory under the project .dsh directory; no cloud database, embeddings service, or background daemon."}}},{"id":"luoyuejun9/dsh-workstate","order":409,"name":"dsh-workstate","owner":"luoyuejun9","repo":"luoyuejun9/dsh-workstate","url":"https://github.com/luoyuejun9/dsh-workstate","category":"workflow","description":{"zh":"用结构化检查点保存任务进度、决策、失败和下一步，方便跨 Agent 接力。","en":"Captures structured task checkpoints for safe handoffs between coding agents."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":null,"updatedAt":null,"createdAt":null,"license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"unknown","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-workstate","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0b1b1477f3f23aeebaed6d0c08b2ce3b96cf74b7","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16T09:38:31.473Z","lastSeenAt":"2026-09-17T12:01:29.121Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-17T12:01:29.121Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"luoyuejun9/dsh-workstate@0b1b1477f3f23aeebaed6d0c08b2ce3b96cf74b7#scan-2","versionCount":1,"latestCommit":"0b1b1477f3f23aeebaed6d0c08b2ce3b96cf74b7","latestCheckedAt":"2026-09-17T12:01:29.121Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7},"codexPick":{"repo":"luoyuejun9/dsh-workstate","pickedAt":"2026-08-16T09:38:31.473Z","reviewedCommit":"0b1b1477f3f23aeebaed6d0c08b2ce3b96cf74b7","category":"workflow","summary":{"zh":"用结构化检查点保存任务进度、决策、失败和下一步，方便跨 Agent 接力。","en":"Captures structured task checkpoints for safe handoffs between coding agents."},"reason":{"zh":"交接包记录路径与哈希，不复制文件内容；恢复前会校验 Git 与工作区是否发生漂移。","en":"Handoff packets store paths and hashes without file contents, and validate Git and workspace drift before resume."},"safety":{"risk":"medium","zh":"会写入 .dsh/workstate；恢复只注入状态，不执行 checkout、reset、stash、commit 或 push。","en":"Writes under .dsh/workstate; resume injects state without checkout, reset, stash, commit, or push."}}},{"id":"dove-a/dsh-plugin-registry","order":410,"name":"@a_dove/dsh-plugin-registry","owner":"dove-a","repo":"dove-a/dsh-plugin-registry","url":"https://github.com/dove-a/dsh-plugin-registry","category":"tools","description":{"zh":"@a_dove/dsh-plugin-registry","en":"@a_dove/dsh-plugin-registry"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T10:27:27Z","updatedAt":"2026-08-16T10:29:06Z","createdAt":"2026-08-16T09:33:57Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@a_dove/dsh-plugin-registry","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["lib/host/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f86071fe183492469220e35fcee1e676ae0b372f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:07.224Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:07.224Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/host/index.mjs"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/host/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/host/index.mjs","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现主动网络请求能力"]},"passport":{"evidenceId":"dove-a/dsh-plugin-registry@f86071fe183492469220e35fcee1e676ae0b372f#scan-2","versionCount":1,"latestCommit":"f86071fe183492469220e35fcee1e676ae0b372f","latestCheckedAt":"2026-08-16T10:31:07.224Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"asakafeng/dsh-qq-remote","order":411,"name":"@dsh-external/dsh-qq-remote","owner":"ASAKAFENG","repo":"ASAKAFENG/dsh-qq-remote","url":"https://github.com/ASAKAFENG/dsh-qq-remote","category":"tools","description":{"zh":"@dsh-external/dsh-qq-remote","en":"@dsh-external/dsh-qq-remote"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:25:37Z","updatedAt":"2026-08-16T11:26:02Z","createdAt":"2026-08-15T14:11:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","plugin","client"],"packageName":"@dsh-external/dsh-qq-remote","version":"0.3.12","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"154bbba29fa4ebe5d6c832788c1b61731da51339","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:05.448Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:05.448Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"asakafeng/dsh-qq-remote@154bbba29fa4ebe5d6c832788c1b61731da51339#scan-2","versionCount":1,"latestCommit":"154bbba29fa4ebe5d6c832788c1b61731da51339","latestCheckedAt":"2026-08-16T11:31:05.448Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"shiragawaanri/dsh-vision-bridge","order":412,"name":"@dsh-external/dsh-vision-bridge","owner":"ShiraGawaAnri","repo":"ShiraGawaAnri/dsh-vision-bridge","url":"https://github.com/ShiraGawaAnri/dsh-vision-bridge","category":"session","description":{"zh":"DSH profile 插件包：当会话使用不支持图片的模型（如 DeepSeek）时，不再弹出 \"当前模型不支持图片\"之类的拦截，而是调用工具进行视觉识别","en":"DSH profile 插件包：当会话使用不支持图片的模型（如 DeepSeek）时，不再弹出 \"当前模型不支持图片\"之类的拦截，而是调用工具进行视觉识别"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T09:58:33Z","updatedAt":"2026-08-16T09:58:45Z","createdAt":"2026-08-16T01:57:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-vision-bridge","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"65717f9fa61700300ac24258c6c92c3622de7504","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:01:20.158Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:20.158Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"shiragawaanri/dsh-vision-bridge@65717f9fa61700300ac24258c6c92c3622de7504#scan-2","versionCount":1,"latestCommit":"65717f9fa61700300ac24258c6c92c3622de7504","latestCheckedAt":"2026-08-16T10:01:20.158Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"mxl2498/dsh-balance","order":413,"name":"@dsh-external/余额悬浮球","owner":"mxl2498","repo":"mxl2498/dsh-balance","url":"https://github.com/mxl2498/dsh-balance","category":"tools","description":{"zh":"DSH Web 插件：悬浮显示 DeepSeek 账户余额，点击直达充值页 | DSH widget showing your DeepSeek balance with a top-up link","en":"DSH Web 插件：悬浮显示 DeepSeek 账户余额，点击直达充值页 | DSH widget showing your DeepSeek balance with a top-up link"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:25:26Z","updatedAt":"2026-08-16T11:25:59Z","createdAt":"2026-08-16T09:18:10Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/余额悬浮球","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"aeb9018cf9b44e12fe7c793a680efd340f3dd96c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:06.456Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:06.456Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"mxl2498/dsh-balance@aeb9018cf9b44e12fe7c793a680efd340f3dd96c#scan-2","versionCount":1,"latestCommit":"aeb9018cf9b44e12fe7c793a680efd340f3dd96c","latestCheckedAt":"2026-08-16T11:31:06.456Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"zhang-jiazhi/dsh-stats-panel","order":414,"name":"@linxin666/dsh-stats-panel","owner":"zhang-jiazhi","repo":"zhang-jiazhi/dsh-stats-panel","url":"https://github.com/zhang-jiazhi/dsh-stats-panel","category":"ui","description":{"zh":"dsh插件","en":"dsh插件"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T10:57:02Z","updatedAt":"2026-08-16T10:57:05Z","createdAt":"2026-08-16T10:26:35Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@linxin666/dsh-stats-panel","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c99f73d266e7b1e324130e912b91106364eb26d0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:01:20.639Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:01:20.639Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"zhang-jiazhi/dsh-stats-panel@c99f73d266e7b1e324130e912b91106364eb26d0#scan-2","versionCount":1,"latestCommit":"c99f73d266e7b1e324130e912b91106364eb26d0","latestCheckedAt":"2026-08-16T11:01:20.639Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"michengai/dsh-codex-ui","order":415,"name":"@michengai/dsh-codex-ui","owner":"MichengAI","repo":"MichengAI/dsh-codex-ui","url":"https://github.com/MichengAI/dsh-codex-ui","category":"ui","description":{"zh":"用Codex的方式打开deepseek-harness","en":"用Codex的方式打开deepseek-harness"},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T09:29:57Z","updatedAt":"2026-08-16T09:30:17Z","createdAt":"2026-08-14T15:58:13Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@michengai/dsh-codex-ui","version":"0.2.48","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.mjs","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fde03d757011da105663e1034977cb13a451cb0f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:14.081Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:14.081Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"michengai/dsh-codex-ui@fde03d757011da105663e1034977cb13a451cb0f#scan-2","versionCount":1,"latestCommit":"fde03d757011da105663e1034977cb13a451cb0f","latestCheckedAt":"2026-08-16T09:31:14.081Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"summersec/dsh-web-auth","order":416,"name":"@summersec/dsh-web-auth","owner":"SummerSec","repo":"SummerSec/dsh-web-auth","url":"https://github.com/SummerSec/dsh-web-auth","category":"tools","description":{"zh":"Transport-level authentication gate for the DeepSeek Harness Web GUI","en":"Transport-level authentication gate for the DeepSeek Harness Web GUI"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:54:55Z","updatedAt":"2026-08-16T11:55:15Z","createdAt":"2026-08-16T11:48:10Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@summersec/dsh-web-auth","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a7172e2924aeb91e7897b6f2a7ecfe3400df3f76","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T12:01:17.460Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:17.460Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js","cordis.patch.yml"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["src/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"summersec/dsh-web-auth@a7172e2924aeb91e7897b6f2a7ecfe3400df3f76#scan-2","versionCount":1,"latestCommit":"a7172e2924aeb91e7897b6f2a7ecfe3400df3f76","latestCheckedAt":"2026-08-16T12:01:17.460Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"wjnct55555/dsh-achievements","order":417,"name":"@wjnct55555/dsh-achievements-bundle","owner":"WJNCT55555","repo":"WJNCT55555/dsh-achievements","url":"https://github.com/WJNCT55555/dsh-achievements","category":"tools","description":{"zh":"@wjnct55555/dsh-achievements-bundle","en":"@wjnct55555/dsh-achievements-bundle"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T10:00:31Z","updatedAt":"2026-08-16T09:59:23Z","createdAt":"2026-08-16T00:20:55Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@wjnct55555/dsh-achievements-bundle","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"47bb6d04fcea0b45f6ddad9525ebca81c1d45dab","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:01:13.132Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:13.132Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"wjnct55555/dsh-achievements@47bb6d04fcea0b45f6ddad9525ebca81c1d45dab#scan-2","versionCount":1,"latestCommit":"47bb6d04fcea0b45f6ddad9525ebca81c1d45dab","latestCheckedAt":"2026-08-16T10:01:13.132Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"xmanrui/dsh-im","order":418,"name":"@xmanrui/dsh-im","owner":"xmanrui","repo":"xmanrui/dsh-im","url":"https://github.com/xmanrui/dsh-im","category":"notify","description":{"zh":"通过扫码把IM机器人接入DeepSeek Harness（支持飞书、微信、钉钉、QQ、企业微信等）","en":"通过扫码把IM机器人接入DeepSeek Harness（支持飞书、微信、钉钉、QQ、企业微信等）"},"added":"2026-08-16","curated":false,"topic":true,"stars":13,"forks":3,"openIssues":0,"watchers":13,"pushedAt":"2026-08-16T09:59:09Z","updatedAt":"2026-08-16T09:59:59Z","createdAt":"2026-08-14T20:40:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@xmanrui/dsh-im","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2eea8a08bcd8ef91e8845de1f300b5715b746938","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:01:14.803Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:14.803Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"xmanrui/dsh-im@2eea8a08bcd8ef91e8845de1f300b5715b746938#scan-2","versionCount":2,"latestCommit":"2eea8a08bcd8ef91e8845de1f300b5715b746938","latestCheckedAt":"2026-08-16T10:01:14.803Z","diffSeverity":"low","verificationScore":7,"verificationPossible":7}},{"id":"534119219/chicheng-stats","order":419,"name":"chicheng-stats","owner":"534119219","repo":"534119219/chicheng-stats","url":"https://github.com/534119219/chicheng-stats","category":"session","description":{"zh":"dsh 全局用量统计插件：侧边栏展示今日/总请求数与今日/总 Token 数（跨所有会话）","en":"dsh 全局用量统计插件：侧边栏展示今日/总请求数与今日/总 Token 数（跨所有会话）"},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T10:27:26Z","updatedAt":"2026-08-16T10:27:31Z","createdAt":"2026-08-16T07:51:31Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"chicheng-stats","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cbe32b20ade878a6ba0243a5b33ced0d54bd9531","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:06.941Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:06.941Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","发现主动网络请求能力"]},"passport":{"evidenceId":"534119219/chicheng-stats@cbe32b20ade878a6ba0243a5b33ced0d54bd9531#scan-2","versionCount":1,"latestCommit":"cbe32b20ade878a6ba0243a5b33ced0d54bd9531","latestCheckedAt":"2026-08-16T10:31:06.941Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"xiaokang6/dsh-admin","order":420,"name":"dsh-admin","owner":"xiaokang6","repo":"xiaokang6/dsh-admin","url":"https://github.com/xiaokang6/dsh-admin","category":"tools","description":{"zh":"DeepSeek Harness Web GUI admin plugin: manual restart + auto version check (header button + settings page)","en":"DeepSeek Harness Web GUI admin plugin: manual restart + auto version check (header button + settings page)"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T10:26:56Z","updatedAt":"2026-08-16T10:27:05Z","createdAt":"2026-08-16T10:26:30Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/xiaokang6/dsh-admin","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-admin","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"60545f54da761f08c78d9138e5484ee74a1f4cd6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:09.519Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:09.519Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"xiaokang6/dsh-admin@60545f54da761f08c78d9138e5484ee74a1f4cd6#scan-2","versionCount":1,"latestCommit":"60545f54da761f08c78d9138e5484ee74a1f4cd6","latestCheckedAt":"2026-08-16T10:31:09.519Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"305037991x-pixel/dsh-balance","order":421,"name":"dsh-balance","owner":"305037991x-pixel","repo":"305037991x-pixel/dsh-balance","url":"https://github.com/305037991x-pixel/dsh-balance","category":"tools","description":{"zh":"DeepSeek account balance chip for DeepSeek Harness Web: 3-min auto refresh with total/topped-up/granted breakdown","en":"DeepSeek account balance chip for DeepSeek Harness Web: 3-min auto refresh with total/topped-up/granted breakdown"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:54:13Z","updatedAt":"2026-08-16T11:54:21Z","createdAt":"2026-08-16T11:52:48Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-balance","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":8,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e7622f79725e8fb25675f22b410d87a357a8501c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T12:01:20.061Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:20.061Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"305037991x-pixel/dsh-balance@e7622f79725e8fb25675f22b410d87a357a8501c#scan-2","versionCount":1,"latestCommit":"e7622f79725e8fb25675f22b410d87a357a8501c","latestCheckedAt":"2026-08-16T12:01:20.061Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"keyiadiannao/dsh-code-reuse-firewall","order":422,"name":"dsh-code-reuse-firewall","owner":"keyiadiannao","repo":"keyiadiannao/dsh-code-reuse-firewall","url":"https://github.com/keyiadiannao/dsh-code-reuse-firewall","category":"workflow","description":{"zh":"Pre-write reuse firewall for DeepSeek Harness: before the agent writes a new helper/service, surface the existing implementations that already cover that intent. Deterministic retrieval (no LLM) via the Auto_code_audit capability channel.","en":"Pre-write reuse firewall for DeepSeek Harness: before the agent writes a new helper/service, surface the existing implementations that already cover that intent. Deterministic retrieval (no LLM) via the Auto_code_audit capability channel."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T09:30:49Z","updatedAt":"2026-08-16T05:10:24Z","createdAt":"2026-08-16T04:39:37Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-code-reuse-firewall","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"71e391e20f0fee294a76750eba22ee723096289c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:09.607Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:09.607Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用"]},"passport":{"evidenceId":"keyiadiannao/dsh-code-reuse-firewall@71e391e20f0fee294a76750eba22ee723096289c#scan-2","versionCount":1,"latestCommit":"71e391e20f0fee294a76750eba22ee723096289c","latestCheckedAt":"2026-08-16T09:31:09.607Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"walvez/dsh-codex-sync","order":423,"name":"dsh-codex-sync","owner":"Walvez","repo":"Walvez/dsh-codex-sync","url":"https://github.com/Walvez/dsh-codex-sync","category":"session","description":{"zh":"One-stop bidirectional sync between OpenAI Codex and DeepSeek Harness (dsh): first-class skills, session import, workspace attach, MCP auto-mirror + Codex-side reverse MCP installer.","en":"One-stop bidirectional sync between OpenAI Codex and DeepSeek Harness (dsh): first-class skills, session import, workspace attach, MCP auto-mirror + Codex-side reverse MCP installer."},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T11:54:31Z","updatedAt":"2026-08-16T11:54:44Z","createdAt":"2026-08-16T06:00:40Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-codex-sync","version":"0.5.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"df86328b0bace24839dee85369087fff698f5c67","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T12:01:17.877Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:17.877Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"walvez/dsh-codex-sync@df86328b0bace24839dee85369087fff698f5c67#scan-2","versionCount":2,"latestCommit":"df86328b0bace24839dee85369087fff698f5c67","latestCheckedAt":"2026-08-16T12:01:17.877Z","diffSeverity":"low","verificationScore":5,"verificationPossible":7}},{"id":"moraxyc/dsh-cpa","order":424,"name":"dsh-cpa","owner":"Moraxyc","repo":"Moraxyc/dsh-cpa","url":"https://github.com/Moraxyc/dsh-cpa","category":"tools","description":{"zh":"dsh-cpa","en":"dsh-cpa"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":2,"watchers":0,"pushedAt":"2026-08-17T22:36:19Z","updatedAt":"2026-08-17T22:36:25Z","createdAt":"2026-08-16T05:50:13Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-cpa","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js","src/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a84a9032854e83319cfc443b2cf220542a39d2a0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-18T00:00:54.398Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-18T00:00:54.398Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/client.js"]}],"filesInspected":["package.json","src/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"moraxyc/dsh-cpa@a84a9032854e83319cfc443b2cf220542a39d2a0#scan-2","versionCount":2,"latestCommit":"a84a9032854e83319cfc443b2cf220542a39d2a0","latestCheckedAt":"2026-08-18T00:00:54.398Z","diffSeverity":"low","verificationScore":5,"verificationPossible":7}},{"id":"auroralab-art/dsh-file-ref","order":425,"name":"dsh-file-ref","owner":"auroralab-art","repo":"auroralab-art/dsh-file-ref","url":"https://github.com/auroralab-art/dsh-file-ref","category":"tools","description":{"zh":"DeepSeek Harness plugin: paste or drop a file to insert an @workspace path or absolute path.","en":"DeepSeek Harness plugin: paste or drop a file to insert an @workspace path or absolute path."},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T11:55:01Z","updatedAt":"2026-08-16T11:55:00Z","createdAt":"2026-08-15T12:24:45Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-file-ref","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9a24d5692d82ebdc1934b1ac21a624c0bd73a397","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T12:01:16.459Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:16.459Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"auroralab-art/dsh-file-ref@9a24d5692d82ebdc1934b1ac21a624c0bd73a397#scan-2","versionCount":1,"latestCommit":"9a24d5692d82ebdc1934b1ac21a624c0bd73a397","latestCheckedAt":"2026-08-16T12:01:16.459Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lussey820/dsh-http-tools","order":426,"name":"dsh-http-tools","owner":"lussey820","repo":"lussey820/dsh-http-tools","url":"https://github.com/lussey820/dsh-http-tools","category":"session","description":{"zh":"HTTP/API debugging toolset for DeepSeek Harness: http_request, curl_parse, request_history","en":"HTTP/API debugging toolset for DeepSeek Harness: http_request, curl_parse, request_history"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:24:30Z","updatedAt":"2026-08-16T11:24:40Z","createdAt":"2026-08-16T06:57:40Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/lussey820/dsh-http-tools","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-http-tools","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fdc1b71738ac40a9fae0a5f6c02c81f7107f0a41","installCommand":"dsh plugin --profile web add github:lussey820/dsh-http-tools#fdc1b71738ac40a9fae0a5f6c02c81f7107f0a41","discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:32:00.175Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-16T11:32:00.175Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"lussey820/dsh-http-tools@fdc1b71738ac40a9fae0a5f6c02c81f7107f0a41#scan-2","versionCount":1,"latestCommit":"fdc1b71738ac40a9fae0a5f6c02c81f7107f0a41","latestCheckedAt":"2026-08-16T11:32:00.175Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"andyqwe44/dsh-notify-win","order":427,"name":"dsh-notify-win","owner":"Andyqwe44","repo":"Andyqwe44/dsh-notify-win","url":"https://github.com/Andyqwe44/dsh-notify-win","category":"notify","description":{"zh":"Native Windows toast + taskbar flash for DeepSeek Harness when a task finishes or your input is needed.","en":"Native Windows toast + taskbar flash for DeepSeek Harness when a task finishes or your input is needed."},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T10:27:44Z","updatedAt":"2026-08-16T10:27:48Z","createdAt":"2026-08-15T07:00:32Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-notify-win","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e2027f59b417526193758bd5d49f56981b7d3ae9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:38.248Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:38.248Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"andyqwe44/dsh-notify-win@e2027f59b417526193758bd5d49f56981b7d3ae9#scan-2","versionCount":1,"latestCommit":"e2027f59b417526193758bd5d49f56981b7d3ae9","latestCheckedAt":"2026-08-16T10:31:38.248Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"baihawhite/mcp-ds-ocr","order":428,"name":"dsh-ocr","owner":"BaihaWhite","repo":"BaihaWhite/mcp-ds-ocr","url":"https://github.com/BaihaWhite/mcp-ds-ocr","category":"tools","description":{"zh":"dsh-ocr","en":"dsh-ocr"},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T11:25:21Z","updatedAt":"2026-08-16T11:25:31Z","createdAt":"2026-08-15T15:39:45Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ocr","version":"1.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2b551804e561a470279ff5667c163936a6ab6e14","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:07.581Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:07.581Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"baihawhite/mcp-ds-ocr@2b551804e561a470279ff5667c163936a6ab6e14#scan-2","versionCount":1,"latestCommit":"2b551804e561a470279ff5667c163936a6ab6e14","latestCheckedAt":"2026-08-16T11:31:07.581Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"305037991x-pixel/dsh-opencode-go","order":429,"name":"dsh-opencode-go","owner":"305037991x-pixel","repo":"305037991x-pixel/dsh-opencode-go","url":"https://github.com/305037991x-pixel/dsh-opencode-go","category":"tools","description":{"zh":"OpenCode GO plan usage chip for DeepSeek Harness Web: dual-account rolling/weekly/monthly quota, 3-min auto refresh, per-account hover breakdown","en":"OpenCode GO plan usage chip for DeepSeek Harness Web: dual-account rolling/weekly/monthly quota, 3-min auto refresh, per-account hover breakdown"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:54:10Z","updatedAt":"2026-08-16T11:54:58Z","createdAt":"2026-08-16T11:52:43Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-opencode-go","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":8,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"70b60f9eb817f6a9864e4de12b31727a044fb537","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T12:01:53.043Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T12:01:53.043Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"305037991x-pixel/dsh-opencode-go@70b60f9eb817f6a9864e4de12b31727a044fb537#scan-2","versionCount":1,"latestCommit":"70b60f9eb817f6a9864e4de12b31727a044fb537","latestCheckedAt":"2026-08-16T12:01:53.043Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"slywalker2006/dsh-passwords","order":430,"name":"dsh-passwords","owner":"slywalker2006","repo":"slywalker2006/dsh-passwords","url":"https://github.com/slywalker2006/dsh-passwords","category":"dev","description":{"zh":"Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.","en":"Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log."},"added":"2026-08-16","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-16T09:59:50Z","updatedAt":"2026-08-16T09:59:54Z","createdAt":"2026-08-14T06:35:16Z","license":"BSD-3-Clause","language":"TypeScript","homepage":"https://github.com/slywalker2006/dsh-passwords","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-passwords","version":"2.4.2","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.yml","dist/index.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"90493d3b1a22d24326480180eac753cbf91ac817","installCommand":"dsh plugin --profile web add github:slywalker2006/dsh-passwords#90493d3b1a22d24326480180eac753cbf91ac817","discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:01:08.963Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-16T10:01:08.963Z","findings":[],"filesInspected":["package.json","cordis.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"slywalker2006/dsh-passwords@90493d3b1a22d24326480180eac753cbf91ac817#scan-2","versionCount":1,"latestCommit":"90493d3b1a22d24326480180eac753cbf91ac817","latestCheckedAt":"2026-08-16T10:01:08.963Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"117bs/dsh-perlica-ding","order":431,"name":"dsh-perlica-ding","owner":"117BS","repo":"117BS/dsh-perlica-ding","url":"https://github.com/117BS/dsh-perlica-ding","category":"ui","description":{"zh":"「我们不是理想的陈述者，而是理想的践行者。」 佩丽卡主题 DeepSeek Harness 分级任务提示音插件：计划出方案 / 任务完成 / 需要你回应 / 出错四档提示音，普通问答静音，音效可自定义。 Perlica-themed tiered sound notifications for DeepSeek Harness.","en":"「我们不是理想的陈述者，而是理想的践行者。」 佩丽卡主题 DeepSeek Harness 分级任务提示音插件：计划出方案 / 任务完成 / 需要你回应 / 出错四档提示音，普通问答静音，音效可自定义。 Perlica-themed tiered sound notifications for DeepSeek Harness."},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T09:30:17Z","updatedAt":"2026-08-16T08:22:42Z","createdAt":"2026-08-16T07:17:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-perlica-ding","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"eb6b33307d1df5395160e2caa14131829bf64a75","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:11.349Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:11.349Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用"]},"passport":{"evidenceId":"117bs/dsh-perlica-ding@eb6b33307d1df5395160e2caa14131829bf64a75#scan-2","versionCount":1,"latestCommit":"eb6b33307d1df5395160e2caa14131829bf64a75","latestCheckedAt":"2026-08-16T09:31:11.349Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"imtanhui/dsh-plugin-butler","order":432,"name":"dsh-plugin-butler","owner":"imtanhui","repo":"imtanhui/dsh-plugin-butler","url":"https://github.com/imtanhui/dsh-plugin-butler","category":"tools","description":{"zh":"dsh-plugin-butler","en":"dsh-plugin-butler"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:24:29Z","updatedAt":"2026-08-16T11:25:01Z","createdAt":"2026-08-16T03:03:15Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-butler","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"36fab19aa50aaf3af100228991c2b625a022eb46","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:33:07.710Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:33:07.710Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"imtanhui/dsh-plugin-butler@36fab19aa50aaf3af100228991c2b625a022eb46#scan-2","versionCount":1,"latestCommit":"36fab19aa50aaf3af100228991c2b625a022eb46","latestCheckedAt":"2026-08-16T11:33:07.710Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"yunhuantian/dsh-plugin-hub","order":433,"name":"dsh-plugin-hub","owner":"yunhuantian","repo":"yunhuantian/dsh-plugin-hub","url":"https://github.com/yunhuantian/dsh-plugin-hub","category":"ui","description":{"zh":"Plugin Store for DeepSeek Harness (DSH): a graphical app-store inside the Harness Web UI — browse, search and one-click install GitHub dsh-plugins (topic:dsh-plugin / #dsh-plugin repos), with local ratings, dependency impact graphs, audit logging and a plugin scaffold guide.","en":"Plugin Store for DeepSeek Harness (DSH): a graphical app-store inside the Harness Web UI — browse, search and one-click install GitHub dsh-plugins (topic:dsh-plugin / #dsh-plugin repos), with local ratings, dependency impact graphs, audit logging and a plugin scaffold guide."},"added":"2026-08-16","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":1,"watchers":4,"pushedAt":"2026-08-16T10:27:33Z","updatedAt":"2026-08-16T10:28:16Z","createdAt":"2026-08-14T11:25:41Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-hub","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/host/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a2d397c1854da2b840e1557787e22f8d4c44f0a9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:39.558Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:39.558Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/host/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/host/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"yunhuantian/dsh-plugin-hub@a2d397c1854da2b840e1557787e22f8d4c44f0a9#scan-2","versionCount":1,"latestCommit":"a2d397c1854da2b840e1557787e22f8d4c44f0a9","latestCheckedAt":"2026-08-16T10:31:39.558Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"zoahdev/dsh-plugin-template","order":434,"name":"dsh-plugin-template","owner":"zoahdev","repo":"zoahdev/dsh-plugin-template","url":"https://github.com/zoahdev/dsh-plugin-template","category":"dev","description":{"zh":"Minimal, verified template for DeepSeek Harness plugins: bundle manifest, one tool, runtime peer guard, tests, and CI that really invokes the tool (dsh 0.1.0-rc.6).","en":"Minimal, verified template for DeepSeek Harness plugins: bundle manifest, one tool, runtime peer guard, tests, and CI that really invokes the tool (dsh 0.1.0-rc.6)."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T09:59:42Z","updatedAt":"2026-08-16T09:59:45Z","createdAt":"2026-08-15T01:36:50Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-plugin-template","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7df29cfa4eb729b99b5e968829d82d512f6889d0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:01:08.836Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:08.836Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"zoahdev/dsh-plugin-template@7df29cfa4eb729b99b5e968829d82d512f6889d0#scan-2","versionCount":1,"latestCommit":"7df29cfa4eb729b99b5e968829d82d512f6889d0","latestCheckedAt":"2026-08-16T10:01:08.836Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"xmutfyh/dsh-plugin-writing-guard","order":435,"name":"dsh-plugin-writing-guard","owner":"xmutfyh","repo":"xmutfyh/dsh-plugin-writing-guard","url":"https://github.com/xmutfyh/dsh-plugin-writing-guard","category":"tools","description":{"zh":"Deterministic manuscript integrity guard for AI-assisted academic revision - protects scientific facts, claim strength (causal & evidential), negation, scope and citations during polishing while flagging mechanical AI writing (Scholarship Lock + Epistemic Lock, zero LLM)","en":"Deterministic manuscript integrity guard for AI-assisted academic revision - protects scientific facts, claim strength (causal & evidential), negation, scope and citations during polishing while flagging mechanical AI writing (Scholarship Lock + Epistemic Lock, zero LLM)"},"added":"2026-08-16","curated":false,"topic":true,"stars":7,"forks":0,"openIssues":0,"watchers":7,"pushedAt":"2026-08-16T09:30:41Z","updatedAt":"2026-08-16T09:14:06Z","createdAt":"2026-08-15T03:41:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-plugin-writing-guard","version":"0.9.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0ecd7073bbb6542fc861d471c14785879d7541da","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:09.392Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:09.392Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力"]},"passport":{"evidenceId":"xmutfyh/dsh-plugin-writing-guard@0ecd7073bbb6542fc861d471c14785879d7541da#scan-2","versionCount":1,"latestCommit":"0ecd7073bbb6542fc861d471c14785879d7541da","latestCheckedAt":"2026-08-16T09:31:09.392Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"wdsjwzl/session-seed-plugin","order":436,"name":"dsh-session-seed","owner":"wdsjwzl","repo":"wdsjwzl/session-seed-plugin","url":"https://github.com/wdsjwzl/session-seed-plugin","category":"session","description":{"zh":"对话自动注入，可用于高概率破甲模型，放开限制","en":"对话自动注入，可用于高概率破甲模型，放开限制"},"added":"2026-08-16","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T10:27:34Z","updatedAt":"2026-08-16T10:27:38Z","createdAt":"2026-08-15T21:48:20Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-session-seed","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"95c2e8fbc14b04c57e1aa90d4c0c88e0774801d3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:38.376Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:38.376Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js","client.js"]}],"filesInspected":["package.json","index.js","client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"wdsjwzl/session-seed-plugin@95c2e8fbc14b04c57e1aa90d4c0c88e0774801d3#scan-2","versionCount":1,"latestCommit":"95c2e8fbc14b04c57e1aa90d4c0c88e0774801d3","latestCheckedAt":"2026-08-16T10:31:38.376Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"scorp1o117/dsh-soul-md","order":437,"name":"dsh-soul-md","owner":"Scorp1o117","repo":"Scorp1o117/dsh-soul-md","url":"https://github.com/Scorp1o117/dsh-soul-md","category":"tools","description":{"zh":"Soul.md persona for DeepSeek Harness | DeepSeek Harness 人设卡插件","en":"Soul.md persona for DeepSeek Harness | DeepSeek Harness 人设卡插件"},"added":"2026-08-16","curated":false,"topic":true,"stars":7,"forks":2,"openIssues":2,"watchers":7,"pushedAt":"2026-09-22T10:29:34Z","updatedAt":"2026-09-22T10:29:30Z","createdAt":"2026-08-13T15:08:40Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-soul-md","version":"0.8.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9fb3f66760be10f795cb2cccdb1774835f30adbe","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-09-23T00:01:50.562Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-23T00:01:50.562Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"passport":{"evidenceId":"scorp1o117/dsh-soul-md@9fb3f66760be10f795cb2cccdb1774835f30adbe#scan-2","versionCount":2,"latestCommit":"9fb3f66760be10f795cb2cccdb1774835f30adbe","latestCheckedAt":"2026-09-23T00:01:50.562Z","diffSeverity":"low","verificationScore":5,"verificationPossible":7}},{"id":"scorp1o117/dsh-tool-vision","order":438,"name":"dsh-tool-vision","owner":"Scorp1o117","repo":"Scorp1o117/dsh-tool-vision","url":"https://github.com/Scorp1o117/dsh-tool-vision","category":"dev","description":{"zh":"Vision model for DeepSeek Harness | DeepSeek Harness 外置视觉模型插件","en":"Vision model for DeepSeek Harness | DeepSeek Harness 外置视觉模型插件"},"added":"2026-08-16","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-16T10:27:52Z","updatedAt":"2026-08-16T10:28:03Z","createdAt":"2026-08-13T15:08:44Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-tool-vision","version":"0.3.10","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2cc05c138edff2792b68867e7a1d083ef57ccc77","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:37.070Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:37.070Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js","client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"scorp1o117/dsh-tool-vision@2cc05c138edff2792b68867e7a1d083ef57ccc77#scan-2","versionCount":1,"latestCommit":"2cc05c138edff2792b68867e7a1d083ef57ccc77","latestCheckedAt":"2026-08-16T10:31:37.070Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"jyh20030112/dsh-visual-plugin","order":439,"name":"dsh-visual-plugin","owner":"jyh20030112","repo":"jyh20030112/dsh-visual-plugin","url":"https://github.com/jyh20030112/dsh-visual-plugin","category":"ui","description":{"zh":"Dsh-visual-plugin.Give your text-only model eyes: forward user images to any OpenAI-compatible vision model and see the results in a Web UI right panel","en":"Dsh-visual-plugin.Give your text-only model eyes: forward user images to any OpenAI-compatible vision model and see the results in a Web UI right panel"},"added":"2026-08-16","curated":false,"topic":true,"stars":9,"forks":3,"openIssues":0,"watchers":9,"pushedAt":"2026-08-16T11:25:22Z","updatedAt":"2026-08-16T11:25:26Z","createdAt":"2026-08-14T03:42:02Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-visual-plugin","version":"0.2.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3368fdc17ffcb16197a4e1fe72654751b88ede9c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:06.604Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:06.604Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"jyh20030112/dsh-visual-plugin@3368fdc17ffcb16197a4e1fe72654751b88ede9c#scan-2","versionCount":1,"latestCommit":"3368fdc17ffcb16197a4e1fe72654751b88ede9c","latestCheckedAt":"2026-08-16T11:31:06.604Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"limboo233/dsh-web-extras","order":440,"name":"dsh-web-extras","owner":"LimBoo233","repo":"LimBoo233/dsh-web-extras","url":"https://github.com/LimBoo233/dsh-web-extras","category":"ui","description":{"zh":"DeepSeek Harness Web 界面增强插件：完成/审批/提问提醒（音效 + 立绘）、外观定制（背景图 / 透明度 / 输入区折叠）、按轮次聚合的文件变更视图（行级差异 + 修改前后代码高亮）。纯浏览器端实现，无 Host 代码，数据仅保存在本地浏览器。","en":"DeepSeek Harness Web 界面增强插件：完成/审批/提问提醒（音效 + 立绘）、外观定制（背景图 / 透明度 / 输入区折叠）、按轮次聚合的文件变更视图（行级差异 + 修改前后代码高亮）。纯浏览器端实现，无 Host 代码，数据仅保存在本地浏览器。"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T10:26:53Z","updatedAt":"2026-08-16T10:27:03Z","createdAt":"2026-08-15T16:55:57Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-web-extras","version":"0.1.4","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f54696dc2a7bd2d291ef4c9e41c2a9a306dc813e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T10:31:13.078Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:31:13.078Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"limboo233/dsh-web-extras@f54696dc2a7bd2d291ef4c9e41c2a9a306dc813e#scan-2","versionCount":1,"latestCommit":"f54696dc2a7bd2d291ef4c9e41c2a9a306dc813e","latestCheckedAt":"2026-08-16T10:31:13.078Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"renpengfei1027/dsh-web-notify","order":441,"name":"dsh-web-notify","owner":"renpengfei1027","repo":"renpengfei1027/dsh-web-notify","url":"https://github.com/renpengfei1027/dsh-web-notify","category":"notify","description":{"zh":"Approval attention plugin for the DSH Web GUI: pending approval/plan-review/question alerts (chime, tab-title & favicon badge, PWA badge, approval-hub dock, OS notify) plus completion, job-failure, disconnect and 429 runtime-error alerts.","en":"Approval attention plugin for the DSH Web GUI: pending approval/plan-review/question alerts (chime, tab-title & favicon badge, PWA badge, approval-hub dock, OS notify) plus completion, job-failure, disconnect and 429 runtime-error alerts."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T09:30:17Z","updatedAt":"2026-08-16T09:30:59Z","createdAt":"2026-08-16T06:37:02Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-web-notify","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"63498d970df877584b20f1462e96fe92016c5f16","installCommand":"dsh plugin --profile web add github:renpengfei1027/dsh-web-notify#63498d970df877584b20f1462e96fe92016c5f16","discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:13.870Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-16T09:31:13.870Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"renpengfei1027/dsh-web-notify@63498d970df877584b20f1462e96fe92016c5f16#scan-2","versionCount":1,"latestCommit":"63498d970df877584b20f1462e96fe92016c5f16","latestCheckedAt":"2026-08-16T09:31:13.870Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"a3boy/dsh-web-tools","order":442,"name":"dsh-web-tools","owner":"A3Boy","repo":"A3Boy/dsh-web-tools","url":"https://github.com/A3Boy/dsh-web-tools","category":"ui","description":{"zh":"Multi-provider Web Search & Fetch for DeepSeek Harness — Tavily, Exa, Firecrawl, Brave, You.com, Jina & SearXNG with fallback and native settings UI.","en":"Multi-provider Web Search & Fetch for DeepSeek Harness — Tavily, Exa, Firecrawl, Brave, You.com, Jina & SearXNG with fallback and native settings UI."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:24:59Z","updatedAt":"2026-08-16T11:25:24Z","createdAt":"2026-08-15T15:58:53Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-web-tools","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/host/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6b12d71265166e4a48881b7eddf15bde37a21130","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:48.388Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:48.388Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/host/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/host/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"a3boy/dsh-web-tools@6b12d71265166e4a48881b7eddf15bde37a21130#scan-2","versionCount":1,"latestCommit":"6b12d71265166e4a48881b7eddf15bde37a21130","latestCheckedAt":"2026-08-16T11:31:48.388Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"opencamel/dsh-wx-archive","order":443,"name":"dsh-wx-archive","owner":"opencamel","repo":"opencamel/dsh-wx-archive","url":"https://github.com/opencamel/dsh-wx-archive","category":"tools","description":{"zh":"DSH (DeepSeek Harness) tool plugin: archive & read WeChat Official Account articles via 2100laike WeChat Archive","en":"DSH (DeepSeek Harness) tool plugin: archive & read WeChat Official Account articles via 2100laike WeChat Archive"},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T09:30:32Z","updatedAt":"2026-08-16T09:30:37Z","createdAt":"2026-08-15T15:40:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-wx-archive","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4f83d77225a3ff7095df9beef052581360ca7ffd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T09:31:10.471Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:10.471Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["dist/index.js","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dist/index.js","src/index.ts"]}],"filesInspected":["package.json","dist/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"opencamel/dsh-wx-archive@4f83d77225a3ff7095df9beef052581360ca7ffd#scan-2","versionCount":1,"latestCommit":"4f83d77225a3ff7095df9beef052581360ca7ffd","latestCheckedAt":"2026-08-16T09:31:10.471Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"win-hao/seekwhale-on-dsh","order":444,"name":"seekwhale-on-dsh","owner":"Win-Hao","repo":"Win-Hao/seekwhale-on-dsh","url":"https://github.com/Win-Hao/seekwhale-on-dsh","category":"session","description":{"zh":"The DeepSeek whale, pixel-animated, floating in your dsh web corner and reacting to your Harness sessions.","en":"The DeepSeek whale, pixel-animated, floating in your dsh web corner and reacting to your Harness sessions."},"added":"2026-08-16","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-16T11:25:12Z","updatedAt":"2026-08-16T11:25:44Z","createdAt":"2026-08-16T10:04:51Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/Win-Hao/seekwhale-on-dsh","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"seekwhale-on-dsh","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8a566d99c0578ae8de31509abb0274a1c8c84ebd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-16","lastSeenAt":"2026-08-16T11:31:09.303Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T11:31:09.303Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"win-hao/seekwhale-on-dsh@8a566d99c0578ae8de31509abb0274a1c8c84ebd#scan-2","versionCount":1,"latestCommit":"8a566d99c0578ae8de31509abb0274a1c8c84ebd","latestCheckedAt":"2026-08-16T11:31:09.303Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"anysearch-team/anysearch-dsh","order":445,"name":"@anysearch/anysearch-dsh","owner":"anysearch-team","repo":"anysearch-team/anysearch-dsh","url":"https://github.com/anysearch-team/anysearch-dsh","category":"dev","description":{"zh":"AnySearch web search provider and advanced search tools for DeepSeek Harness (DSH)","en":"AnySearch web search provider and advanced search tools for DeepSeek Harness (DSH)"},"added":"2026-08-15","curated":false,"topic":true,"stars":35,"forks":5,"openIssues":0,"watchers":35,"pushedAt":"2026-08-15T15:59:13Z","updatedAt":"2026-08-15T15:59:38Z","createdAt":"2026-08-13T15:10:10Z","license":"MIT","language":"TypeScript","homepage":"https://www.anysearch.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@anysearch/anysearch-dsh","version":"0.1.4","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3ccdef05e2b502509415b023e206a4c9f6afb038","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T00:00:19.234Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:19.234Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml","src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"anysearch-team/anysearch-dsh@3ccdef05e2b502509415b023e206a4c9f6afb038#scan-2","versionCount":1,"latestCommit":"3ccdef05e2b502509415b023e206a4c9f6afb038","latestCheckedAt":"2026-08-29T00:00:19.234Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bryan-cmf/dsh-infra-observability","order":446,"name":"@bryan-cmf/dsh-infra-observability","owner":"Bryan-cmf","repo":"Bryan-cmf/dsh-infra-observability","url":"https://github.com/Bryan-cmf/dsh-infra-observability","category":"dev","description":{"zh":"DSH-Plugin: structural observability layer - real tool/skill usage recording (tools/result), skill-catalog audit, watchdog. No model self-reporting.","en":"DSH-Plugin: structural observability layer - real tool/skill usage recording (tools/result), skill-catalog audit, watchdog. No model self-reporting."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T04:29:26Z","updatedAt":"2026-08-15T04:29:31Z","createdAt":"2026-08-15T04:29:23Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@bryan-cmf/dsh-infra-observability","version":"0.1.1-alpha.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e8ae00b8f5a14b8949660ed39dac7df9038b4fc1","installCommand":"dsh plugin --profile web add github:Bryan-cmf/dsh-infra-observability#e8ae00b8f5a14b8949660ed39dac7df9038b4fc1","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:26.219Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-01T00:00:26.219Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"bryan-cmf/dsh-infra-observability@e8ae00b8f5a14b8949660ed39dac7df9038b4fc1#scan-2","versionCount":1,"latestCommit":"e8ae00b8f5a14b8949660ed39dac7df9038b4fc1","latestCheckedAt":"2026-09-01T00:00:26.219Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"bryan-cmf/dsh-skill-trail","order":447,"name":"@bryan-cmf/dsh-skill-trail","owner":"Bryan-cmf","repo":"Bryan-cmf/dsh-skill-trail","url":"https://github.com/Bryan-cmf/dsh-skill-trail","category":"session","description":{"zh":"DSH-Plugin: per-reply skill trail - truthful per-turn triggered/used tool & skill badges, folded from the session log (no model self-reporting)","en":"DSH-Plugin: per-reply skill trail - truthful per-turn triggered/used tool & skill badges, folded from the session log (no model self-reporting)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T05:29:50Z","updatedAt":"2026-08-15T05:29:55Z","createdAt":"2026-08-15T03:23:22Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@bryan-cmf/dsh-skill-trail","version":"0.1.1-alpha.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1ac5988c616c86231a20ec0c2d89705f0078eccd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T05:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T05:30:11.022Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]}},{"id":"chushixixin/dsh-harness-mcp-server","order":448,"name":"@chushixixin/dsh-harness-mcp-server","owner":"chushixixin","repo":"chushixixin/dsh-harness-mcp-server","url":"https://github.com/chushixixin/dsh-harness-mcp-server","category":"workflow","description":{"zh":"Expose DeepSeek Harness agent capabilities as an MCP server (brain=Hermes, arms=Harness)","en":"Expose DeepSeek Harness agent capabilities as an MCP server (brain=Hermes, arms=Harness)"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":1,"watchers":3,"pushedAt":"2026-08-15T11:29:22Z","updatedAt":"2026-08-15T11:29:52Z","createdAt":"2026-08-13T19:22:25Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@chushixixin/dsh-harness-mcp-server","version":"0.1.10","lifecycleScripts":[],"runtimeDependencies":8,"declaredPaths":["cordis.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d174cea870aaa9f6dd67f2e9c3f3e3fa0f0e041e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:27.195Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:00:27.195Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","src/index.ts"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证"]},"passport":{"evidenceId":"chushixixin/dsh-harness-mcp-server@d174cea870aaa9f6dd67f2e9c3f3e3fa0f0e041e#scan-2","versionCount":1,"latestCommit":"d174cea870aaa9f6dd67f2e9c3f3e3fa0f0e041e","latestCheckedAt":"2026-08-30T12:00:27.195Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"deepforce/dsh-balance","order":449,"name":"@deepforce/dsh-balance","owner":"deepforce","repo":"deepforce/dsh-balance","url":"https://github.com/deepforce/dsh-balance","category":"session","description":{"zh":"DSH plugin: /balance command + composer-dock balance readout with top-up link & session-cost estimate","en":"DSH plugin: /balance command + composer-dock balance readout with top-up link & session-cost estimate"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T02:29:11Z","updatedAt":"2026-08-15T02:29:15Z","createdAt":"2026-08-14T15:59:32Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepforce/dsh-balance","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f1b5c06cef45cc19c6c6f4b1a3c8f1f175895906","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:30.778Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T00:00:30.778Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"deepforce/dsh-balance@f1b5c06cef45cc19c6c6f4b1a3c8f1f175895906#scan-2","versionCount":1,"latestCommit":"f1b5c06cef45cc19c6c6f4b1a3c8f1f175895906","latestCheckedAt":"2026-09-01T00:00:30.778Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"mccxs/dsh-client-plugin-manager","order":450,"name":"@deepseek-ai/dsh-client-plugin-manager","owner":"mccxs","repo":"mccxs/dsh-client-plugin-manager","url":"https://github.com/mccxs/dsh-client-plugin-manager","category":"tools","description":{"zh":"DeepSeek Harness 客户端插件管理器：分组插件清单 + 插件市场标签页（dsh-client-plugin-manager）","en":"DeepSeek Harness 客户端插件管理器：分组插件清单 + 插件市场标签页（dsh-client-plugin-manager）"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T00:27:59Z","updatedAt":"2026-08-15T00:28:08Z","createdAt":"2026-08-15T00:15:46Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-client-plugin-manager","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T00:30:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T00:30:51.627Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"screenedCommit":null},{"id":"chiro2001/dsh-oc","order":451,"name":"@deepseek-ai/dsh-oc","owner":"chiro2001","repo":"chiro2001/dsh-oc","url":"https://github.com/chiro2001/dsh-oc","category":"ui","description":{"zh":"DeepSeek Harness 的 OpenCode TUI 前端：以官方 OpenCode TUI 作为终端前端，dsh 作为后端 | OpenCode TUI frontend for DeepSeek Harness: official OpenCode TUI as the terminal client, dsh as the backend","en":"DeepSeek Harness 的 OpenCode TUI 前端：以官方 OpenCode TUI 作为终端前端，dsh 作为后端 | OpenCode TUI frontend for DeepSeek Harness: official OpenCode TUI as the terminal client, dsh as the backend"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":1,"openIssues":0,"watchers":3,"pushedAt":"2026-08-16T09:59:10Z","updatedAt":"2026-08-16T10:00:04Z","createdAt":"2026-08-15T00:48:03Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@chiro2001/dsh-oc","version":"0.1.0-rc.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"49388326e106ea5adf61e41df4dbe7e8d1719d1f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-16T10:01:14.248Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:14.248Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"chiro2001/dsh-oc@49388326e106ea5adf61e41df4dbe7e8d1719d1f#scan-2","versionCount":1,"latestCommit":"49388326e106ea5adf61e41df4dbe7e8d1719d1f","latestCheckedAt":"2026-08-16T10:01:14.248Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"stu-katomegumi/dsh-weixin","order":452,"name":"@deepseek-ai/dsh-weixin","owner":"Stu-KatoMegumi","repo":"Stu-KatoMegumi/dsh-weixin","url":"https://github.com/Stu-KatoMegumi/dsh-weixin","category":"tools","description":{"zh":"[STU-XIE] 将你的本地dsh接入微信，尝试使用微信进行工作吧，至少比openclaw的体验要好很多","en":"[STU-XIE] 将你的本地dsh接入微信，尝试使用微信进行工作吧，至少比openclaw的体验要好很多"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T18:56:43Z","updatedAt":"2026-08-15T18:57:08Z","createdAt":"2026-08-15T12:25:33Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-weixin","version":"1.5.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","src/plugin/index.mjs","src/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f9792095688d26229d8e402493ae44ff2bfec18a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-27T12:00:31.487Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-27T12:00:31.487Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/plugin/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/client/index.js"]}],"filesInspected":["package.json","src/plugin/index.mjs","src/client/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"stu-katomegumi/dsh-weixin@f9792095688d26229d8e402493ae44ff2bfec18a#scan-2","versionCount":1,"latestCommit":"f9792095688d26229d8e402493ae44ff2bfec18a","latestCheckedAt":"2026-08-27T12:00:31.487Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"bingchancn/fabric-theme-studio","order":453,"name":"@dsh-do/fabric-theme-studio","owner":"BingChanCN","repo":"BingChanCN/fabric-theme-studio","url":"https://github.com/BingChanCN/fabric-theme-studio","category":"ui","description":{"zh":"@dsh-do/fabric-theme-studio","en":"@dsh-do/fabric-theme-studio"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T09:29:07Z","updatedAt":"2026-08-15T09:29:27Z","createdAt":"2026-08-14T17:22:42Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-do/fabric-theme-studio","version":"0.7.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"066a92d188e91ec6c79453f6c710dd69f4d72776","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T09:30:06.829Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T09:30:12.682Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]}},{"id":"aks1st/dsh-mermaid","order":454,"name":"@dsh-external/dsh-mermaid","owner":"AKS1st","repo":"AKS1st/dsh-mermaid","url":"https://github.com/AKS1st/dsh-mermaid","category":"session","description":{"zh":"在 DSH Web 会话中把 Mermaid 代码围栏渲染为 SVG 图表 | Render Mermaid code fences as SVG diagrams in DSH Web messages","en":"在 DSH Web 会话中把 Mermaid 代码围栏渲染为 SVG 图表 | Render Mermaid code fences as SVG diagrams in DSH Web messages"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T06:29:49Z","updatedAt":"2026-08-15T06:29:53Z","createdAt":"2026-08-14T20:52:14Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-mermaid","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"aaebd3239c29d394c2dfed095c999a9e4017821e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T06:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T06:30:13.027Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现遥测或分析服务线索"]}},{"id":"xiekai886/dsh-musicplayer","order":455,"name":"@dsh-external/dsh-music","owner":"xiekai886","repo":"xiekai886/dsh-MusicPlayer","url":"https://github.com/xiekai886/dsh-MusicPlayer","category":"fun","description":{"zh":"这是一个可以让你边对话边听歌的 DeepSeek Harness 插件：折叠/展开两种可自由拖动的悬浮窗口形态，利用 Meting API 等解析源接入网易云音乐，支持歌单导入和按歌名或歌手搜索单曲导入。Chat and listen at the same time.","en":"这是一个可以让你边对话边听歌的 DeepSeek Harness 插件：折叠/展开两种可自由拖动的悬浮窗口形态，利用 Meting API 等解析源接入网易云音乐，支持歌单导入和按歌名或歌手搜索单曲导入。Chat and listen at the same time."},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T06:29:55Z","updatedAt":"2026-08-15T06:29:58Z","createdAt":"2026-08-14T16:47:00Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-music","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b026a1373092ba5a7993a7c63fee6611f0ebe39e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:51.728Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:51.728Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js","client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"xiekai886/dsh-musicplayer@b026a1373092ba5a7993a7c63fee6611f0ebe39e#scan-2","versionCount":1,"latestCommit":"b026a1373092ba5a7993a7c63fee6611f0ebe39e","latestCheckedAt":"2026-08-23T12:00:51.728Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"nanami-0713/dsh-notifier","order":456,"name":"@dsh-external/dsh-notifier","owner":"nanami-0713","repo":"nanami-0713/dsh-notifier","url":"https://github.com/nanami-0713/dsh-notifier","category":"workflow","description":{"zh":"DSH 插件：任务结束 / 需要用户决策时弹窗提醒（web toast + 桌面通知），类似 Codex / Claude Code 体验","en":"DSH 插件：任务结束 / 需要用户决策时弹窗提醒（web toast + 桌面通知），类似 Codex / Claude Code 体验"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T21:55:03Z","updatedAt":"2026-08-15T21:54:52Z","createdAt":"2026-08-15T21:54:40Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-notifier","version":"0.5.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"edf9db1390f3ecb2a0936ca058604c6792b8c8dd","installCommand":"dsh plugin --profile web add github:nanami-0713/dsh-notifier#edf9db1390f3ecb2a0936ca058604c6792b8c8dd","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:16.756Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-26T00:00:16.756Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"nanami-0713/dsh-notifier@edf9db1390f3ecb2a0936ca058604c6792b8c8dd#scan-2","versionCount":1,"latestCommit":"edf9db1390f3ecb2a0936ca058604c6792b8c8dd","latestCheckedAt":"2026-08-26T00:00:16.756Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"starlight-bananice/dsh-status-bar","order":457,"name":"@dsh-external/dsh-status-bar","owner":"Starlight-bananice","repo":"Starlight-bananice/dsh-status-bar","url":"https://github.com/Starlight-bananice/dsh-status-bar","category":"session","description":{"zh":"Know what your agent is doing at a glance — 17-segment configurable status bar for DeepSeek Harness: status/model/context/tokens/TPS/cost/jobs. 一眼看清你的 agent 正在做什么：17 段可配置 DSH 会话状态栏。","en":"Know what your agent is doing at a glance — 17-segment configurable status bar for DeepSeek Harness: status/model/context/tokens/TPS/cost/jobs. 一眼看清你的 agent 正在做什么：17 段可配置 DSH 会话状态栏。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T20:29:19Z","updatedAt":"2026-08-15T20:29:58Z","createdAt":"2026-08-15T19:54:06Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@bananiceee/dsh-status-bar","version":"0.1.10","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"128a7f3d1256a003989d5bafc8422829424be662","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T12:00:28.016Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T12:00:28.016Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"starlight-bananice/dsh-status-bar@128a7f3d1256a003989d5bafc8422829424be662#scan-2","versionCount":1,"latestCommit":"128a7f3d1256a003989d5bafc8422829424be662","latestCheckedAt":"2026-08-26T12:00:28.016Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"peterzonezz/dsh-token-cost","order":458,"name":"@dsh-user/dsh-token-cost","owner":"PeterZoneZz","repo":"PeterZoneZz/dsh-token-cost","url":"https://github.com/PeterZoneZz/dsh-token-cost","category":"tools","description":{"zh":"DSH (DeepSeek Harness) web plugin: a draggable whale floating widget showing token usage, spend and the official DeepSeek account balance","en":"DSH (DeepSeek Harness) web plugin: a draggable whale floating widget showing token usage, spend and the official DeepSeek account balance"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T07:29:48Z","updatedAt":"2026-08-15T07:29:57Z","createdAt":"2026-08-15T07:26:11Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-user/dsh-token-cost","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f7ced504c9208be5870b977c2089a70a611e40cd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:45.337Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:45.337Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"peterzonezz/dsh-token-cost@f7ced504c9208be5870b977c2089a70a611e40cd#scan-2","versionCount":1,"latestCommit":"f7ced504c9208be5870b977c2089a70a611e40cd","latestCheckedAt":"2026-08-23T12:00:45.337Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lijma/dsh-plugin-marketplace","order":459,"name":"@dshindex/dsh-plugin-marketplace","owner":"lijma","repo":"lijma/dsh-plugin-marketplace","url":"https://github.com/lijma/dsh-plugin-marketplace","category":"tools","description":{"zh":"帮助寻找DSH插件，引导安装，并持续在DeepSeek Harness内收集插件评分、FAQ、踩坑记录并分享到社区","en":"帮助寻找DSH插件，引导安装，并持续在DeepSeek Harness内收集插件评分、FAQ、踩坑记录并分享到社区"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T21:28:09Z","updatedAt":"2026-08-15T21:27:47Z","createdAt":"2026-08-15T08:19:38Z","license":"MIT","language":"JavaScript","homepage":"https://dshindex.dev","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dshindex/dsh-plugin-marketplace","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/host/index.js","dist/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7268306c4c37e5c69428a726e951f3b7bb56bb2a","installCommand":"dsh plugin --profile web add github:lijma/dsh-plugin-marketplace#7268306c4c37e5c69428a726e951f3b7bb56bb2a","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:18.758Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-26T00:00:18.758Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"lijma/dsh-plugin-marketplace@7268306c4c37e5c69428a726e951f3b7bb56bb2a#scan-2","versionCount":1,"latestCommit":"7268306c4c37e5c69428a726e951f3b7bb56bb2a","latestCheckedAt":"2026-08-26T00:00:18.758Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"saikel-orado-liu/dsh-fare-meter","order":460,"name":"@gamegeek-saikel/dsh-fare-meter","owner":"Saikel-Orado-Liu","repo":"Saikel-Orado-Liu/dsh-fare-meter","url":"https://github.com/Saikel-Orado-Liu/dsh-fare-meter","category":"tools","description":{"zh":"Cost tracking plugin for the DeepSeek Harness Web GUI — snapshot-anchored per-turn pricing, account balance, and live cost estimates.","en":"Cost tracking plugin for the DeepSeek Harness Web GUI — snapshot-anchored per-turn pricing, account balance, and live cost estimates."},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T13:29:25Z","updatedAt":"2026-08-15T13:29:46Z","createdAt":"2026-08-15T08:08:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@gamegeek-saikel/dsh-fare-meter","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2c488b1806c8a23b62b95a23a99bca146babdc8e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T13:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T13:30:25.694Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]}},{"id":"linenxi-ctrl/dsh-vision","order":461,"name":"@linenxi-ctrl/dsh-vision","owner":"linenxi-ctrl","repo":"linenxi-ctrl/dsh-vision","url":"https://github.com/linenxi-ctrl/dsh-vision","category":"dev","description":{"zh":"为 DeepSeek Harness 增加外挂识图模型：圆形鲸鱼按钮、发送图片识图自动回传、模型自主截图+识图工具、多协议自动适配、小白一键安装（未装 Node.js 自动下载）","en":"为 DeepSeek Harness 增加外挂识图模型：圆形鲸鱼按钮、发送图片识图自动回传、模型自主截图+识图工具、多协议自动适配、小白一键安装（未装 Node.js 自动下载）"},"added":"2026-08-15","curated":false,"topic":true,"stars":11,"forks":0,"openIssues":1,"watchers":11,"pushedAt":"2026-08-15T14:29:50Z","updatedAt":"2026-08-15T14:17:39Z","createdAt":"2026-08-13T23:12:13Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@linenxi-ctrl/dsh-vision","version":"0.2.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"50f6ba065e8cf42c4ecc5a06c4e96dc2d5c69b11","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:28.515Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T00:00:28.515Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"linenxi-ctrl/dsh-vision@50f6ba065e8cf42c4ecc5a06c4e96dc2d5c69b11#scan-2","versionCount":1,"latestCommit":"50f6ba065e8cf42c4ecc5a06c4e96dc2d5c69b11","latestCheckedAt":"2026-08-30T00:00:28.515Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"hto404/dsh-chime","order":462,"name":"@linxin666/dsh-chime","owner":"HtO404","repo":"HtO404/dsh-chime","url":"https://github.com/HtO404/dsh-chime","category":"session","description":{"zh":"Task-completion notification chime for the DSH web GUI: beeps when an agent turn finishes, even in background tabs. 10 preset sounds + custom import + volume.","en":"Task-completion notification chime for the DSH web GUI: beeps when an agent turn finishes, even in background tabs. 10 preset sounds + custom import + volume."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T05:29:36Z","updatedAt":"2026-08-15T05:29:44Z","createdAt":"2026-08-15T05:26:34Z","license":"Apache-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@linxin666/dsh-chime","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"00bea3247ce04a35cda05834e0213eb117d6a2b9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T05:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T05:30:12.339Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]}},{"id":"doiiarx/dsh-user-language","order":463,"name":"@local/dsh-user-language","owner":"DoiiarX","repo":"DoiiarX/dsh-user-language","url":"https://github.com/DoiiarX/dsh-user-language","category":"tools","description":{"zh":"DeepSeek Harness 应答语言插件：Web 设置页「用户语言」小节 + 系统提示词语言注入，避免中文提问得英文回复","en":"DeepSeek Harness 应答语言插件：Web 设置页「用户语言」小节 + 系统提示词语言注入，避免中文提问得英文回复"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T18:59:55Z","updatedAt":"2026-08-15T18:59:58Z","createdAt":"2026-08-15T18:56:33Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@doiiarx/dsh-user-language","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"65a6c202f9af68832b915d6f8b7e2ba63992f519","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-27T00:00:20.179Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-27T00:00:20.179Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"doiiarx/dsh-user-language@65a6c202f9af68832b915d6f8b7e2ba63992f519#scan-2","versionCount":1,"latestCommit":"65a6c202f9af68832b915d6f8b7e2ba63992f519","latestCheckedAt":"2026-08-27T00:00:20.179Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"piyotahu/muxiva-dsh-voice","order":464,"name":"@muxiva/dsh-voice","owner":"PiyotaHu","repo":"PiyotaHu/muxiva-dsh-voice","url":"https://github.com/PiyotaHu/muxiva-dsh-voice","category":"tools","description":{"zh":"Local-first full-duplex voice for DeepSeek Harness, orchestrated by Muxiva","en":"Local-first full-duplex voice for DeepSeek Harness, orchestrated by Muxiva"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T13:59:31Z","updatedAt":"2026-08-15T13:59:34Z","createdAt":"2026-08-15T13:57:41Z","license":null,"language":"JavaScript","homepage":"https://piyotahu.github.io/muxiva-dsh-voice/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@muxiva/dsh-voice","version":"0.1.0-alpha.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"10e5c79ceb849a8b2561a9f1831bcaa72f9f00d0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:31.193Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T00:00:31.193Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"piyotahu/muxiva-dsh-voice@10e5c79ceb849a8b2561a9f1831bcaa72f9f00d0#scan-2","versionCount":1,"latestCommit":"10e5c79ceb849a8b2561a9f1831bcaa72f9f00d0","latestCheckedAt":"2026-08-30T00:00:31.193Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"terricsh/dsh-app-launcher","order":465,"name":"@terricsh/dsh-app-launcher","owner":"TerricSH","repo":"TerricSH/dsh-app-launcher","url":"https://github.com/TerricSH/dsh-app-launcher","category":"tools","description":{"zh":"@terricsh/dsh-app-launcher","en":"@terricsh/dsh-app-launcher"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T18:28:49Z","updatedAt":"2026-08-15T18:28:57Z","createdAt":"2026-08-15T02:58:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@terricsh/dsh-app-launcher","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0b4241e99a6df26c683c3954be0eeab35fdbd6be","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:21.076Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:21.076Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"terricsh/dsh-app-launcher@0b4241e99a6df26c683c3954be0eeab35fdbd6be#scan-2","versionCount":1,"latestCommit":"0b4241e99a6df26c683c3954be0eeab35fdbd6be","latestCheckedAt":"2026-08-28T00:00:21.076Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"tommyfang2077/gh-tea-npm-dsh","order":466,"name":"@tommyfang/gh-tea-npm-dsh","owner":"TommyFang2077","repo":"TommyFang2077/gh-tea-npm-dsh","url":"https://github.com/TommyFang2077/gh-tea-npm-dsh","category":"tools","description":{"zh":"GitHub (gh) + Gitea (tea) + npm CLIs for DeepSeek Harness (dsh): guided auth/config, issue & package tools","en":"GitHub (gh) + Gitea (tea) + npm CLIs for DeepSeek Harness (dsh): guided auth/config, issue & package tools"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T01:59:10Z","updatedAt":"2026-08-15T01:59:20Z","createdAt":"2026-08-14T20:39:10Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@tommyfang/gh-tea-npm-dsh","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dsh/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"979dce5ee6ead6ac2d68e7fa35cbaab66bb46142","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T02:00:07.017Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T02:00:12.502Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh/index.js"]}],"filesInspected":["package.json","dsh/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现环境变量、密钥或凭据访问线索"]}},{"id":"dhicoc/dsh-wuyun-liuqi","order":467,"name":"@wuyun-liuqi/dsh-wuyun-liuqi","owner":"dhicoc","repo":"dhicoc/dsh-wuyun-liuqi","url":"https://github.com/dhicoc/dsh-wuyun-liuqi","category":"workflow","description":{"zh":"五运六气（运气学）AI Agent 技能包的 DeepSeek Harness（dsh）Cordis 插件：31 个 SKILL.md 技能原样封装，一行 dsh plugin add 安装。","en":"五运六气（运气学）AI Agent 技能包的 DeepSeek Harness（dsh）Cordis 插件：31 个 SKILL.md 技能原样封装，一行 dsh plugin add 安装。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T04:29:37Z","updatedAt":"2026-08-15T04:29:40Z","createdAt":"2026-08-15T01:58:58Z","license":null,"language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@wuyun-liuqi/dsh-wuyun-liuqi","version":"1.0.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c871ee7b9774aa186d00f31659fb3def9ebeb639","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T04:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T04:30:11.986Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]}},{"id":"xueayi/dsh-opencode-go-usage","order":468,"name":"@xueayi/dsh-opencode-go-usage","owner":"xueayi","repo":"xueayi/dsh-opencode-go-usage","url":"https://github.com/xueayi/dsh-opencode-go-usage","category":"workflow","description":{"zh":"OpenCode Go plan usage monitor for DeepSeek Harness: real-time 5h-rolling / weekly / monthly quota in a floating web dock","en":"OpenCode Go plan usage monitor for DeepSeek Harness: real-time 5h-rolling / weekly / monthly quota in a floating web dock"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T17:59:17Z","updatedAt":"2026-08-15T17:59:32Z","createdAt":"2026-08-15T17:40:20Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/@xueayi/dsh-opencode-go-usage","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@xueayi/dsh-opencode-go-usage","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8e4b6894a5dd2ba33ac79610f6ebf08c27437ecd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:22.345Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:22.345Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","cordis.patch.yml"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"xueayi/dsh-opencode-go-usage@8e4b6894a5dd2ba33ac79610f6ebf08c27437ecd#scan-2","versionCount":1,"latestCommit":"8e4b6894a5dd2ba33ac79610f6ebf08c27437ecd","latestCheckedAt":"2026-08-28T00:00:22.345Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"yangzhe1991/dsh-web-enhance","order":469,"name":"@yangzhe1991/dsh-web-enhance","owner":"yangzhe1991","repo":"yangzhe1991/dsh-web-enhance","url":"https://github.com/yangzhe1991/dsh-web-enhance","category":"ui","description":{"zh":"Quality-of-life enhancements for the DSH (DeepSeek Harness) web UI — turn-by-turn conversation navigation with floating jump buttons.DSH(DeepSeek Harness)Web UI 的顺手小功能插件 —— 对话右下角悬浮按钮,一键跳到每轮对话的开头/结尾,自动跳过思考、工具调用和过渡句。","en":"Quality-of-life enhancements for the DSH (DeepSeek Harness) web UI — turn-by-turn conversation navigation with floating jump buttons.DSH(DeepSeek Harness)Web UI 的顺手小功能插件 —— 对话右下角悬浮按钮,一键跳到每轮对话的开头/结尾,自动跳过思考、工具调用和过渡句。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T13:59:38Z","updatedAt":"2026-08-15T13:59:53Z","createdAt":"2026-08-15T13:14:20Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@yangzhe1991/dsh-web-enhance","version":"0.1.4","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6180945054a06bf01687dfc21336a04c1e519cbc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:30.108Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T00:00:30.108Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"yangzhe1991/dsh-web-enhance@6180945054a06bf01687dfc21336a04c1e519cbc#scan-2","versionCount":1,"latestCommit":"6180945054a06bf01687dfc21336a04c1e519cbc","latestCheckedAt":"2026-08-30T00:00:30.108Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"wjabanjj/aifp-mcp","order":470,"name":"aifp-mcp","owner":"wjabanjj","repo":"wjabanjj/aifp-mcp","url":"https://github.com/wjabanjj/aifp-mcp","category":"session","description":{"zh":"AiFP 记忆感知系统｜MCP 服务，一套记忆全 AI 共享。面向中文的 Agent 感知记忆，支持叙事链、语义纠错、感知链图扩散。兼容 DeepSeek‑Harness、Claude Code、Cursor、Codex等全部 MCP 客户端，数据完全本地存储。","en":"AiFP 记忆感知系统｜MCP 服务，一套记忆全 AI 共享。面向中文的 Agent 感知记忆，支持叙事链、语义纠错、感知链图扩散。兼容 DeepSeek‑Harness、Claude Code、Cursor、Codex等全部 MCP 客户端，数据完全本地存储。"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T07:59:58Z","updatedAt":"2026-08-15T08:00:04Z","createdAt":"2026-08-15T02:15:56Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"aifp-mcp","version":"1.5.11","lifecycleScripts":["postinstall"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d2b685a6e2beb29c57d835353f2155af84c1e192","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:43.152Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:43.152Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：postinstall","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"wjabanjj/aifp-mcp@d2b685a6e2beb29c57d835353f2155af84c1e192#scan-2","versionCount":1,"latestCommit":"d2b685a6e2beb29c57d835353f2155af84c1e192","latestCheckedAt":"2026-08-23T12:00:43.152Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"jamailar/beav-deepseek-harness","order":471,"name":"beav-creator-dsh","owner":"Jamailar","repo":"Jamailar/beav-deepseek-harness","url":"https://github.com/Jamailar/beav-deepseek-harness","category":"workflow","description":{"zh":"Beav Creator AI workflows for social-media content, knowledge, images, audio, and video in DeepSeek Harness","en":"Beav Creator AI workflows for social-media content, knowledge, images, audio, and video in DeepSeek Harness"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T10:27:10Z","updatedAt":"2026-08-16T10:27:11Z","createdAt":"2026-08-15T07:39:00Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/Jamailar/beav-deepseek-harness","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"beav-creator-dsh","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"05f947af0d18f348a6c282ae976b0affddf522a1","installCommand":"dsh plugin --profile web add github:Jamailar/beav-deepseek-harness#05f947af0d18f348a6c282ae976b0affddf522a1","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-16T10:31:08.023Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-16T10:31:08.023Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"jamailar/beav-deepseek-harness@05f947af0d18f348a6c282ae976b0affddf522a1#scan-2","versionCount":1,"latestCommit":"05f947af0d18f348a6c282ae976b0affddf522a1","latestCheckedAt":"2026-08-16T10:31:08.023Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"happyren/dsh-agent-messaging","order":472,"name":"dsh-agent-messaging","owner":"happyren","repo":"happyren/dsh-agent-messaging","url":"https://github.com/happyren/dsh-agent-messaging","category":"session","description":{"zh":"Cross-session verification, claims and a decision ledger for DeepSeek Harness — so two agent sessions don't repeat, contradict or deadlock each other.","en":"Cross-session verification, claims and a decision ledger for DeepSeek Harness — so two agent sessions don't repeat, contradict or deadlock each other."},"added":"2026-08-15","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-15T11:29:55Z","updatedAt":"2026-08-15T11:29:54Z","createdAt":"2026-08-13T15:02:34Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/topics/dsh-plugin","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-agent-messaging","version":"0.13.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cd295a5daa13b301e4e2f5a6164ff28bddd6acf2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:58.716Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:00:58.716Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"happyren/dsh-agent-messaging@cd295a5daa13b301e4e2f5a6164ff28bddd6acf2#scan-2","versionCount":1,"latestCommit":"cd295a5daa13b301e4e2f5a6164ff28bddd6acf2","latestCheckedAt":"2026-08-30T12:00:58.716Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"noelune/dsh-agent-relay","order":473,"name":"dsh-agent-relay","owner":"Noelune","repo":"Noelune/dsh-agent-relay","url":"https://github.com/Noelune/dsh-agent-relay","category":"workflow","description":{"zh":"dsh-agent-relay","en":"dsh-agent-relay"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T01:29:45Z","updatedAt":"2026-08-15T01:30:04Z","createdAt":"2026-08-14T16:23:33Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-agent-relay","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client-ui.js"],"invalidDeclaredPaths":[]},"screenedCommit":"820bf257dce2c3e402b06acd4f6d55567c540833","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T01:30:06.878Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T01:30:11.195Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client-ui.js"]}],"filesInspected":["package.json","lib/index.js","lib/client-ui.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]}},{"id":"toolclub/dsh-agent-team-gui","order":474,"name":"dsh-agent-team-gui","owner":"toolclub","repo":"toolclub/dsh-agent-team-gui","url":"https://github.com/toolclub/dsh-agent-team-gui","category":"workflow","description":{"zh":"DeepSeek Harness multi-agent squad GUI with per-agent provider/model routes, tool policies, and serial/parallel spawn/fork/chain orchestration.","en":"DeepSeek Harness multi-agent squad GUI with per-agent provider/model routes, tool policies, and serial/parallel spawn/fork/chain orchestration."},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T06:29:30Z","updatedAt":"2026-08-15T06:29:39Z","createdAt":"2026-08-15T03:40:19Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/toolclub/agent_team_gui#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-agent-team-gui","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"bd1b779fee002e5b3b0babed0200749fb9133acf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T06:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T06:30:14.647Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]},"codexPick":{"repo":"toolclub/dsh-agent-team-gui","pickedAt":"2026-08-19T04:28:13.605Z","reviewedCommit":"3b56aa4dbe20cc128d710928d20c80404ec7fff6","category":"workflow","summary":{"zh":"在 DSH Web 中编排可持久化的多模型 Agent 团队，支持 DAG、并发、质量审查、后台运行和 Token 统计。","en":"Orchestrate persistent multi-model agent teams in DSH Web with DAGs, concurrency, quality review, background runs, and token metering."},"reason":{"zh":"v1.0.0 已具备按成员限制工具、Token 预算、崩溃恢复、质量修复循环和结构化复盘；发布 CI 验证了固定 Git revision 安装、浏览器冒烟测试及 Node 22/24。","en":"v1.0.0 combines per-member tool restrictions, token budgets, crash recovery, quality repair loops, and structured retrospectives; release CI validates pinned Git installation, browser smoke, and Node 22/24."},"safety":{"risk":"medium","zh":"插件不保存 provider 凭据，团队定义、任务、输出、错误和用量会写入本地 DSH 存储。成员可执行其获准的 DSH 工具，多模型并发可能增加费用；Git 安装会运行已审查的 prepare 构建，建议固定 v1.0.0 或完整 SHA，并只授权本包的 allowBuilds。","en":"The plugin does not store provider credentials; team definitions, tasks, outputs, errors, and usage are persisted in local DSH storage. Members can execute their allowed DSH tools and concurrent models can increase cost. Git installation runs the reviewed prepare build, so pin v1.0.0 or a full SHA and authorize allowBuilds only for this package."}}},{"id":"duntansen/dsh-plugin-aquote","order":475,"name":"dsh-aquote","owner":"duntansen","repo":"duntansen/dsh-plugin-aquote","url":"https://github.com/duntansen/dsh-plugin-aquote","category":"tools","description":{"zh":"A股行情条 — 自研 A 股行情动态 Cordis 插件 (DeepSeek Harness Plugin)","en":"A股行情条 — 自研 A 股行情动态 Cordis 插件 (DeepSeek Harness Plugin)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T01:59:17Z","updatedAt":"2026-08-15T01:59:12Z","createdAt":"2026-08-15T01:44:17Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-aquote","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3ed3036321273cb6260aa2875105aa9d9fb52af0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T02:00:07.017Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T02:00:13.276Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]}},{"id":"nirvanaslash/dsh-artifact-preview","order":476,"name":"dsh-artifact-preview","owner":"nirvanaslash","repo":"nirvanaslash/dsh-artifact-preview","url":"https://github.com/nirvanaslash/dsh-artifact-preview","category":"tools","description":{"zh":"Codex-style artifact preview for DeepSeek Harness (DSH): produced-files card row in chat + split-screen side preview (Markdown / code / CSV / JSON / images / HTML)","en":"Codex-style artifact preview for DeepSeek Harness (DSH): produced-files card row in chat + split-screen side preview (Markdown / code / CSV / JSON / images / HTML)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T10:29:28Z","updatedAt":"2026-08-15T10:29:43Z","createdAt":"2026-08-15T10:25:32Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-artifact-preview","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ae23ec96f05710184024ff771403abb06bde068a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:01:01.575Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:01:01.575Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"nirvanaslash/dsh-artifact-preview@ae23ec96f05710184024ff771403abb06bde068a#scan-2","versionCount":1,"latestCommit":"ae23ec96f05710184024ff771403abb06bde068a","latestCheckedAt":"2026-08-30T12:01:01.575Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lmst2/dsh-asc","order":477,"name":"dsh-asc","owner":"lmst2","repo":"lmst2/dsh-asc","url":"https://github.com/lmst2/dsh-asc","category":"tools","description":{"zh":"dsh-asc","en":"dsh-asc"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T07:59:57Z","updatedAt":"2026-08-15T07:52:02Z","createdAt":"2026-08-14T17:16:34Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-asc","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/types/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1d24ecb3df803c28eec9032c2abb6084fb1f89d0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:42.802Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:42.802Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"lmst2/dsh-asc@1d24ecb3df803c28eec9032c2abb6084fb1f89d0#scan-2","versionCount":1,"latestCommit":"1d24ecb3df803c28eec9032c2abb6084fb1f89d0","latestCheckedAt":"2026-08-23T12:00:42.802Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ai-eks/dsh-auth-tunnel","order":478,"name":"dsh-auth-tunnel","owner":"ai-eks","repo":"ai-eks/dsh-auth-tunnel","url":"https://github.com/ai-eks/dsh-auth-tunnel","category":"tools","description":{"zh":"Password-gated Cloudflare Tunnel access for the DeepSeek Harness Web GUI, with quick and named tunnel modes.","en":"Password-gated Cloudflare Tunnel access for the DeepSeek Harness Web GUI, with quick and named tunnel modes."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T09:29:42Z","updatedAt":"2026-08-15T09:29:51Z","createdAt":"2026-08-14T11:58:48Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-auth-tunnel","version":"0.1.1-rc.2.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e2c90f02c970992d81e0192d5fe3d708c63dfc4a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:28.842Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:00:28.842Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"ai-eks/dsh-auth-tunnel@e2c90f02c970992d81e0192d5fe3d708c63dfc4a#scan-2","versionCount":1,"latestCommit":"e2c90f02c970992d81e0192d5fe3d708c63dfc4a","latestCheckedAt":"2026-08-30T12:00:28.842Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"linkingoscar/dsh-billing-glass","order":479,"name":"dsh-billing-glass","owner":"linkingoscar","repo":"linkingoscar/dsh-billing-glass","url":"https://github.com/linkingoscar/dsh-billing-glass","category":"session","description":{"zh":"Liquid-glass billing overlay for the DeepSeek Harness Web GUI: provider balances, session cost, daily spend and token buckets. DeepSeek-first and extensible.","en":"Liquid-glass billing overlay for the DeepSeek Harness Web GUI: provider balances, session cost, daily spend and token buckets. DeepSeek-first and extensible."},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T09:29:39Z","updatedAt":"2026-08-15T09:18:05Z","createdAt":"2026-08-14T12:53:24Z","license":"Apache-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-billing-glass","version":"0.5.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1db2706ed1c165a3ded2490bd83a85b5d115edf5","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:01:04.878Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:01:04.878Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"linkingoscar/dsh-billing-glass@1db2706ed1c165a3ded2490bd83a85b5d115edf5#scan-2","versionCount":1,"latestCommit":"1db2706ed1c165a3ded2490bd83a85b5d115edf5","latestCheckedAt":"2026-08-30T12:01:04.878Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"klrsl/dsh-biomemory","order":480,"name":"dsh-biomemory","owner":"KLRSL","repo":"KLRSL/dsh-biomemory","url":"https://github.com/KLRSL/dsh-biomemory","category":"session","description":{"zh":"生物仿生记忆系统插件：Biomimetic memory for DeepSeek Harness — transparent Markdown memory, approval-gated writes, frozen snapshot injection","en":"生物仿生记忆系统插件：Biomimetic memory for DeepSeek Harness — transparent Markdown memory, approval-gated writes, frozen snapshot injection"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T19:58:22Z","updatedAt":"2026-08-15T19:59:46Z","createdAt":"2026-08-15T19:58:14Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-biomemory","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"1de1d3dafb47579bf33012f8b035efdb24e57fb9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T20:00:06.829Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T20:00:14.098Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.mjs"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"dfkai/dsh-board","order":481,"name":"dsh-board","owner":"dfkai","repo":"dfkai/dsh-board","url":"https://github.com/dfkai/dsh-board","category":"ui","description":{"zh":"DeepSeek Harness 用量面板：token 计费、1M 上下文、词勋段位、每日热力","en":"DeepSeek Harness 用量面板：token 计费、1M 上下文、词勋段位、每日热力"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-16T09:59:28Z","updatedAt":"2026-08-16T09:59:50Z","createdAt":"2026-08-15T04:24:22Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-board","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5375c0920f8a04a3208f4d70719656455113da5d","installCommand":"dsh plugin --profile web add github:dfkai/dsh-board#5375c0920f8a04a3208f4d70719656455113da5d","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-16T10:01:13.244Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-16T10:01:13.244Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"dfkai/dsh-board@5375c0920f8a04a3208f4d70719656455113da5d#scan-2","versionCount":1,"latestCommit":"5375c0920f8a04a3208f4d70719656455113da5d","latestCheckedAt":"2026-08-16T10:01:13.244Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"chance-wu/dsh-change-center","order":482,"name":"dsh-change-center","owner":"Chance-Wu","repo":"Chance-Wu/dsh-change-center","url":"https://github.com/Chance-Wu/dsh-change-center","category":"tools","description":{"zh":"文件变更的捕获 → 审查 → 拒绝 / 应用 → 回滚中心","en":"文件变更的捕获 → 审查 → 拒绝 / 应用 → 回滚中心"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T23:58:54Z","updatedAt":"2026-08-14T23:59:03Z","createdAt":"2026-08-14T15:57:01Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-change-center","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T00:00:45.424Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T00:00:52.789Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"apageoflove/dsh-changeproof","order":483,"name":"dsh-changeproof","owner":"Apageoflove","repo":"Apageoflove/DSH-changeproof","url":"https://github.com/Apageoflove/DSH-changeproof","category":"tools","description":{"zh":"变更证明（ChangeProof）— DeepSeek Harness 插件：代码改动后确认改动的行真的被测试覆盖到","en":"变更证明（ChangeProof）— DeepSeek Harness 插件：代码改动后确认改动的行真的被测试覆盖到"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T08:29:15Z","updatedAt":"2026-08-15T08:29:31Z","createdAt":"2026-08-15T07:29:41Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-changeproof","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/host/cordis-plugin.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"c377901280feeec3b8c2673a55354fa7d65eb196","installCommand":"dsh plugin --profile web add github:Apageoflove/DSH-changeproof#c377901280feeec3b8c2673a55354fa7d65eb196","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:38.427Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-23T12:00:38.427Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"apageoflove/dsh-changeproof@c377901280feeec3b8c2673a55354fa7d65eb196#scan-2","versionCount":1,"latestCommit":"c377901280feeec3b8c2673a55354fa7d65eb196","latestCheckedAt":"2026-08-23T12:00:38.427Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"caoyiwei850/dsh-client-ui-skins","order":484,"name":"dsh-client-ui-skins","owner":"caoyiwei850","repo":"caoyiwei850/dsh-client-ui-skins","url":"https://github.com/caoyiwei850/dsh-client-ui-skins","category":"ui","description":{"zh":"DSH Web skin plugin with built-in themes and custom image skins","en":"DSH Web skin plugin with built-in themes and custom image skins"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T02:29:53Z","updatedAt":"2026-08-15T02:29:57Z","createdAt":"2026-08-15T02:12:33Z","license":null,"language":"Shell","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-client-ui-skins","version":"0.1.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"04c2aa3ab478ff01f400b7c9b603d7a1e6060fb9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T02:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T02:30:11.013Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现遥测或分析服务线索"]}},{"id":"x2802490130-prog/dsh-client-ui-writing","order":485,"name":"dsh-client-ui-writing","owner":"x2802490130-prog","repo":"x2802490130-prog/dsh-client-ui-writing","url":"https://github.com/x2802490130-prog/dsh-client-ui-writing","category":"ui","description":{"zh":"Client-side writing panel for DeepSeek Harness: projects, library, full-text search, evolution diffs and an SVG thread graph.","en":"Client-side writing panel for DeepSeek Harness: projects, library, full-text search, evolution diffs and an SVG thread graph."},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T23:29:15Z","updatedAt":"2026-08-15T23:29:36Z","createdAt":"2026-08-15T02:31:13Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-client-ui-writing","version":"0.6.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a7b759a110ee1cc4056e7726d31ccb0cb5fd577b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:03:56.510Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:03:56.510Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"x2802490130-prog/dsh-client-ui-writing@a7b759a110ee1cc4056e7726d31ccb0cb5fd577b#scan-2","versionCount":1,"latestCommit":"a7b759a110ee1cc4056e7726d31ccb0cb5fd577b","latestCheckedAt":"2026-08-25T12:03:56.510Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"eons2long/dsh-codex-oauth","order":486,"name":"dsh-codex-oauth","owner":"eons2long","repo":"eons2long/dsh-codex-oauth","url":"https://github.com/eons2long/dsh-codex-oauth","category":"tools","description":{"zh":"dsh-codex-oauth","en":"dsh-codex-oauth"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T03:59:14Z","updatedAt":"2026-08-15T03:59:18Z","createdAt":"2026-08-15T00:05:42Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-codex-oauth","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fdf0c616ebfb0b94ed93ef277aaa271da4cdb227","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T04:00:06.829Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T04:00:11.659Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]}},{"id":"hubaking/dsh-community-plugins","order":487,"name":"dsh-community-plugins","owner":"HubaKing","repo":"HubaKing/dsh-community-plugins","url":"https://github.com/HubaKing/dsh-community-plugins","category":"workflow","description":{"zh":"DeepSeek Harness (dsh) plugin: registers a global skill that teaches agents how to discover, evaluate and install community plugins from the GitHub dsh-plugin topic, dshmarket and npm. | DSH 社区插件生态指南 skill：让 agent 学会发现、评估、安装社区插件。","en":"DeepSeek Harness (dsh) plugin: registers a global skill that teaches agents how to discover, evaluate and install community plugins from the GitHub dsh-plugin topic, dshmarket and npm. | DSH 社区插件生态指南 skill：让 agent 学会发现、评估、安装社区插件。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T13:59:31Z","updatedAt":"2026-08-15T13:59:54Z","createdAt":"2026-08-15T12:33:43Z","license":"MIT","language":"JavaScript","homepage":"https://deepseek-harness.github.io/deepseek-harness/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-community-plugins","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"455159f29e484989abdfb9f99099d50f06051256","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:38.270Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T00:00:38.270Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"hubaking/dsh-community-plugins@455159f29e484989abdfb9f99099d50f06051256#scan-2","versionCount":1,"latestCommit":"455159f29e484989abdfb9f99099d50f06051256","latestCheckedAt":"2026-08-30T00:00:38.270Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"hanyudong1994/dsh-desktop-pet","order":488,"name":"dsh-desktop-pet","owner":"hanyudong1994","repo":"hanyudong1994/dsh-desktop-pet","url":"https://github.com/hanyudong1994/dsh-desktop-pet","category":"fun","description":{"zh":"dsh-desktop-pet","en":"dsh-desktop-pet"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T16:29:29Z","updatedAt":"2026-08-15T16:29:40Z","createdAt":"2026-08-15T16:05:23Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-ui-pet","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"06144df8a59d7f5ffde6dcb1c49359cd24a3b143","installCommand":"dsh plugin --profile web add github:hanyudong1994/dsh-desktop-pet#06144df8a59d7f5ffde6dcb1c49359cd24a3b143","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:29.540Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-28T00:00:29.540Z","findings":[],"filesInspected":["package.json","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"hanyudong1994/dsh-desktop-pet@06144df8a59d7f5ffde6dcb1c49359cd24a3b143#scan-2","versionCount":1,"latestCommit":"06144df8a59d7f5ffde6dcb1c49359cd24a3b143","latestCheckedAt":"2026-08-28T00:00:29.540Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"rafolie/dsh-desktop-windowos","order":489,"name":"dsh-desktop-plugin","owner":"RAFOLIE","repo":"RAFOLIE/dsh-desktop-windowos","url":"https://github.com/RAFOLIE/dsh-desktop-windowos","category":"tools","description":{"zh":"DeepSeek Harness desktop shell — Tauri v2, tray + native webchat + task-done toasts, single portable exe","en":"DeepSeek Harness desktop shell — Tauri v2, tray + native webchat + task-done toasts, single portable exe"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T11:29:23Z","updatedAt":"2026-08-15T11:29:28Z","createdAt":"2026-08-14T06:01:31Z","license":"MIT","language":"Rust","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-desktop-plugin","version":"1.5.10","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["plugin/cordis.patch.yml","plugin/lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2cd94d4e468b316dd1ae3eab2e286ac43e844f0a","installCommand":"dsh plugin --profile web add github:RAFOLIE/dsh-desktop-windowos#2cd94d4e468b316dd1ae3eab2e286ac43e844f0a","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:25.240Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-30T12:00:25.240Z","findings":[],"filesInspected":["package.json","plugin/lib/index.js","plugin/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"rafolie/dsh-desktop-windowos@2cd94d4e468b316dd1ae3eab2e286ac43e844f0a#scan-2","versionCount":1,"latestCommit":"2cd94d4e468b316dd1ae3eab2e286ac43e844f0a","latestCheckedAt":"2026-08-30T12:00:25.240Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"fuyue521/dsh-desktop-shortcut","order":490,"name":"dsh-desktop-shortcut","owner":"fuyue521","repo":"fuyue521/dsh-desktop-shortcut","url":"https://github.com/fuyue521/dsh-desktop-shortcut","category":"tools","description":{"zh":"DeepSeek Harness plugin that creates a Windows desktop shortcut for launching dsh web.","en":"DeepSeek Harness plugin that creates a Windows desktop shortcut for launching dsh web."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T09:28:52Z","updatedAt":"2026-08-15T09:29:07Z","createdAt":"2026-08-15T07:03:35Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-desktop-shortcut","version":"0.2.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6bd601ca32a6faba617fc57b34c77892138a5279","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-31T00:00:32.838Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-31T00:00:32.838Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"fuyue521/dsh-desktop-shortcut@6bd601ca32a6faba617fc57b34c77892138a5279#scan-2","versionCount":1,"latestCommit":"6bd601ca32a6faba617fc57b34c77892138a5279","latestCheckedAt":"2026-08-31T00:00:32.838Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"ericxu20266/dsh-discovery","order":491,"name":"dsh-discovery","owner":"EricXu20266","repo":"EricXu20266/dsh-discovery","url":"https://github.com/EricXu20266/dsh-discovery","category":"tools","description":{"zh":"DSH plugin discovery browser - browse & search community plugins on GitHub (read-only, no one-click installs)","en":"DSH plugin discovery browser - browse & search community plugins on GitHub (read-only, no one-click installs)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T15:00:03Z","updatedAt":"2026-08-15T13:06:47Z","createdAt":"2026-08-15T13:05:42Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-discovery","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"56be7225cbe93c016d32afdcfa65ed64a56262f3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T00:00:27.766Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:27.766Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"ericxu20266/dsh-discovery@56be7225cbe93c016d32afdcfa65ed64a56262f3#scan-2","versionCount":1,"latestCommit":"56be7225cbe93c016d32afdcfa65ed64a56262f3","latestCheckedAt":"2026-08-29T00:00:27.766Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"revolutionla/dsh-dream-skin","order":492,"name":"dsh-dream-skin","owner":"RevolutionLA","repo":"RevolutionLA/dsh-dream-skin","url":"https://github.com/RevolutionLA/dsh-dream-skin","category":"ui","description":{"zh":"DeepSeek Harness 换肤 / 壁纸 / 主题包插件 (dsh-plugin) — 8 套 Mirage 主题、每用户强调色、壁纸2.0、主题包导入导出/分享链接、收藏与随机，纯原生 token 系统实现。","en":"DeepSeek Harness 换肤 / 壁纸 / 主题包插件 (dsh-plugin) — 8 套 Mirage 主题、每用户强调色、壁纸2.0、主题包导入导出/分享链接、收藏与随机，纯原生 token 系统实现。"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T03:29:58Z","updatedAt":"2026-08-15T03:30:03Z","createdAt":"2026-08-15T02:38:54Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-dream-skin","version":"8.30.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3a0be7854eb1c52e5d52f474958706daa9f4bce9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:26.746Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T00:00:26.746Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"revolutionla/dsh-dream-skin@3a0be7854eb1c52e5d52f474958706daa9f4bce9#scan-2","versionCount":1,"latestCommit":"3a0be7854eb1c52e5d52f474958706daa9f4bce9","latestCheckedAt":"2026-09-01T00:00:26.746Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"whycantiusemyname/dsh-epoch-reanchor","order":493,"name":"dsh-epoch-reanchor","owner":"whycantiusemyname","repo":"whycantiusemyname/dsh-epoch-reanchor","url":"https://github.com/whycantiusemyname/dsh-epoch-reanchor","category":"tools","description":{"zh":"DSH plugin to A/B test We/Let's reasoning after compaction by minimizing prior-trajectory conditioning","en":"DSH plugin to A/B test We/Let's reasoning after compaction by minimizing prior-trajectory conditioning"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T22:27:28Z","updatedAt":"2026-08-15T22:27:36Z","createdAt":"2026-08-15T22:09:06Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-epoch-reanchor","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e7961364a8ac5755782eb3e2d48364129558a689","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:04:04.573Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:04:04.573Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"whycantiusemyname/dsh-epoch-reanchor@e7961364a8ac5755782eb3e2d48364129558a689#scan-2","versionCount":1,"latestCommit":"e7961364a8ac5755782eb3e2d48364129558a689","latestCheckedAt":"2026-08-25T12:04:04.573Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"fengs2021/dsh-feishu-bridge","order":494,"name":"dsh-feishu-bridge","owner":"fengs2021","repo":"fengs2021/dsh-feishu-bridge","url":"https://github.com/fengs2021/dsh-feishu-bridge","category":"session","description":{"zh":"DSH 飞书机器人桥接插件：飞书消息进 DSH 会话，流式交互卡片实时回复（思维链/正文/工具链分区，打字机效果）","en":"DSH 飞书机器人桥接插件：飞书消息进 DSH 会话，流式交互卡片实时回复（思维链/正文/工具链分区，打字机效果）"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T16:29:28Z","updatedAt":"2026-08-15T13:40:35Z","createdAt":"2026-08-15T04:52:40Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-feishu-bridge","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e5b96b4f114a7d5aaa37f8f9cfda398d4f6b79a9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T12:00:39.154Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T12:00:39.154Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现本地文件写入能力"]},"passport":{"evidenceId":"fengs2021/dsh-feishu-bridge@e5b96b4f114a7d5aaa37f8f9cfda398d4f6b79a9#scan-2","versionCount":1,"latestCommit":"e5b96b4f114a7d5aaa37f8f9cfda398d4f6b79a9","latestCheckedAt":"2026-08-29T12:00:39.154Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"hongming-huang/dsh-file-upload","order":495,"name":"dsh-file-upload","owner":"HongMing-Huang","repo":"HongMing-Huang/dsh-file-upload","url":"https://github.com/HongMing-Huang/dsh-file-upload","category":"workflow","description":{"zh":"DeepSeek Harness (dsh) file-message plugin: Claude-style drag-and-drop / paperclip upload, content sniffing, document-to-Markdown via Microsoft MarkItDown (with built-in JS fallback), text inlining, read_document tool for agents.","en":"DeepSeek Harness (dsh) file-message plugin: Claude-style drag-and-drop / paperclip upload, content sniffing, document-to-Markdown via Microsoft MarkItDown (with built-in JS fallback), text inlining, read_document tool for agents."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T08:29:20Z","updatedAt":"2026-08-15T08:29:25Z","createdAt":"2026-08-15T08:29:16Z","license":"MIT","language":null,"homepage":"https://github.com/HongMing-Huang/dsh-file-upload#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-file-upload","version":"0.5.2","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ce4ca943da592be36a784a5648d36a600aeda136","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:36.087Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:36.087Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"hongming-huang/dsh-file-upload@ce4ca943da592be36a784a5648d36a600aeda136#scan-2","versionCount":1,"latestCommit":"ce4ca943da592be36a784a5648d36a600aeda136","latestCheckedAt":"2026-08-23T12:00:36.087Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"alex04130/dsh-forge","order":496,"name":"dsh-forge","owner":"alex04130","repo":"alex04130/dsh-forge","url":"https://github.com/alex04130/dsh-forge","category":"ui","description":{"zh":"DeepSeek Harness 扩展套件：运行时注入器、子代理派发与模型路由策略、插件市场/技能/插件管理面板、浏览器桥与 MCP 集成。","en":"DeepSeek Harness 扩展套件：运行时注入器、子代理派发与模型路由策略、插件市场/技能/插件管理面板、浏览器桥与 MCP 集成。"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T21:57:41Z","updatedAt":"2026-08-15T21:58:02Z","createdAt":"2026-08-15T08:19:58Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-forge","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["bundle/cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"3f50f6640efc96df6ac3fbc72040b69856a5bafd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:16.659Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:16.659Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","bundle/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"alex04130/dsh-forge@3f50f6640efc96df6ac3fbc72040b69856a5bafd#scan-2","versionCount":1,"latestCommit":"3f50f6640efc96df6ac3fbc72040b69856a5bafd","latestCheckedAt":"2026-08-26T00:00:16.659Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"fuzzysoul/dsh-free-vision","order":497,"name":"dsh-free-vision","owner":"FuzzySoul","repo":"FuzzySoul/dsh-free-vision","url":"https://github.com/FuzzySoul/dsh-free-vision","category":"dev","description":{"zh":"Vision bridge plugin for DeepSeek Harness (dsh): image understanding for text-only models via luma-mcp, free Qwen3-VL-Flash by default.","en":"Vision bridge plugin for DeepSeek Harness (dsh): image understanding for text-only models via luma-mcp, free Qwen3-VL-Flash by default."},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T10:29:35Z","updatedAt":"2026-08-15T10:29:42Z","createdAt":"2026-08-15T08:31:48Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-free-vision","version":"1.0.8","lifecycleScripts":["postinstall"],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","dsh/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9daa0dc4b42920c129bec5988765a585a0523843","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:01:01.574Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:01:01.574Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh/index.js","client/client.js","cordis.patch.yml"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","dsh/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：postinstall","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"fuzzysoul/dsh-free-vision@9daa0dc4b42920c129bec5988765a585a0523843#scan-2","versionCount":1,"latestCommit":"9daa0dc4b42920c129bec5988765a585a0523843","latestCheckedAt":"2026-08-30T12:01:01.574Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"orangeofcarl0-sys/dsh-fresh-start","order":498,"name":"dsh-fresh-start","owner":"orangeofcarl0-sys","repo":"orangeofcarl0-sys/dsh-fresh-start","url":"https://github.com/orangeofcarl0-sys/dsh-fresh-start","category":"session","description":{"zh":"DSH /fresh command: summarize conversation, start new session, archive old one","en":"DSH /fresh command: summarize conversation, start new session, archive old one"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T22:58:38Z","updatedAt":"2026-08-15T22:58:33Z","createdAt":"2026-08-15T19:53:54Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-fresh-start","version":"1.2.10","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"225a2fd9a86602f68589eb42f410e09fa5420246","installCommand":"dsh plugin --profile web add github:orangeofcarl0-sys/dsh-fresh-start#225a2fd9a86602f68589eb42f410e09fa5420246","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:03:57.405Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-25T12:03:57.405Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"orangeofcarl0-sys/dsh-fresh-start@225a2fd9a86602f68589eb42f410e09fa5420246#scan-2","versionCount":1,"latestCommit":"225a2fd9a86602f68589eb42f410e09fa5420246","latestCheckedAt":"2026-08-25T12:03:57.405Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"wloops/dsh-git-worktree","order":499,"name":"dsh-git-worktree","owner":"wloops","repo":"wloops/dsh-git-worktree","url":"https://github.com/wloops/dsh-git-worktree","category":"tools","description":{"zh":"Domi-grade git worktree isolation and delivery for DeepSeek Harness: permanent worktrees, ready-for-review / apply / finish / discard lifecycle, conflict handling, safe cleanup","en":"Domi-grade git worktree isolation and delivery for DeepSeek Harness: permanent worktrees, ready-for-review / apply / finish / discard lifecycle, conflict handling, safe cleanup"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T09:29:31Z","updatedAt":"2026-08-15T09:29:35Z","createdAt":"2026-08-15T07:14:05Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-git-worktree","version":"0.7.1","lifecycleScripts":["prepare"],"runtimeDependencies":11,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0fc9e5a797034a953b683e9ad01fceddea49fad6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:01:04.917Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:01:04.917Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"wloops/dsh-git-worktree@0fc9e5a797034a953b683e9ad01fceddea49fad6#scan-2","versionCount":1,"latestCommit":"0fc9e5a797034a953b683e9ad01fceddea49fad6","latestCheckedAt":"2026-08-30T12:01:04.917Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zoahdev/dsh-github-release-radar","order":500,"name":"dsh-github-release-radar","owner":"zoahdev","repo":"zoahdev/dsh-github-release-radar","url":"https://github.com/zoahdev/dsh-github-release-radar","category":"workflow","description":{"zh":"GitHub Release Radar plugin for DeepSeek Harness: releases, repo stats, and repository search tools for dsh agents (no API key needed).","en":"GitHub Release Radar plugin for DeepSeek Harness: releases, repo stats, and repository search tools for dsh agents (no API key needed)."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T01:29:47Z","updatedAt":"2026-08-15T01:29:53Z","createdAt":"2026-08-15T01:09:07Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-github-release-radar","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ea998b22171b697185853e3ce04dbbe772527aed","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T12:01:05.349Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T12:01:05.349Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"zoahdev/dsh-github-release-radar@ea998b22171b697185853e3ce04dbbe772527aed#scan-2","versionCount":1,"latestCommit":"ea998b22171b697185853e3ce04dbbe772527aed","latestCheckedAt":"2026-09-01T12:01:05.349Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"a771853580/dsh-hindsight-plugins","order":501,"name":"dsh-hindsight-plugins","owner":"a771853580","repo":"a771853580/dsh-hindsight-plugins","url":"https://github.com/a771853580/dsh-hindsight-plugins","category":"tools","description":{"zh":"dsh-hindsight-plugins","en":"dsh-hindsight-plugins"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T14:29:46Z","updatedAt":"2026-08-15T14:30:04Z","createdAt":"2026-08-15T12:01:06Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-hindsight-plugins","version":"0.4.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e7dec462a7d21dd638b7837f1542b6d25dfbd83d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:28.610Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T00:00:28.610Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"a771853580/dsh-hindsight-plugins@e7dec462a7d21dd638b7837f1542b6d25dfbd83d#scan-2","versionCount":1,"latestCommit":"e7dec462a7d21dd638b7837f1542b6d25dfbd83d","latestCheckedAt":"2026-08-30T00:00:28.610Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"junelearn/dsh-image2-draw","order":502,"name":"dsh-image2-draw","owner":"JuneLearn","repo":"JuneLearn/dsh-image2-draw","url":"https://github.com/JuneLearn/dsh-image2-draw","category":"tools","description":{"zh":"DeepSeek Harness Image2 生图插件，通过第三方 OpenAI Images 兼容接口调用 gpt-image-2，只需配置 baseURL 和 API Key。 | Image2 generation plugin for DeepSeek Harness via third-party OpenAI Images-compatible APIs.","en":"DeepSeek Harness Image2 生图插件，通过第三方 OpenAI Images 兼容接口调用 gpt-image-2，只需配置 baseURL 和 API Key。 | Image2 generation plugin for DeepSeek Harness via third-party OpenAI Images-compatible APIs."},"added":"2026-08-15","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":0,"watchers":4,"pushedAt":"2026-08-15T05:29:40Z","updatedAt":"2026-08-15T05:29:45Z","createdAt":"2026-08-14T19:36:58Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-image2-draw","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4cc5189d38882bc6e4f0ea2b8a6a74f78cb3d52c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T05:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T05:30:12.141Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"hongyue0721/dsh-kimicode-swarm","order":503,"name":"dsh-kimicode-swarm","owner":"hongyue0721","repo":"hongyue0721/dsh-kimicode-swarm","url":"https://github.com/hongyue0721/dsh-kimicode-swarm","category":"workflow","description":{"zh":"DeepSeek Harness 批量并行子 Agent 调度插件：swarm_batch 工具（Kimi Code Swarm 模式移植）+ /swarm 命令 + 聊天内实时进度条","en":"DeepSeek Harness 批量并行子 Agent 调度插件：swarm_batch 工具（Kimi Code Swarm 模式移植）+ /swarm 命令 + 聊天内实时进度条"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T14:59:22Z","updatedAt":"2026-08-15T14:59:28Z","createdAt":"2026-08-15T12:58:51Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-kimicode-swarm","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"311d6f42a26070501c87a70eebf628391ce7604c","installCommand":"dsh plugin --profile web add github:hongyue0721/dsh-kimicode-swarm#311d6f42a26070501c87a70eebf628391ce7604c","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T12:00:40.410Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-29T12:00:40.410Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"hongyue0721/dsh-kimicode-swarm@311d6f42a26070501c87a70eebf628391ce7604c#scan-2","versionCount":1,"latestCommit":"311d6f42a26070501c87a70eebf628391ce7604c","latestCheckedAt":"2026-08-29T12:00:40.410Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"amlyczz/dsh-lark-link","order":504,"name":"dsh-lark-link","owner":"amlyczz","repo":"amlyczz/dsh-lark-link","url":"https://github.com/amlyczz/dsh-lark-link","category":"session","description":{"zh":"High-reliability Feishu/Lark bridge for DeepSeek Harness — QR one-click auth, multi-mode agents, card-based commands, zero-loss outbox, media in/out, session-log doctor, reusable DSH Web GUI","en":"High-reliability Feishu/Lark bridge for DeepSeek Harness — QR one-click auth, multi-mode agents, card-based commands, zero-loss outbox, media in/out, session-log doctor, reusable DSH Web GUI"},"added":"2026-08-15","curated":false,"topic":true,"stars":11,"forks":4,"openIssues":0,"watchers":11,"pushedAt":"2026-08-15T21:59:34Z","updatedAt":"2026-08-15T21:59:10Z","createdAt":"2026-08-13T19:28:01Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-lark-link","version":"0.5.2","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","dist/index.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ea3e6082dc890e8fee352977531f0958a07bb1a0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:04:05.161Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:04:05.161Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"amlyczz/dsh-lark-link@ea3e6082dc890e8fee352977531f0958a07bb1a0#scan-2","versionCount":1,"latestCommit":"ea3e6082dc890e8fee352977531f0958a07bb1a0","latestCheckedAt":"2026-08-25T12:04:05.161Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"akqwpeter-prog/dsh-media-skills","order":505,"name":"dsh-media-skills","owner":"akqwpeter-prog","repo":"akqwpeter-prog/dsh-media-skills","url":"https://github.com/akqwpeter-prog/dsh-media-skills","category":"session","description":{"zh":"Free vision & image generation for DeepSeek Harness — paste an image into any chat, even text-only sessions. GLM-4V-Flash + Gemini failover, ModLens-style evidence, Kolors generation. 免费读图·生图 · 无 Key 入库","en":"Free vision & image generation for DeepSeek Harness — paste an image into any chat, even text-only sessions. GLM-4V-Flash + Gemini failover, ModLens-style evidence, Kolors generation. 免费读图·生图 · 无 Key 入库"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T08:29:56Z","updatedAt":"2026-08-15T08:23:20Z","createdAt":"2026-08-14T01:57:40Z","license":"MIT","language":"Python","homepage":"https://github.com/akqwpeter-prog/dsh-media-skills","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-media-skills","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"60f58ead184830949599e0290a232060241986a6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:36.809Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:36.809Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"akqwpeter-prog/dsh-media-skills@60f58ead184830949599e0290a232060241986a6#scan-2","versionCount":1,"latestCommit":"60f58ead184830949599e0290a232060241986a6","latestCheckedAt":"2026-08-23T12:00:36.809Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"crwsr124/dsh-memflow","order":506,"name":"dsh-memflow","owner":"crwsr124","repo":"crwsr124/dsh-memflow","url":"https://github.com/crwsr124/dsh-memflow","category":"session","description":{"zh":"DeepSeek Harness 记忆框架插件。MEMFLOW 记忆流模式：会话会结束，记忆不会——感知先行、边做边记、无缝续接。分布式记忆架构，每个项目都有自己的记忆，一个插件让你的所有工作流实现类Hermes效果。","en":"DeepSeek Harness 记忆框架插件。MEMFLOW 记忆流模式：会话会结束，记忆不会——感知先行、边做边记、无缝续接。分布式记忆架构，每个项目都有自己的记忆，一个插件让你的所有工作流实现类Hermes效果。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T10:29:29Z","updatedAt":"2026-08-15T10:29:44Z","createdAt":"2026-08-15T09:48:01Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-memflow","version":"0.2.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ec892c5765ea76acdc81901fe26d813b3c3670e5","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:27.707Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-30T12:00:27.707Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"passport":{"evidenceId":"crwsr124/dsh-memflow@ec892c5765ea76acdc81901fe26d813b3c3670e5#scan-2","versionCount":1,"latestCommit":"ec892c5765ea76acdc81901fe26d813b3c3670e5","latestCheckedAt":"2026-08-30T12:00:27.707Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"johnnycls/dsh-minimal-mode","order":507,"name":"dsh-minimal-mode","owner":"johnnycls","repo":"johnnycls/dsh-minimal-mode","url":"https://github.com/johnnycls/dsh-minimal-mode","category":"tools","description":{"zh":"DeepSeek Harness 極簡模式 — 安裝後開箱即用，幫你做出最好的設置（Minimal Mode for DeepSeek Harness: out-of-the-box, best setup automatically）","en":"DeepSeek Harness 極簡模式 — 安裝後開箱即用，幫你做出最好的設置（Minimal Mode for DeepSeek Harness: out-of-the-box, best setup automatically）"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T03:29:35Z","updatedAt":"2026-08-15T03:29:39Z","createdAt":"2026-08-15T02:21:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-no-setup-mode","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"555f2e6ed266ca5590cc693c0067142322119d4a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:29.347Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T00:00:29.347Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"johnnycls/dsh-minimal-mode@555f2e6ed266ca5590cc693c0067142322119d4a#scan-2","versionCount":1,"latestCommit":"555f2e6ed266ca5590cc693c0067142322119d4a","latestCheckedAt":"2026-09-01T00:00:29.347Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"highland0971/dsh-native-memory","order":508,"name":"dsh-native-memory","owner":"highland0971","repo":"highland0971/dsh-native-memory","url":"https://github.com/highland0971/dsh-native-memory","category":"session","description":{"zh":"Native, per-workspace long-term memory for DeepSeek Harness: approval-gated writes, cited provenance, FTS cross-session recall — no external server, no extra runtime dependency.","en":"Native, per-workspace long-term memory for DeepSeek Harness: approval-gated writes, cited provenance, FTS cross-session recall — no external server, no extra runtime dependency."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":2,"watchers":0,"pushedAt":"2026-08-15T13:59:34Z","updatedAt":"2026-08-15T13:59:43Z","createdAt":"2026-08-15T05:52:15Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/dsh-native-memory","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-native-memory","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9acd2ca676fc58a8c8d7a17e59f2d39fcb4c9b58","installCommand":"dsh plugin --profile web add github:highland0971/dsh-native-memory#9acd2ca676fc58a8c8d7a17e59f2d39fcb4c9b58","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T00:00:29.895Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-30T00:00:29.895Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"highland0971/dsh-native-memory@9acd2ca676fc58a8c8d7a17e59f2d39fcb4c9b58#scan-2","versionCount":1,"latestCommit":"9acd2ca676fc58a8c8d7a17e59f2d39fcb4c9b58","latestCheckedAt":"2026-08-30T00:00:29.895Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"zhengjy01/dsh-notify","order":509,"name":"dsh-notify","owner":"zhengjy01","repo":"zhengjy01/dsh-notify","url":"https://github.com/zhengjy01/dsh-notify","category":"workflow","description":{"zh":"System-level desktop notifications for DeepSeek Harness: turn-completion / workflow-end banners and a modal approval alert (macOS osascript, Linux notify-send)","en":"System-level desktop notifications for DeepSeek Harness: turn-completion / workflow-end banners and a modal approval alert (macOS osascript, Linux notify-send)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T02:29:25Z","updatedAt":"2026-08-15T02:29:29Z","createdAt":"2026-08-15T02:24:32Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-notify","version":"0.5.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5e3c4af95ecf8f85630df8a39fb31fa100f1b689","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:30.520Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T00:00:30.520Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用"]},"passport":{"evidenceId":"zhengjy01/dsh-notify@5e3c4af95ecf8f85630df8a39fb31fa100f1b689#scan-2","versionCount":1,"latestCommit":"5e3c4af95ecf8f85630df8a39fb31fa100f1b689","latestCheckedAt":"2026-09-01T00:00:30.520Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"ok-wx/dsh-ocgo-lite","order":510,"name":"dsh-ocgo-lite","owner":"OK-wx","repo":"OK-wx/dsh-ocgo-lite","url":"https://github.com/OK-wx/dsh-ocgo-lite","category":"session","description":{"zh":"OpenCode Go 用量常驻条：套餐余量圆环 + token/花费实时统计（本次会话/全部范围 + 按模型联动，官方实时定价），一键复制 API Key。OpenCode Go usage bar for DeepSeek Harness.","en":"OpenCode Go 用量常驻条：套餐余量圆环 + token/花费实时统计（本次会话/全部范围 + 按模型联动，官方实时定价），一键复制 API Key。OpenCode Go usage bar for DeepSeek Harness."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T22:28:50Z","updatedAt":"2026-08-15T22:29:01Z","createdAt":"2026-08-15T19:43:32Z","license":null,"language":"JavaScript","homepage":"https://github.com/OK-wx/dsh-ocgo-lite","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ocgo-lite","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"96314bcd7966c88b6907fe5797719793a9b014e9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:04:04.148Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:04:04.148Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"ok-wx/dsh-ocgo-lite@96314bcd7966c88b6907fe5797719793a9b014e9#scan-2","versionCount":1,"latestCommit":"96314bcd7966c88b6907fe5797719793a9b014e9","latestCheckedAt":"2026-08-25T12:04:04.148Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"yuyi2439/dsh-onebot","order":511,"name":"dsh-onebot","owner":"yuyi2439","repo":"yuyi2439/dsh-onebot","url":"https://github.com/yuyi2439/dsh-onebot","category":"tools","description":{"zh":"dsh-onebot","en":"dsh-onebot"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T07:29:59Z","updatedAt":"2026-08-15T07:29:18Z","createdAt":"2026-08-15T05:14:45Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-1bot","version":"0.0.2-rc.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"783d132914b53913216849efbf9480abd5965771","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:46.493Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:46.493Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml","src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"yuyi2439/dsh-onebot@783d132914b53913216849efbf9480abd5965771#scan-2","versionCount":1,"latestCommit":"783d132914b53913216849efbf9480abd5965771","latestCheckedAt":"2026-08-23T12:00:46.493Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"eivmosn/dsh-pets","order":512,"name":"dsh-pets","owner":"eivmosn","repo":"eivmosn/dsh-pets","url":"https://github.com/eivmosn/dsh-pets","category":"fun","description":{"zh":"Codex Pets integration for the DeepSeek Harness Web GUI","en":"Codex Pets integration for the DeepSeek Harness Web GUI"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T16:59:52Z","updatedAt":"2026-08-15T17:00:03Z","createdAt":"2026-08-15T16:37:55Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-pets","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4ddbb19dd8ce119fc8ef7351e4e43f90079b32ae","installCommand":"dsh plugin --profile web add github:eivmosn/dsh-pets#4ddbb19dd8ce119fc8ef7351e4e43f90079b32ae","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:26.490Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-28T00:00:26.490Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"eivmosn/dsh-pets@4ddbb19dd8ce119fc8ef7351e4e43f90079b32ae#scan-2","versionCount":1,"latestCommit":"4ddbb19dd8ce119fc8ef7351e4e43f90079b32ae","latestCheckedAt":"2026-08-28T00:00:26.490Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"chocolzs/dsh-plugin-chat-menu","order":513,"name":"dsh-plugin-chat-menu","owner":"ChocoLZS","repo":"ChocoLZS/dsh-plugin-chat-menu","url":"https://github.com/ChocoLZS/dsh-plugin-chat-menu","category":"tools","description":{"zh":"dsh-plugin-chat-menu","en":"dsh-plugin-chat-menu"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T06:29:47Z","updatedAt":"2026-08-15T06:29:55Z","createdAt":"2026-08-15T03:48:48Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-chat-menu","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"dd188bc1e1e060feffbf561a2ac2b02b3dc653c9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T06:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T06:30:13.368Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]}},{"id":"kkkkkklze/dsh-plugin-manager","order":514,"name":"dsh-plugin-manager","owner":"kkkkkklze","repo":"kkkkkklze/dsh-plugin-manager","url":"https://github.com/kkkkkklze/dsh-plugin-manager","category":"session","description":{"zh":"In-web plugin manager for DeepSeek Harness: categorized list, tags, one-click preset switching, plugin marketplace, import/export, DeepSeek balance. | 在网页里管理 dsh 插件:分类/标签/预设一键切换/插件市场/导入导出/余额。","en":"In-web plugin manager for DeepSeek Harness: categorized list, tags, one-click preset switching, plugin marketplace, import/export, DeepSeek balance. | 在网页里管理 dsh 插件:分类/标签/预设一键切换/插件市场/导入导出/余额。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T20:28:55Z","updatedAt":"2026-08-15T20:28:59Z","createdAt":"2026-08-15T18:12:14Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-manager","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","index.js","client-bundle.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ab17c3b5f972c4f4ebb1a6c64026338ddf080c20","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-27T00:00:17.351Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-27T00:00:17.351Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client-bundle.js"]}],"filesInspected":["package.json","index.js","client-bundle.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"kkkkkklze/dsh-plugin-manager@ab17c3b5f972c4f4ebb1a6c64026338ddf080c20#scan-2","versionCount":1,"latestCommit":"ab17c3b5f972c4f4ebb1a6c64026338ddf080c20","latestCheckedAt":"2026-08-27T00:00:17.351Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"sstar16/dsh-plugin-market","order":515,"name":"dsh-plugin-market","owner":"sstar16","repo":"sstar16/dsh-plugin-market","url":"https://github.com/sstar16/dsh-plugin-market","category":"tools","description":{"zh":"DSH Web插件市场（plugins market)","en":"DSH Web插件市场（plugins market)"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T19:58:59Z","updatedAt":"2026-08-15T19:59:11Z","createdAt":"2026-08-15T18:17:14Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","plugin","client"],"packageName":"dsh-plugin-market","version":"0.3.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"555050084e97435a5d5ffde736edfab4887d3854","installCommand":"dsh plugin --profile web add github:sstar16/dsh-plugin-market#555050084e97435a5d5ffde736edfab4887d3854","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-27T00:00:17.235Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-27T00:00:17.235Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"sstar16/dsh-plugin-market@555050084e97435a5d5ffde736edfab4887d3854#scan-2","versionCount":1,"latestCommit":"555050084e97435a5d5ffde736edfab4887d3854","latestCheckedAt":"2026-08-27T00:00:17.235Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"sherunlocked-4869/dsh-plugin-msg-nav","order":516,"name":"dsh-plugin-msg-nav","owner":"SherUnlocked-4869","repo":"SherUnlocked-4869/dsh-plugin-msg-nav","url":"https://github.com/SherUnlocked-4869/dsh-plugin-msg-nav","category":"tools","description":{"zh":"dsh-plugin-msg-nav","en":"dsh-plugin-msg-nav"},"added":"2026-08-15","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":0,"watchers":4,"pushedAt":"2026-08-16T09:30:55Z","updatedAt":"2026-08-16T05:19:08Z","createdAt":"2026-08-14T15:30:18Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-plugin-msg-nav","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"46a0525ea997d491b7d17d06b5bbd41c68a31521","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-16T09:31:07.202Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T09:31:07.202Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"sherunlocked-4869/dsh-plugin-msg-nav@46a0525ea997d491b7d17d06b5bbd41c68a31521#scan-2","versionCount":1,"latestCommit":"46a0525ea997d491b7d17d06b5bbd41c68a31521","latestCheckedAt":"2026-08-16T09:31:07.202Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"huntersxy/dsh-plugin-toggle","order":517,"name":"dsh-plugin-toggle","owner":"huntersxy","repo":"huntersxy/dsh-plugin-toggle","url":"https://github.com/huntersxy/dsh-plugin-toggle","category":"tools","description":{"zh":"DSH 第三方插件开关 | Settings-page toggle for third-party DSH plugins. Install: dsh plugin --profile web add dsh-plugin-toggle","en":"DSH 第三方插件开关 | Settings-page toggle for third-party DSH plugins. Install: dsh plugin --profile web add dsh-plugin-toggle"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T15:59:25Z","updatedAt":"2026-08-15T15:59:30Z","createdAt":"2026-08-15T08:23:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-toggle","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e11d57cedaf2dfd2a126106f8df86dec9fecf0ea","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T12:00:29.273Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T12:00:29.273Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"huntersxy/dsh-plugin-toggle@e11d57cedaf2dfd2a126106f8df86dec9fecf0ea#scan-2","versionCount":1,"latestCommit":"e11d57cedaf2dfd2a126106f8df86dec9fecf0ea","latestCheckedAt":"2026-08-28T12:00:29.273Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tdf1995/dsh-plugin-vision","order":518,"name":"dsh-plugin-vision","owner":"tdf1995","repo":"tdf1995/dsh-plugin-vision","url":"https://github.com/tdf1995/dsh-plugin-vision","category":"tools","description":{"zh":"Vision for text-only LLMs in DeepSeek Harness (DSH): describe images / OCR / VQA via free Gemini & GLM vision APIs","en":"Vision for text-only LLMs in DeepSeek Harness (DSH): describe images / OCR / VQA via free Gemini & GLM vision APIs"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T01:59:45Z","updatedAt":"2026-08-15T01:59:50Z","createdAt":"2026-08-14T07:07:12Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/tdf1995/dsh-plugin-vision#readme","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-vision","version":"0.2.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"629c05a4cb8dfdc0d17aa021404bd13cf0285159","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T02:00:07.017Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T02:00:10.937Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"pythonshiyi/dsh-plugin-whalefeed","order":519,"name":"dsh-plugin-whalefeed","owner":"pythonshiyi","repo":"pythonshiyi/dsh-plugin-whalefeed","url":"https://github.com/pythonshiyi/dsh-plugin-whalefeed","category":"fun","description":{"zh":"DeepSeek Harness whale girl token feeding desktop pet plugin","en":"DeepSeek Harness whale girl token feeding desktop pet plugin"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T03:29:44Z","updatedAt":"2026-08-15T03:30:00Z","createdAt":"2026-08-15T03:29:22Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/pythonshiyi/dsh-plugin-whalefeed","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-plugin-whalefeed","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6ad6601f100fe080df9c53892b8778e7044c27db","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-09-01T00:00:29.040Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-01T00:00:29.040Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现主动网络请求能力"]},"passport":{"evidenceId":"pythonshiyi/dsh-plugin-whalefeed@6ad6601f100fe080df9c53892b8778e7044c27db#scan-2","versionCount":1,"latestCommit":"6ad6601f100fe080df9c53892b8778e7044c27db","latestCheckedAt":"2026-09-01T00:00:29.040Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"shaobeichen/dsh-pocket","order":520,"name":"dsh-pocket","owner":"shaobeichen","repo":"shaobeichen/dsh-pocket","url":"https://github.com/shaobeichen/dsh-pocket","category":"tools","description":{"zh":"把 DeepSeek Harness 装进你的口袋：电脑上跑 dsh web，手机扫码即同步访问（局域网 + 公网，实时同屏）","en":"把 DeepSeek Harness 装进你的口袋：电脑上跑 dsh web，手机扫码即同步访问（局域网 + 公网，实时同屏）"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T16:29:34Z","updatedAt":"2026-08-15T16:29:45Z","createdAt":"2026-08-15T09:36:29Z","license":"GPL-2.0","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-pocket","version":"1.14.5","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"13e52db3ece072a17ee76fcd5125cebd66c809eb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:27.838Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:27.838Z","findings":[{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","client/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现 Shell 或子进程调用","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"shaobeichen/dsh-pocket@13e52db3ece072a17ee76fcd5125cebd66c809eb#scan-2","versionCount":1,"latestCommit":"13e52db3ece072a17ee76fcd5125cebd66c809eb","latestCheckedAt":"2026-08-28T00:00:27.838Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"cynch18/plugin-switch","order":521,"name":"dsh-profile-plugin-switch","owner":"cynch18","repo":"cynch18/plugin-switch","url":"https://github.com/cynch18/plugin-switch","category":"tools","description":{"zh":"DSH web plugin: toggle plugins on/off from the GUI without restarting the server","en":"DSH web plugin: toggle plugins on/off from the GUI without restarting the server"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T06:29:52Z","updatedAt":"2026-08-15T06:29:58Z","createdAt":"2026-08-14T17:13:30Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-profile-plugin-switch","version":"0.5.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8a0df71f0eacd410f70d3dc7166450b84998b2e8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:50.894Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:50.894Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"cynch18/plugin-switch@8a0df71f0eacd410f70d3dc7166450b84998b2e8#scan-2","versionCount":1,"latestCommit":"8a0df71f0eacd410f70d3dc7166450b84998b2e8","latestCheckedAt":"2026-08-23T12:00:50.894Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"a1swg1159-pixel/dsh-prompt-shield","order":522,"name":"dsh-prompt-shield","owner":"a1swg1159-pixel","repo":"a1swg1159-pixel/dsh-prompt-shield","url":"https://github.com/a1swg1159-pixel/dsh-prompt-shield","category":"tools","description":{"zh":"dsh-prompt-shield","en":"dsh-prompt-shield"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T09:28:53Z","updatedAt":"2026-08-15T09:29:17Z","createdAt":"2026-08-15T09:19:49Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-prompt-shield","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f85b9190b12c40c870b937a53a4dae3af6883b4a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-31T00:00:32.728Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-31T00:00:32.728Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"a1swg1159-pixel/dsh-prompt-shield@f85b9190b12c40c870b937a53a4dae3af6883b4a#scan-2","versionCount":1,"latestCommit":"f85b9190b12c40c870b937a53a4dae3af6883b4a","latestCheckedAt":"2026-08-31T00:00:32.728Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"zfu691531-hash/dsh-realtime-voice","order":523,"name":"dsh-realtime-voice","owner":"zfu691531-hash","repo":"zfu691531-hash/dsh-realtime-voice","url":"https://github.com/zfu691531-hash/dsh-realtime-voice","category":"tools","description":{"zh":"Lightweight realtime ASR → DeepSeek Harness → TTS community plugin.","en":"Lightweight realtime ASR → DeepSeek Harness → TTS community plugin."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T15:29:57Z","updatedAt":"2026-08-15T15:15:25Z","createdAt":"2026-08-15T15:11:27Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-realtime-voice","version":"0.12.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"91aae229357e647964bbf2e50ec7602c4ce55d4a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T00:00:19.063Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:19.063Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"zfu691531-hash/dsh-realtime-voice@91aae229357e647964bbf2e50ec7602c4ce55d4a#scan-2","versionCount":1,"latestCommit":"91aae229357e647964bbf2e50ec7602c4ce55d4a","latestCheckedAt":"2026-08-29T00:00:19.063Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"nanami-0713/dsh-remote-public","order":524,"name":"dsh-remote","owner":"nanami-0713","repo":"nanami-0713/dsh-remote-public","url":"https://github.com/nanami-0713/dsh-remote-public","category":"tools","description":{"zh":"DSH-Remote 公开脱敏镜像：基于 DeepSeek Harness 的手机远程控制客户端","en":"DSH-Remote 公开脱敏镜像：基于 DeepSeek Harness 的手机远程控制客户端"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T20:29:34Z","updatedAt":"2026-08-15T20:23:28Z","createdAt":"2026-08-15T17:33:22Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-remote","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"41ae6c156b733d3fd92ae3c57df01954e22251c1","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:27.545Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:27.545Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js","client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["index.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现网络监听能力，需确认监听地址与认证"]},"passport":{"evidenceId":"nanami-0713/dsh-remote-public@41ae6c156b733d3fd92ae3c57df01954e22251c1#scan-2","versionCount":1,"latestCommit":"41ae6c156b733d3fd92ae3c57df01954e22251c1","latestCheckedAt":"2026-08-26T00:00:27.545Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"harryopo/dsh-remote-ide","order":525,"name":"dsh-remote-ide","owner":"harryopo","repo":"harryopo/dsh-remote-ide","url":"https://github.com/harryopo/dsh-remote-ide","category":"tools","description":{"zh":"SSH Remote IDE for DeepSeek Harness: connect via SSH and the IDE goes remote — explorer browses the server, editor reads/writes over SFTP, terminal is a live SSH PTY. Dual-face DSH plugin.","en":"SSH Remote IDE for DeepSeek Harness: connect via SSH and the IDE goes remote — explorer browses the server, editor reads/writes over SFTP, terminal is a live SSH PTY. Dual-face DSH plugin."},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T08:29:16Z","updatedAt":"2026-08-15T08:29:23Z","createdAt":"2026-08-14T14:09:46Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-remote-ide","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"053ff719311c8d36a744c5abdd852da5d53f9d57","installCommand":"dsh plugin --profile web add github:harryopo/dsh-remote-ide#053ff719311c8d36a744c5abdd852da5d53f9d57","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:38.025Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-23T12:00:38.025Z","findings":[],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"harryopo/dsh-remote-ide@053ff719311c8d36a744c5abdd852da5d53f9d57#scan-2","versionCount":1,"latestCommit":"053ff719311c8d36a744c5abdd852da5d53f9d57","latestCheckedAt":"2026-08-23T12:00:38.025Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"royougishiki/dsh-restart-systemd","order":526,"name":"dsh-restart-systemd","owner":"RoyougiShiki","repo":"RoyougiShiki/dsh-restart-systemd","url":"https://github.com/RoyougiShiki/dsh-restart-systemd","category":"ui","description":{"zh":"DSH WebUI 重启按钮（systemd 版）：侧栏一键重启 dsh-web，WSL/Linux systemd 通道 + Windows 分支，/restart 命令，会话自动续接","en":"DSH WebUI 重启按钮（systemd 版）：侧栏一键重启 dsh-web，WSL/Linux systemd 通道 + Windows 分支，/restart 命令，会话自动续接"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T06:29:22Z","updatedAt":"2026-08-15T06:29:27Z","createdAt":"2026-08-15T06:22:47Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-restart-systemd","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9ce909e57ccf1958f9c0f1bac0824ced4729e941","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T06:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T06:30:15.175Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]}},{"id":"madage/dsh-self-improved","order":527,"name":"dsh-self-improved","owner":"madage","repo":"madage/dsh-self-improved","url":"https://github.com/madage/dsh-self-improved","category":"session","description":{"zh":"DeepSeek Harness long-term memory & self-evolving plugin: L0 capture -> L1 memory extraction -> L2 scene grouping -> L3 user persona, auto recall injection + skill synthesis, fully local.","en":"DeepSeek Harness long-term memory & self-evolving plugin: L0 capture -> L1 memory extraction -> L2 scene grouping -> L3 user persona, auto recall injection + skill synthesis, fully local."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T20:59:44Z","updatedAt":"2026-08-15T21:00:05Z","createdAt":"2026-08-15T17:11:18Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/madage/dsh-self-improved","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-self-improved","version":"0.1.1","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4f134c9a93dbaccedbeee339fe8cc942d1740cca","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:26.140Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:26.140Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["client.js"]}],"filesInspected":["package.json","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"madage/dsh-self-improved@4f134c9a93dbaccedbeee339fe8cc942d1740cca#scan-2","versionCount":1,"latestCommit":"4f134c9a93dbaccedbeee339fe8cc942d1740cca","latestCheckedAt":"2026-08-26T00:00:26.140Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"vim0x3c/dsh-session-manager","order":528,"name":"dsh-session-manager","owner":"Vim0x3c","repo":"Vim0x3c/dsh-session-manager","url":"https://github.com/Vim0x3c/dsh-session-manager","category":"ui","description":{"zh":"DeepSeek Harness 会话管理设置面板：列出本机全部会话（运行中/空闲/已归档），支持继续会话、预览大纲、删除会话 | Session management settings section for dsh web: resume, outline, and delete any session","en":"DeepSeek Harness 会话管理设置面板：列出本机全部会话（运行中/空闲/已归档），支持继续会话、预览大纲、删除会话 | Session management settings section for dsh web: resume, outline, and delete any session"},"added":"2026-08-15","curated":false,"topic":true,"stars":5,"forks":1,"openIssues":0,"watchers":5,"pushedAt":"2026-08-15T20:29:59Z","updatedAt":"2026-08-15T20:27:08Z","createdAt":"2026-08-14T09:06:03Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-session-manager","version":"0.2.3","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cfdd5f7f95582963301d77fe59449cdd2898bbd1","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:27.124Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:27.124Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"vim0x3c/dsh-session-manager@cfdd5f7f95582963301d77fe59449cdd2898bbd1#scan-2","versionCount":1,"latestCommit":"cfdd5f7f95582963301d77fe59449cdd2898bbd1","latestCheckedAt":"2026-08-26T00:00:27.124Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"sparkmio/dsh-sfversion","order":529,"name":"dsh-sfversion","owner":"sparkmio","repo":"sparkmio/dsh-sfversion","url":"https://github.com/sparkmio/dsh-sfversion","category":"dev","description":{"zh":"SF视觉桥——给纯文本模型的 DeepSeek Harness 装上眼睛。","en":"SF视觉桥——给纯文本模型的 DeepSeek Harness 装上眼睛。"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T11:29:35Z","updatedAt":"2026-08-15T11:29:39Z","createdAt":"2026-08-14T14:49:05Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-sfversion","version":"1.2.0","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3df0036fdcf6df4b4e58e3b65469481bd826a581","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T11:30:06.907Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T11:30:11.038Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"freehul/sgme","order":530,"name":"dsh-sgme","owner":"freehul","repo":"freehul/sgme","url":"https://github.com/freehul/sgme","category":"session","description":{"zh":"你的 AI，从此记得你——拾光记忆引擎，它记得你们聊过的每一件事，还会主动关心你。","en":"你的 AI，从此记得你——拾光记忆引擎，它记得你们聊过的每一件事，还会主动关心你。"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":1,"watchers":2,"pushedAt":"2026-08-15T21:58:07Z","updatedAt":"2026-08-15T21:58:11Z","createdAt":"2026-08-11T07:10:05Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-sgme","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["adapters/dsh/sgme-bridge/cordis.patch.yml","adapters/dsh/sgme-bridge/lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"93bf748066f10ca24c05ef12579c4b837d92682d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T22:00:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T22:00:12.706Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["adapters/dsh/sgme-bridge/lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["adapters/dsh/sgme-bridge/lib/index.js","adapters/dsh/sgme-bridge/cordis.patch.yml"]}],"filesInspected":["package.json","adapters/dsh/sgme-bridge/lib/index.js","adapters/dsh/sgme-bridge/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"imkingjh999/dsh-shorts-wall","order":531,"name":"dsh-shorts-wall","owner":"imkingjh999","repo":"imkingjh999/dsh-shorts-wall","url":"https://github.com/imkingjh999/dsh-shorts-wall","category":"ui","description":{"zh":"DSH plugin: vertical shorts wall for dsh-better-sidebar — YouTube Shorts + Bilibili vertical, dual-source carousel with keyword packs","en":"DSH plugin: vertical shorts wall for dsh-better-sidebar — YouTube Shorts + Bilibili vertical, dual-source carousel with keyword packs"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T18:29:14Z","updatedAt":"2026-08-15T18:29:21Z","createdAt":"2026-08-15T17:16:02Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-shorts-wall","version":"1.4.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c9aad811fe7107ec35cc69f62bb98429df1889f0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:20.943Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:20.943Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"imkingjh999/dsh-shorts-wall@c9aad811fe7107ec35cc69f62bb98429df1889f0#scan-2","versionCount":1,"latestCommit":"c9aad811fe7107ec35cc69f62bb98429df1889f0","latestCheckedAt":"2026-08-28T00:00:20.943Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"weivwang/dsh-stack","order":532,"name":"dsh-stack","owner":"weivwang","repo":"weivwang/dsh-stack","url":"https://github.com/weivwang/dsh-stack","category":"tools","description":{"zh":"Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile.","en":"Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile."},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T13:29:41Z","updatedAt":"2026-08-15T13:29:46Z","createdAt":"2026-08-15T12:33:07Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/weivwang/dsh-stack","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-stack","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"234e393ce4a8238e9f024021f670704b35726abd","installCommand":"dsh plugin --profile web add github:weivwang/dsh-stack#234e393ce4a8238e9f024021f670704b35726abd","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-30T12:00:58.255Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-30T12:00:58.255Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"weivwang/dsh-stack@234e393ce4a8238e9f024021f670704b35726abd#scan-2","versionCount":1,"latestCommit":"234e393ce4a8238e9f024021f670704b35726abd","latestCheckedAt":"2026-08-30T12:00:58.255Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"cloader/dsh-taskboard","order":533,"name":"dsh-taskboard","owner":"cloader","repo":"cloader/dsh-taskboard","url":"https://github.com/cloader/dsh-taskboard","category":"workflow","description":{"zh":"deepseekharness 任务看板插件","en":"deepseekharness 任务看板插件"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T08:29:59Z","updatedAt":"2026-08-15T08:25:52Z","createdAt":"2026-08-15T06:57:10Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-taskboard","version":"0.5.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"dd4baa85a46747f0c78b76985bb5a38b914b080a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-31T00:00:33.929Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-31T00:00:33.929Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"cloader/dsh-taskboard@dd4baa85a46747f0c78b76985bb5a38b914b080a#scan-2","versionCount":1,"latestCommit":"dd4baa85a46747f0c78b76985bb5a38b914b080a","latestCheckedAt":"2026-08-31T00:00:33.929Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"xiaohj233/dsh-tavily-search-provider","order":534,"name":"dsh-tavily-search-provider","owner":"xiaohj233","repo":"xiaohj233/dsh-tavily-search-provider","url":"https://github.com/xiaohj233/dsh-tavily-search-provider","category":"ui","description":{"zh":"Tavily search provider for DeepSeek Harness with full search-control mapping, credential-backed key UI, and guarded rc.6 patches.","en":"Tavily search provider for DeepSeek Harness with full search-control mapping, credential-backed key UI, and guarded rc.6 patches."},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T08:00:01Z","updatedAt":"2026-08-15T08:00:05Z","createdAt":"2026-08-14T13:26:22Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-tavily-search-provider","version":"0.3.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"378addaf0f5d074574371da7f57553a1758a4711","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-23T12:00:39.809Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:39.809Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"xiaohj233/dsh-tavily-search-provider@378addaf0f5d074574371da7f57553a1758a4711#scan-2","versionCount":1,"latestCommit":"378addaf0f5d074574371da7f57553a1758a4711","latestCheckedAt":"2026-08-23T12:00:39.809Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tommy00748/dsh-theme-cyberpunk2077","order":535,"name":"dsh-theme-cyberpunk2077","owner":"Tommy00748","repo":"Tommy00748/dsh-theme-cyberpunk2077","url":"https://github.com/Tommy00748/dsh-theme-cyberpunk2077","category":"ui","description":{"zh":"Cyberpunk 2077 / Night City theme for the DeepSeek Harness Web UI — CRT scanlines, Kiroshi lock-on, typewriter SFX, Relic glitch & easter eggs","en":"Cyberpunk 2077 / Night City theme for the DeepSeek Harness Web UI — CRT scanlines, Kiroshi lock-on, typewriter SFX, Relic glitch & easter eggs"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T23:59:18Z","updatedAt":"2026-08-15T00:00:06Z","createdAt":"2026-08-14T23:59:13Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-theme-cyberpunk2077","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T00:00:45.424Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T00:00:50.797Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"screenedCommit":null},{"id":"brucelanlan/dsh-tier-router","order":536,"name":"dsh-tier-router","owner":"BruceLanLan","repo":"BruceLanLan/dsh-tier-router","url":"https://github.com/BruceLanLan/dsh-tier-router","category":"tools","description":{"zh":"dsh-tier-router","en":"dsh-tier-router"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T18:56:33Z","updatedAt":"2026-08-15T18:57:00Z","createdAt":"2026-08-15T01:33:08Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-tier-router","version":"0.5.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"54be7e6f778ae0865fe7b93409c2e7379231ba3c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-27T12:00:31.330Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-27T12:00:31.330Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"brucelanlan/dsh-tier-router@54be7e6f778ae0865fe7b93409c2e7379231ba3c#scan-2","versionCount":1,"latestCommit":"54be7e6f778ae0865fe7b93409c2e7379231ba3c","latestCheckedAt":"2026-08-27T12:00:31.330Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"spirits001/dsh-tokensforce-login","order":537,"name":"dsh-tokensforce-login","owner":"spirits001","repo":"spirits001/dsh-tokensforce-login","url":"https://github.com/spirits001/dsh-tokensforce-login","category":"tools","description":{"zh":"TokensForce for deepseek harness","en":"TokensForce for deepseek harness"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T06:29:32Z","updatedAt":"2026-08-15T06:29:41Z","createdAt":"2026-08-15T02:04:45Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-tokensforce-login","version":"0.3.3","lifecycleScripts":["prepare"],"runtimeDependencies":6,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"31276189e1e34541417793c5f37da41a2e4d3491","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T06:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T06:30:13.903Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]}},{"id":"inkshadewoods/dsh-tool-visual-primitives","order":538,"name":"dsh-tool-visual-primitives","owner":"InkshadeWoods","repo":"InkshadeWoods/dsh-tool-visual-primitives","url":"https://github.com/InkshadeWoods/dsh-tool-visual-primitives","category":"ui","description":{"zh":"DeepSeek Harness 视觉增强插件：将图片交给外部视觉模型分析，输出带坐标化视觉原语的纯文本证据，使不支持多模态的文本模型也能在对话中理解图片、截图与文档。","en":"DeepSeek Harness 视觉增强插件：将图片交给外部视觉模型分析，输出带坐标化视觉原语的纯文本证据，使不支持多模态的文本模型也能在对话中理解图片、截图与文档。"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T17:28:49Z","updatedAt":"2026-08-15T17:29:11Z","createdAt":"2026-08-15T16:50:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-tool-visual-primitives","version":"1.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.mjs","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e1ba75ad226059c8df374df5c3c607f874e4f3d5","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:23.731Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:23.731Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.mjs","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs","lib/client.js"]}],"filesInspected":["package.json","index.mjs","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"inkshadewoods/dsh-tool-visual-primitives@e1ba75ad226059c8df374df5c3c607f874e4f3d5#scan-2","versionCount":1,"latestCommit":"e1ba75ad226059c8df374df5c3c607f874e4f3d5","latestCheckedAt":"2026-08-28T00:00:23.731Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"x2802490130-prog/dsh-tool-writing","order":539,"name":"dsh-tool-writing","owner":"x2802490130-prog","repo":"x2802490130-prog/dsh-tool-writing","url":"https://github.com/x2802490130-prog/dsh-tool-writing","category":"tools","description":{"zh":"Writing engine for DeepSeek Harness: long-form web-novel orchestration with a separate DeepSeek key, lore management, semantic retrieval, and a corpus library.","en":"Writing engine for DeepSeek Harness: long-form web-novel orchestration with a separate DeepSeek key, lore management, semantic retrieval, and a corpus library."},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T23:29:09Z","updatedAt":"2026-08-15T23:29:13Z","createdAt":"2026-08-15T02:31:08Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-tool-writing","version":"0.8.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"08a3e41164f94cde3de6f64ec42ac11c1cbf406e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:00:18.799Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:00:18.799Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"x2802490130-prog/dsh-tool-writing@08a3e41164f94cde3de6f64ec42ac11c1cbf406e#scan-2","versionCount":1,"latestCommit":"08a3e41164f94cde3de6f64ec42ac11c1cbf406e","latestCheckedAt":"2026-08-25T12:00:18.799Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"2436238575/dsh-turn-diff","order":540,"name":"dsh-turn-diff","owner":"2436238575","repo":"2436238575/dsh-turn-diff","url":"https://github.com/2436238575/dsh-turn-diff","category":"tools","description":{"zh":"dsh-turn-diff","en":"dsh-turn-diff"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T14:59:52Z","updatedAt":"2026-08-15T14:59:53Z","createdAt":"2026-08-14T05:48:41Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-turn-diff","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2d504029cafbdae96ced43e07e5393b9b902d82d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T00:00:27.603Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:27.603Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"2436238575/dsh-turn-diff@2d504029cafbdae96ced43e07e5393b9b902d82d#scan-2","versionCount":1,"latestCommit":"2d504029cafbdae96ced43e07e5393b9b902d82d","latestCheckedAt":"2026-08-29T00:00:27.603Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"winter-and-you-gone/dsh-turn-fold","order":541,"name":"dsh-turn-fold","owner":"Winter-And-You-Gone","repo":"Winter-And-You-Gone/dsh-turn-fold","url":"https://github.com/Winter-And-You-Gone/dsh-turn-fold","category":"tools","description":{"zh":"dsh-turn-fold","en":"dsh-turn-fold"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T16:59:38Z","updatedAt":"2026-08-15T16:59:58Z","createdAt":"2026-08-15T16:55:33Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-turn-fold","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"07ba4936acc72bab7053a6e598d42c327e2457fb","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:28.055Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:28.055Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现网络监听能力，需确认监听地址与认证","发现遥测或分析服务线索"]},"passport":{"evidenceId":"winter-and-you-gone/dsh-turn-fold@07ba4936acc72bab7053a6e598d42c327e2457fb#scan-2","versionCount":1,"latestCommit":"07ba4936acc72bab7053a6e598d42c327e2457fb","latestCheckedAt":"2026-08-28T00:00:28.055Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"tyeclipse/dsh-units","order":542,"name":"dsh-units","owner":"TYEclipse","repo":"TYEclipse/dsh-units","url":"https://github.com/TYEclipse/dsh-units","category":"dev","description":{"zh":"Unit conversion toolbox for DeepSeek Harness (dsh): length, mass, temperature, data sizes (MB vs MiB), speed, time, volume, pressure, energy, angle, frequency — zero runtime dependencies","en":"Unit conversion toolbox for DeepSeek Harness (dsh): length, mass, temperature, data sizes (MB vs MiB), speed, time, volume, pressure, energy, angle, frequency — zero runtime dependencies"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":2,"watchers":2,"pushedAt":"2026-08-15T21:29:30Z","updatedAt":"2026-08-15T21:29:41Z","createdAt":"2026-08-14T21:35:17Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-units","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"316aca38590eb69f5acab360b15259654bf1f3cf","installCommand":"dsh plugin --profile web add github:TYEclipse/dsh-units#316aca38590eb69f5acab360b15259654bf1f3cf","discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:17.921Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-26T00:00:17.921Z","findings":[],"filesInspected":["package.json","dist/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"tyeclipse/dsh-units@316aca38590eb69f5acab360b15259654bf1f3cf#scan-2","versionCount":1,"latestCommit":"316aca38590eb69f5acab360b15259654bf1f3cf","latestCheckedAt":"2026-08-26T00:00:17.921Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"940842546/dsh-usage-billing","order":543,"name":"dsh-usage-billing","owner":"940842546","repo":"940842546/dsh-usage-billing","url":"https://github.com/940842546/dsh-usage-billing","category":"tools","description":{"zh":"dsh-usage-billing","en":"dsh-usage-billing"},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T15:29:38Z","updatedAt":"2026-08-15T15:30:04Z","createdAt":"2026-08-14T08:15:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-usage-billing","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e2939bd2a1a18e70b51d36df78b740d378964436","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T00:00:20.483Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T00:00:20.483Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"940842546/dsh-usage-billing@e2939bd2a1a18e70b51d36df78b740d378964436#scan-2","versionCount":1,"latestCommit":"e2939bd2a1a18e70b51d36df78b740d378964436","latestCheckedAt":"2026-08-29T00:00:20.483Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"qing9835/dsh-eyes","order":544,"name":"dsh-vision-bridge","owner":"qing9835","repo":"qing9835/dsh-eyes","url":"https://github.com/qing9835/dsh-eyes","category":"dev","description":{"zh":"DSH 视觉桥接插件：为无视觉能力的文本模型提供图片识别。粘贴/拖入/导入的图片自动交给 OpenAI 兼容视觉模型（OpenCode / ModelScope）识别为文字并发送进对话，支持多轮复核（vision_ask）、多提供商配置与密钥持久化。","en":"DSH 视觉桥接插件：为无视觉能力的文本模型提供图片识别。粘贴/拖入/导入的图片自动交给 OpenAI 兼容视觉模型（OpenCode / ModelScope）识别为文字并发送进对话，支持多轮复核（vision_ask）、多提供商配置与密钥持久化。"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T13:29:55Z","updatedAt":"2026-08-15T13:29:41Z","createdAt":"2026-08-15T09:26:36Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-vision-bridge","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1612e56358148ae66a62825a63ae42469ee296a4","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T13:30:06.828Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T13:30:23.766Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js","client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js","client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]}},{"id":"linhx1999/dsh-writing-pad","order":545,"name":"dsh-writing-pad","owner":"linhx1999","repo":"linhx1999/dsh-writing-pad","url":"https://github.com/linhx1999/dsh-writing-pad","category":"session","description":{"zh":"Markdown writing pad for the DeepSeek Harness web GUI: per-session editing, preview, and in-session AI-assisted rewrite.","en":"Markdown writing pad for the DeepSeek Harness web GUI: per-session editing, preview, and in-session AI-assisted rewrite."},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T16:59:56Z","updatedAt":"2026-08-15T16:54:32Z","createdAt":"2026-08-14T06:15:14Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-writing-pad","version":"1.1.3","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","dist/index.js","dist/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b70b77310d21a46878dbfd9e6e3b4dfd208c8b43","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-28T00:00:26.370Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-28T00:00:26.370Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"linhx1999/dsh-writing-pad@b70b77310d21a46878dbfd9e6e3b4dfd208c8b43#scan-2","versionCount":1,"latestCommit":"b70b77310d21a46878dbfd9e6e3b4dfd208c8b43","latestCheckedAt":"2026-08-28T00:00:26.370Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"x2802490130-prog/dsh-writing-remote","order":546,"name":"dsh-writing-remote","owner":"x2802490130-prog","repo":"x2802490130-prog/dsh-writing-remote","url":"https://github.com/x2802490130-prog/dsh-writing-remote","category":"ui","description":{"zh":"Typert remote for dsh-tool-writing: exposes project, library and search data to the client writing panel.","en":"Typert remote for dsh-tool-writing: exposes project, library and search data to the client writing panel."},"added":"2026-08-15","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T23:29:12Z","updatedAt":"2026-08-15T23:29:15Z","createdAt":"2026-08-15T02:31:11Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-writing-remote","version":"0.6.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d92fc1060a848b8cc6054ce420f7fb84bdc96e8c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:03:56.378Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:03:56.378Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"x2802490130-prog/dsh-writing-remote@d92fc1060a848b8cc6054ce420f7fb84bdc96e8c#scan-2","versionCount":1,"latestCommit":"d92fc1060a848b8cc6054ce420f7fb84bdc96e8c","latestCheckedAt":"2026-08-25T12:03:56.378Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"nanshan1995/dsh-plugin-market","order":547,"name":"dshmarket","owner":"nanshan1995","repo":"nanshan1995/DSH-Plugin-Market","url":"https://github.com/nanshan1995/DSH-Plugin-Market","category":"dev","description":{"zh":"DeepSeek Harness 插件市场：精选目录 + GitHub 实时浏览、中英翻译搜索、安装前静态安全审计闸门。Plugin market for DeepSeek Harness with a pre-install security audit gate.","en":"DeepSeek Harness 插件市场：精选目录 + GitHub 实时浏览、中英翻译搜索、安装前静态安全审计闸门。Plugin market for DeepSeek Harness with a pre-install security audit gate."},"added":"2026-08-15","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-15T01:29:30Z","updatedAt":"2026-08-15T01:29:50Z","createdAt":"2026-08-14T14:51:15Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dshmarket","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7bb7210db768558706ad3b3b77469eb370a1c0ac","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T01:30:06.878Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T01:30:12.165Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]}},{"id":"saktawdi/ha-orchestrator","order":548,"name":"ha-orchestrator","owner":"Saktawdi","repo":"Saktawdi/ha-orchestrator","url":"https://github.com/Saktawdi/ha-orchestrator","category":"session","description":{"zh":"DeepSeek Harness（dsh）动态 Cordis 插件：模型高可用回退 + 子智能体编排（HA failover + orchestrate subagents）","en":"DeepSeek Harness（dsh）动态 Cordis 插件：模型高可用回退 + 子智能体编排（HA failover + orchestrate subagents）"},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T15:59:51Z","updatedAt":"2026-08-15T15:59:55Z","createdAt":"2026-08-14T10:29:54Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/deepseek-ai/dsh","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-ha-orchestrator","version":"0.12.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7a0601d6988a1c297c217c42dcd663cba41e7467","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-29T12:00:39.377Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-29T12:00:39.377Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"saktawdi/ha-orchestrator@7a0601d6988a1c297c217c42dcd663cba41e7467#scan-2","versionCount":1,"latestCommit":"7a0601d6988a1c297c217c42dcd663cba41e7467","latestCheckedAt":"2026-08-29T12:00:39.377Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"dnncovo/dsh-sounds","order":549,"name":"harness-sounds","owner":"DNNCOVO","repo":"DNNCOVO/dsh-sounds","url":"https://github.com/DNNCOVO/dsh-sounds","category":"workflow","description":{"zh":"DeepSeek Harness sound alerts: task done, task failed, turn complete, waiting approval, agent question (DSH plugin)","en":"DeepSeek Harness sound alerts: task done, task failed, turn complete, waiting approval, agent question (DSH plugin)"},"added":"2026-08-15","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-15T20:58:27Z","updatedAt":"2026-08-15T20:58:39Z","createdAt":"2026-08-15T20:39:08Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"harness-sounds","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml",".dsh-plugin/index.mjs",".dsh-plugin/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3f8117468779dccf5149337c98f105a4b7585eac","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T00:00:26.004Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:26.004Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json",".dsh-plugin/index.mjs",".dsh-plugin/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"dnncovo/dsh-sounds@3f8117468779dccf5149337c98f105a4b7585eac#scan-2","versionCount":1,"latestCommit":"3f8117468779dccf5149337c98f105a4b7585eac","latestCheckedAt":"2026-08-26T00:00:26.004Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"blktea814/hud-bar-for-dsh","order":550,"name":"hud-floating-bar","owner":"blktea814","repo":"blktea814/hud-bar-for-dsh","url":"https://github.com/blktea814/hud-bar-for-dsh","category":"tools","description":{"zh":"hud-floating-bar","en":"hud-floating-bar"},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T09:29:07Z","updatedAt":"2026-08-15T09:29:20Z","createdAt":"2026-08-15T09:06:00Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"hud-floating-bar","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cd1dc6427a1bf8f036736ac6a7e5e8e547a9b5cd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T09:30:06.829Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T09:30:12.264Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/index.js"]}],"filesInspected":["package.json","index.mjs","client/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力"]}},{"id":"starchen-cycler/octie-dsh-plugin","order":551,"name":"octie-cli","owner":"StarChen-Cycler","repo":"StarChen-Cycler/octie-dsh-plugin","url":"https://github.com/StarChen-Cycler/octie-dsh-plugin","category":"ui","description":{"zh":"State-oriented task graph kernel for the agentic era - a DeepSeek Harness bundle: 13 octie_* tools, octie Cordis service & events, realtime DAG task panel, bundled agent preset. State is derived, not set.","en":"State-oriented task graph kernel for the agentic era - a DeepSeek Harness bundle: 13 octie_* tools, octie Cordis service & events, realtime DAG task panel, bundled agent preset. State is derived, not set."},"added":"2026-08-15","curated":false,"topic":true,"stars":3,"forks":1,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T20:29:19Z","updatedAt":"2026-08-15T20:29:55Z","createdAt":"2026-08-14T21:11:28Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"octie-cli","version":"1.2.3","lifecycleScripts":[],"runtimeDependencies":6,"declaredPaths":["octie/cordis.patch.yml","octie/plugin/index.mjs","octie/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"71e9bad32d8efbffc837d0bc463cce5f81288fbc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-26T12:01:02.366Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T12:01:02.366Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["octie/plugin/index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["octie/plugin/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["octie/client.js"]}],"filesInspected":["package.json","octie/plugin/index.mjs","octie/client.js","octie/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"starchen-cycler/octie-dsh-plugin@71e9bad32d8efbffc837d0bc463cce5f81288fbc#scan-2","versionCount":1,"latestCommit":"71e9bad32d8efbffc837d0bc463cce5f81288fbc","latestCheckedAt":"2026-08-26T12:01:02.366Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"fieldnote-ops/relayloom","order":552,"name":"relayloom","owner":"fieldnote-ops","repo":"fieldnote-ops/relayloom","url":"https://github.com/fieldnote-ops/relayloom","category":"workflow","description":{"zh":"Default-off external chat relay for agent harnesses; first adapter targets DingTalk Stream.","en":"Default-off external chat relay for agent harnesses; first adapter targets DingTalk Stream."},"added":"2026-08-15","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-15T00:28:54Z","updatedAt":"2026-08-15T00:29:00Z","createdAt":"2026-08-14T17:30:34Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"relayloom","version":"0.2.2","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-15T00:30:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T00:30:51.049Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"micromilo/upstream-radar","order":553,"name":"upstream-radar","owner":"MicroMilo","repo":"MicroMilo/upstream-radar","url":"https://github.com/MicroMilo/upstream-radar","category":"workflow","description":{"zh":"DSH plugin security and dependency monitoring for DeepSeek Harness: exact vulnerable paths, breaking updates, and Agent follow-up.","en":"DSH plugin security and dependency monitoring for DeepSeek Harness: exact vulnerable paths, breaking updates, and Agent follow-up."},"added":"2026-08-15","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":0,"watchers":4,"pushedAt":"2026-08-15T22:29:09Z","updatedAt":"2026-08-15T22:29:10Z","createdAt":"2026-08-14T07:55:24Z","license":"Apache-2.0","language":"TypeScript","homepage":"https://www.npmjs.com/package/upstream-radar","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"upstream-radar","version":"0.45.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dist/src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"697477c17e60424661c457692c0c66ae4c7739dd","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-15","lastSeenAt":"2026-08-25T12:03:57.528Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-25T12:03:57.528Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"micromilo/upstream-radar@697477c17e60424661c457692c0c66ae4c7739dd#scan-2","versionCount":1,"latestCommit":"697477c17e60424661c457692c0c66ae4c7739dd","latestCheckedAt":"2026-08-25T12:03:57.528Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"aik358/dsh-auto-memory","order":554,"name":"@a9i5k4/dsh-auto-memory","owner":"Aik358","repo":"Aik358/dsh-auto-memory","url":"https://github.com/Aik358/dsh-auto-memory","category":"ui","description":{"zh":"DSH 自动记忆插件:三层记忆(用户级/项目笔记/每日日志)自动注入与检索、每日反思、可视化面板与设置页,支持继承其他 AI 工具的历史记忆。An auto-memory plugin for the DeepSeek Harness Web GUI: three-layer memory (user-level / project notes / daily logs) with automatic injection and retrieval, daily reflections, a visual panel and settings page, and inheritance of memories from other AI tools.","en":"DSH 自动记忆插件:三层记忆(用户级/项目笔记/每日日志)自动注入与检索、每日反思、可视化面板与设置页,支持继承其他 AI 工具的历史记忆。An auto-memory plugin for the DeepSeek Harness Web GUI: three-layer memory (user-level / project notes / daily logs) with automatic injection and retrieval, daily reflections, a visual panel and settings page, and inheritance of memories from other AI tools."},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T11:30:31Z","updatedAt":"2026-08-14T11:30:42Z","createdAt":"2026-08-14T07:42:16Z","license":"BSD-3-Clause","language":"JavaScript","homepage":"https://www.npmjs.com/package/@a9i5k4/dsh-auto-memory","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@a9i5k4/dsh-auto-memory","version":"0.1.38","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4207246cf2fb8ae98687127324dd3d86c827710e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:27.521Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:00:27.521Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"aik358/dsh-auto-memory@4207246cf2fb8ae98687127324dd3d86c827710e#scan-2","versionCount":1,"latestCommit":"4207246cf2fb8ae98687127324dd3d86c827710e","latestCheckedAt":"2026-09-05T00:00:27.521Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"aaravarr/dsh-subagent-max","order":555,"name":"@aaravarr/dsh-subagent-max","owner":"aaravarr","repo":"aaravarr/dsh-subagent-max","url":"https://github.com/aaravarr/dsh-subagent-max","category":"ui","description":{"zh":"DeepSeek Harness (DSH) plugin — a subagent_with_model tool plus a live multi-panel subagent viewer.","en":"DeepSeek Harness (DSH) plugin — a subagent_with_model tool plus a live multi-panel subagent viewer."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T21:29:54Z","updatedAt":"2026-08-14T21:30:23Z","createdAt":"2026-08-14T17:07:57Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@aaravarr/dsh-subagent-max","version":"0.1.4","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"88368b087d63147f449a285abe6284b8a9a8fc68","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:10.011Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:10.011Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"aaravarr/dsh-subagent-max@88368b087d63147f449a285abe6284b8a9a8fc68#scan-2","versionCount":1,"latestCommit":"88368b087d63147f449a285abe6284b8a9a8fc68","latestCheckedAt":"2026-09-02T00:01:10.011Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"wyh66666666/dsh-transparent-ui-plugin","order":556,"name":"@deepseek-ai/dsh-client-ui-aqua","owner":"WYH66666666","repo":"WYH66666666/DSH-Transparent-UI-Plugin","url":"https://github.com/WYH66666666/DSH-Transparent-UI-Plugin","category":"ui","description":{"zh":"@deepseek-ai/dsh-client-ui-aqua","en":"@deepseek-ai/dsh-client-ui-aqua"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T17:30:13Z","updatedAt":"2026-08-14T17:28:17Z","createdAt":"2026-08-14T14:10:42Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@deepseek-ai/dsh-client-ui-aqua","version":"0.1.0-rc.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:30:51.721Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"screenedCommit":null},{"id":"le-soleil-se-couche/dsh-skin-claude-code","order":557,"name":"@deepseek-ai/dsh-client-ui-skin-claude-code","owner":"le-soleil-se-couche","repo":"le-soleil-se-couche/dsh-skin-claude-code","url":"https://github.com/le-soleil-se-couche/dsh-skin-claude-code","category":"ui","description":{"zh":"DeepSeek Harness (dsh) Web GUI skin: Claude Code style fonts + Codex warm palette (terracotta #DA7756, cream #F5F3EE, ink #1D1B16, Source Han Serif UI + SF Mono code)","en":"DeepSeek Harness (dsh) Web GUI skin: Claude Code style fonts + Codex warm palette (terracotta #DA7756, cream #F5F3EE, ink #1D1B16, Source Han Serif UI + SF Mono code)"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T15:59:43Z","updatedAt":"2026-08-14T16:00:43Z","createdAt":"2026-08-14T13:41:57Z","license":"BSD-3-Clause","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@deepseek-ai/dsh-client-ui-skin-claude-code","version":"0.0.1","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8590170e1c37eca3176469ade61998fd3d5088d4","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:30.739Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:30.739Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"le-soleil-se-couche/dsh-skin-claude-code@8590170e1c37eca3176469ade61998fd3d5088d4#scan-2","versionCount":1,"latestCommit":"8590170e1c37eca3176469ade61998fd3d5088d4","latestCheckedAt":"2026-09-03T12:00:30.739Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"nagasakisoyo-ui/dsh-llm-deepseek-vision","order":558,"name":"@deepseek-ai/dsh-llm-deepseek-vision","owner":"NagasakiSoyo-ui","repo":"NagasakiSoyo-ui/dsh-llm-deepseek-vision","url":"https://github.com/NagasakiSoyo-ui/dsh-llm-deepseek-vision","category":"dev","description":{"zh":"Vision-augmented DeepSeek adapter plugin for DeepSeek Harness: a vision-capable model describes image input, then a text-only DeepSeek model reasons over the description","en":"Vision-augmented DeepSeek adapter plugin for DeepSeek Harness: a vision-capable model describes image input, then a text-only DeepSeek model reasons over the description"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:59:18Z","updatedAt":"2026-08-14T15:00:17Z","createdAt":"2026-08-14T06:39:08Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@deepseek-ai/dsh-llm-deepseek-vision","version":"0.1.0-rc.5","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"4347929795042b665b6ddccd6806f22b92689f32","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:35.139Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:35.139Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"nagasakisoyo-ui/dsh-llm-deepseek-vision@4347929795042b665b6ddccd6806f22b92689f32#scan-2","versionCount":1,"latestCommit":"4347929795042b665b6ddccd6806f22b92689f32","latestCheckedAt":"2026-09-03T12:00:35.139Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"noob-stupid/dsh-plugin-console","order":559,"name":"@deepseek-ai/dsh-plugin-console","owner":"Noob-stupid","repo":"Noob-stupid/dsh-plugin-console","url":"https://github.com/Noob-stupid/dsh-plugin-console","category":"tools","description":{"zh":"@deepseek-ai/dsh-plugin-console","en":"@deepseek-ai/dsh-plugin-console"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T09:00:02Z","updatedAt":"2026-08-14T09:00:06Z","createdAt":"2026-08-14T08:39:43Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@noob-stupid/dsh-plugin-console","version":"0.3.30","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ae6a389fecddfc13c4f5bd4b466e696ca5426410","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:36.065Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:36.065Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"noob-stupid/dsh-plugin-console@ae6a389fecddfc13c4f5bd4b466e696ca5426410#scan-2","versionCount":1,"latestCommit":"ae6a389fecddfc13c4f5bd4b466e696ca5426410","latestCheckedAt":"2026-09-08T00:00:36.065Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"noob-stupid/dsh-plugin-hub","order":560,"name":"@deepseek-ai/dsh-plugin-console","owner":"Noob-stupid","repo":"Noob-stupid/dsh-plugin-hub","url":"https://github.com/Noob-stupid/dsh-plugin-hub","category":"ui","description":{"zh":"DeepSeek Harness (DSH) 插件管理面板：一键启用/停用插件 + GitHub dsh-plugin 插件市场，带插件详情与一键安装 | Plugin manager & marketplace for DeepSeek Harness","en":"DeepSeek Harness (DSH) 插件管理面板：一键启用/停用插件 + GitHub dsh-plugin 插件市场，带插件详情与一键安装 | Plugin manager & marketplace for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T10:00:26Z","updatedAt":"2026-08-14T10:00:17Z","createdAt":"2026-08-14T08:39:43Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@noob-stupid/dsh-plugin-console","version":"0.3.29","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ef33745588e75008c0d8d9b38fc02fd47b244b18","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:36.402Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-07T00:00:36.402Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"noob-stupid/dsh-plugin-hub@ef33745588e75008c0d8d9b38fc02fd47b244b18#scan-2","versionCount":1,"latestCommit":"ef33745588e75008c0d8d9b38fc02fd47b244b18","latestCheckedAt":"2026-09-07T00:00:36.402Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"lilycleheart/liuli-theme","order":561,"name":"@deepseek-ai/liuli-theme","owner":"LilycleHeart","repo":"LilycleHeart/liuli-theme","url":"https://github.com/LilycleHeart/liuli-theme","category":"ui","description":{"zh":"@deepseek-ai/liuli-theme","en":"@deepseek-ai/liuli-theme"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":1,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T22:29:05Z","updatedAt":"2026-08-14T22:29:33Z","createdAt":"2026-08-14T18:18:16Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["client"],"packageName":"@deepseek-ai/liuli-theme","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":4,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9438feed825782319387c0f9f2c915c3f2db2641","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:06.780Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:06.780Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.ts"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.ts"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["src/index.ts"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现安装生命周期脚本：prepare","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"lilycleheart/liuli-theme@9438feed825782319387c0f9f2c915c3f2db2641#scan-2","versionCount":1,"latestCommit":"9438feed825782319387c0f9f2c915c3f2db2641","latestCheckedAt":"2026-09-02T00:01:06.780Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"beijingwahw/dsh-conv-search","order":562,"name":"@dsh-external/dsh-conv-search","owner":"beijingwahw","repo":"beijingwahw/dsh-conv-search","url":"https://github.com/beijingwahw/dsh-conv-search","category":"tools","description":{"zh":"dsh-conv-search（对话内文本搜索）— in-conversation text search plugin for DeepSeek Harness (Ctrl+F, match case, whole word, streaming-aware)","en":"dsh-conv-search（对话内文本搜索）— in-conversation text search plugin for DeepSeek Harness (Ctrl+F, match case, whole word, streaming-aware)"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T10:30:14Z","updatedAt":"2026-08-14T10:30:36Z","createdAt":"2026-08-14T07:45:36Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-conv-search","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T10:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T10:30:51.201Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"fenxin-fx/dsh-default-workspace","order":563,"name":"@dsh-external/dsh-default-workspace","owner":"fenxin-fx","repo":"fenxin-fx/dsh-default-workspace","url":"https://github.com/fenxin-fx/dsh-default-workspace","category":"tools","description":{"zh":"@dsh-external/dsh-default-workspace","en":"@dsh-external/dsh-default-workspace"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T16:00:00Z","updatedAt":"2026-08-14T16:00:40Z","createdAt":"2026-08-14T15:54:09Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-default-workspace","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.mjs","src/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a5fcdd6714a243c40e88611b12131c36d051871c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:30.501Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:30.501Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.mjs"]}],"filesInspected":["package.json","src/index.mjs","src/client/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"fenxin-fx/dsh-default-workspace@a5fcdd6714a243c40e88611b12131c36d051871c#scan-2","versionCount":1,"latestCommit":"a5fcdd6714a243c40e88611b12131c36d051871c","latestCheckedAt":"2026-09-03T12:00:30.501Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"invalidnaaaame/dsh-side-workspace","order":564,"name":"@dsh-external/dsh-side","owner":"invalidnaaaame","repo":"invalidnaaaame/dsh-side-workspace","url":"https://github.com/invalidnaaaame/dsh-side-workspace","category":"workflow","description":{"zh":"DSH plugin: Codex-style side conversations (/side, /btw), an integrated right workspace (Side/Subagents/Goal) and a ChatGPT-style pinned-notes board","en":"DSH plugin: Codex-style side conversations (/side, /btw), an integrated right workspace (Side/Subagents/Goal) and a ChatGPT-style pinned-notes board"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T21:29:06Z","updatedAt":"2026-08-14T21:29:41Z","createdAt":"2026-08-14T20:53:47Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-external/dsh-side","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7aebf1ab663d2920fb4a1258f5c4500fc39451bc","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:11.157Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:11.157Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"invalidnaaaame/dsh-side-workspace@7aebf1ab663d2920fb4a1258f5c4500fc39451bc#scan-2","versionCount":1,"latestCommit":"7aebf1ab663d2920fb4a1258f5c4500fc39451bc","latestCheckedAt":"2026-09-02T00:01:11.157Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"dpf555/dsh-workbench","order":565,"name":"@dsh-local/dsh-workbench","owner":"Dpf555","repo":"Dpf555/dsh-workbench","url":"https://github.com/Dpf555/dsh-workbench","category":"tools","description":{"zh":"VS Code-style three-column Explorer + Monaco editor plugin for the DeepSeek Harness web GUI","en":"VS Code-style three-column Explorer + Monaco editor plugin for the DeepSeek Harness web GUI"},"added":"2026-08-14","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T16:00:36Z","updatedAt":"2026-08-14T15:57:53Z","createdAt":"2026-08-14T15:34:49Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"@dsh-local/dsh-workbench","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"16f20acf544abcefa9e40b6159fd1b9badd425a6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:29.381Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:29.381Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"dpf555/dsh-workbench@16f20acf544abcefa9e40b6159fd1b9badd425a6#scan-2","versionCount":1,"latestCommit":"16f20acf544abcefa9e40b6159fd1b9badd425a6","latestCheckedAt":"2026-09-03T12:00:29.381Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"furongjun-1999/dsh-memory","order":566,"name":"@furongjun1999/dsh-memory","owner":"FuRongJun-1999","repo":"FuRongJun-1999/dsh-memory","url":"https://github.com/FuRongJun-1999/dsh-memory","category":"session","description":{"zh":"Multi-agent spatiotemporal memory graph for DeepSeek Harness.Cross-session persistence, knowledge flywheel, importance-gated memory — trust governed by an auditable charter.","en":"Multi-agent spatiotemporal memory graph for DeepSeek Harness.Cross-session persistence, knowledge flywheel, importance-gated memory — trust governed by an auditable charter."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T15:30:19Z","updatedAt":"2026-08-14T15:30:02Z","createdAt":"2026-08-14T13:28:26Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@furongjun1999/dsh-memory","version":"0.4.2","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a7921a0ff78e353f8d58819627e46cb1737c640e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:33.845Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:33.845Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"furongjun-1999/dsh-memory@a7921a0ff78e353f8d58819627e46cb1737c640e#scan-2","versionCount":1,"latestCommit":"a7921a0ff78e353f8d58819627e46cb1737c640e","latestCheckedAt":"2026-09-03T12:00:33.845Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"jeremy9682/dsh-skill-pack","order":567,"name":"@jeremy9682/dsh-skill-pack","owner":"jeremy9682","repo":"jeremy9682/dsh-skill-pack","url":"https://github.com/jeremy9682/dsh-skill-pack","category":"session","description":{"zh":"11 shareable workflow skills for DeepSeek Harness: handoffs, triage, specs, tickets, wayfinding, teaching, mode routing, overnight runs","en":"11 shareable workflow skills for DeepSeek Harness: handoffs, triage, specs, tickets, wayfinding, teaching, mode routing, overnight runs"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T23:29:27Z","updatedAt":"2026-08-14T23:29:40Z","createdAt":"2026-08-14T23:29:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@jeremy9682/dsh-skill-pack","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"6e0bed1aa846ef00ee6fdd3d8bf9c63b46b014e2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:05.131Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:05.131Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"jeremy9682/dsh-skill-pack@6e0bed1aa846ef00ee6fdd3d8bf9c63b46b014e2#scan-2","versionCount":1,"latestCommit":"6e0bed1aa846ef00ee6fdd3d8bf9c63b46b014e2","latestCheckedAt":"2026-09-02T00:01:05.131Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"kakadeka/baton","order":568,"name":"@kakadeka/dsh-baton","owner":"kakadeka","repo":"kakadeka/Baton","url":"https://github.com/kakadeka/Baton","category":"tools","description":{"zh":"Pass your project, not your context.","en":"Pass your project, not your context."},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T20:58:41Z","updatedAt":"2026-08-14T20:58:46Z","createdAt":"2026-08-14T03:08:18Z","license":"MIT","language":"JavaScript","homepage":"https://www.kakadeka.com/baton/","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"@kakadeka/dsh-baton","version":"0.1.12","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T21:00:45.420Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T21:00:51.621Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["index.mjs"]}],"filesInspected":["package.json","index.mjs","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"screenedCommit":null},{"id":"xiaoxiaosrm/dsh-mattpocock-skills","order":569,"name":"@mattpocock-community/dsh-engineering-skills","owner":"xiaoxiaosrm","repo":"xiaoxiaosrm/dsh-mattpocock-skills","url":"https://github.com/xiaoxiaosrm/dsh-mattpocock-skills","category":"tools","description":{"zh":"Unofficial DSH port of mattpocock/skills — Engineering (18) + Productivity (7) skills as a DeepSeek Harness bundle plugin. MIT, © Matt Pocock. Star the upstream repo!","en":"Unofficial DSH port of mattpocock/skills — Engineering (18) + Productivity (7) skills as a DeepSeek Harness bundle plugin. MIT, © Matt Pocock. Star the upstream repo!"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T13:29:36Z","updatedAt":"2026-08-14T13:30:26Z","createdAt":"2026-08-14T06:17:40Z","license":null,"language":"Shell","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@mattpocock-community/dsh-engineering-skills","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"screenedCommit":"b3f8b92c90a165b87bd3da9be018b0a293c46a0f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:26.250Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:26.250Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"xiaoxiaosrm/dsh-mattpocock-skills@b3f8b92c90a165b87bd3da9be018b0a293c46a0f#scan-2","versionCount":1,"latestCommit":"b3f8b92c90a165b87bd3da9be018b0a293c46a0f","latestCheckedAt":"2026-09-04T12:00:26.250Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"mofeng2223/dsh-claude-provider","order":570,"name":"@mofeng2223/dsh-claude-provider","owner":"MoFeng2223","repo":"MoFeng2223/dsh-claude-provider","url":"https://github.com/MoFeng2223/dsh-claude-provider","category":"dev","description":{"zh":"Custom Claude provider support for DeepSeek Harness","en":"Custom Claude provider support for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T13:59:52Z","updatedAt":"2026-08-14T13:46:58Z","createdAt":"2026-08-14T12:51:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@mofeng2223/dsh-claude-provider","version":"0.2.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","src/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T14:00:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T14:00:52.190Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js","lib/client.js","cordis.patch.yml"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","src/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null},{"id":"nanmicoder/dsh-auto-mode","order":571,"name":"@nanmicoder/dsh-auto-mode","owner":"NanmiCoder","repo":"NanmiCoder/dsh-auto-mode","url":"https://github.com/NanmiCoder/dsh-auto-mode","category":"tools","description":{"zh":"Safe automatic permissions for DeepSeek Harness.","en":"Safe automatic permissions for DeepSeek Harness."},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T20:58:48Z","updatedAt":"2026-08-14T20:58:56Z","createdAt":"2026-08-14T07:55:10Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@nanmicoder/dsh-auto-mode","version":"0.1.6","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a53af050536655f29f8b449ee57f1dd79bf06603","installCommand":"dsh plugin --profile web add github:NanmiCoder/dsh-auto-mode#a53af050536655f29f8b449ee57f1dd79bf06603","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:12.163Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-02T00:01:12.163Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"nanmicoder/dsh-auto-mode@a53af050536655f29f8b449ee57f1dd79bf06603#scan-2","versionCount":1,"latestCommit":"a53af050536655f29f8b449ee57f1dd79bf06603","latestCheckedAt":"2026-09-02T00:01:12.163Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"oneinitai/dsh-settings-plus","order":572,"name":"@oneinitai/dsh-settings-plus","owner":"oneinitAI","repo":"oneinitAI/dsh-settings-plus","url":"https://github.com/oneinitAI/dsh-settings-plus","category":"tools","description":{"zh":"@oneinitai/dsh-settings-plus","en":"@oneinitai/dsh-settings-plus"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T15:30:14Z","updatedAt":"2026-08-14T15:30:25Z","createdAt":"2026-08-14T10:41:58Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@oneinitai/dsh-settings-plus","version":"0.0.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"2aafa7a38fb32ed8718f4de7d740ab4642c1dfe4","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:33.934Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:33.934Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现遥测或分析服务线索","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"oneinitai/dsh-settings-plus@2aafa7a38fb32ed8718f4de7d740ab4642c1dfe4#scan-2","versionCount":1,"latestCommit":"2aafa7a38fb32ed8718f4de7d740ab4642c1dfe4","latestCheckedAt":"2026-09-03T12:00:33.934Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"zebbkira/dsh-skills-mcp-manager","order":573,"name":"@zebbkira/dsh-skills-mcp-manager","owner":"zebbkira","repo":"zebbkira/dsh-skills-mcp-manager","url":"https://github.com/zebbkira/dsh-skills-mcp-manager","category":"ui","description":{"zh":"面向 DeepSeek Harness Web GUI 的正式插件包：在设置页的「Web UI 插件」分组中新增一张「技能与 MCP」卡片，用于在浏览器里管理技能（skills）与 MCP 服务器。","en":"面向 DeepSeek Harness Web GUI 的正式插件包：在设置页的「Web UI 插件」分组中新增一张「技能与 MCP」卡片，用于在浏览器里管理技能（skills）与 MCP 服务器。"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:30:20Z","updatedAt":"2026-08-14T14:30:32Z","createdAt":"2026-08-14T13:51:13Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@zebbkira/dsh-skills-mcp-manager","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ab57b1c4265e13008b108de460a71680f3366223","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:38.125Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:38.125Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"zebbkira/dsh-skills-mcp-manager@ab57b1c4265e13008b108de460a71680f3366223#scan-2","versionCount":1,"latestCommit":"ab57b1c4265e13008b108de460a71680f3366223","latestCheckedAt":"2026-09-03T12:00:38.125Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"kirkchinese/claudecode--dsh","order":574,"name":"claude2dsh","owner":"kirkchinese","repo":"kirkchinese/Claudecode--DSH","url":"https://github.com/kirkchinese/Claudecode--DSH","category":"tools","description":{"zh":"To hell with ClaudeCode!","en":"To hell with ClaudeCode!"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T18:00:24Z","updatedAt":"2026-08-14T17:56:51Z","createdAt":"2026-08-14T03:50:20Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"claude2dsh","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","src/plugin/index.mjs","client/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T18:00:45.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T18:00:51.473Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/plugin/index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/plugin/index.mjs"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["src/plugin/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["client/client.js"]}],"filesInspected":["package.json","src/plugin/index.mjs","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null},{"id":"fly3366/deepjit","order":575,"name":"deepjit","owner":"fly3366","repo":"fly3366/DeepJIT","url":"https://github.com/fly3366/DeepJIT","category":"workflow","description":{"zh":"JIT compiler plugin for deepseek-harness: compiles recurring agent workflows into hot skills and flow templates","en":"JIT compiler plugin for deepseek-harness: compiles recurring agent workflows into hot skills and flow templates"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":2,"watchers":1,"pushedAt":"2026-08-14T14:00:38Z","updatedAt":"2026-08-14T13:26:11Z","createdAt":"2026-08-13T17:36:54Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"@fly3366/deepjit","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":11,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cd4b4ec9e1fcb40003ca15f7ebf0384e878966ad","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:36.464Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:36.464Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dist/index.js","src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","dist/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"fly3366/deepjit@cd4b4ec9e1fcb40003ca15f7ebf0384e878966ad#scan-2","versionCount":1,"latestCommit":"cd4b4ec9e1fcb40003ca15f7ebf0384e878966ad","latestCheckedAt":"2026-09-04T00:00:36.464Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"simon300000/dsh-auto","order":576,"name":"dsh-auto","owner":"simon300000","repo":"simon300000/dsh-auto","url":"https://github.com/simon300000/dsh-auto","category":"tools","description":{"zh":"dsh Auto Approve","en":"dsh Auto Approve"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T15:00:34Z","updatedAt":"2026-08-13T22:06:40Z","createdAt":"2026-08-13T17:08:31Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-auto","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"eb409400843e195886edb45d9a75d2188120a2b6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:35.165Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:35.165Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"simon300000/dsh-auto@eb409400843e195886edb45d9a75d2188120a2b6#scan-2","versionCount":1,"latestCommit":"eb409400843e195886edb45d9a75d2188120a2b6","latestCheckedAt":"2026-09-03T12:00:35.165Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"styxnether/dsh-auto-approval-plugin","order":577,"name":"dsh-auto-approval-plugin","owner":"StyxNether","repo":"StyxNether/dsh-auto-approval-plugin","url":"https://github.com/StyxNether/dsh-auto-approval-plugin","category":"tools","description":{"zh":"Trusted Auto: a middle permission tier for DeepSeek Harness between workspace-write and danger-full-access, auto-approving harmless commands and trusted-area targets","en":"Trusted Auto: a middle permission tier for DeepSeek Harness between workspace-write and danger-full-access, auto-approving harmless commands and trusted-area targets"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T17:30:22Z","updatedAt":"2026-08-14T17:29:58Z","createdAt":"2026-08-14T09:31:49Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-auto-approval-plugin","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:30:51.154Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","lib/index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"screenedCommit":null},{"id":"jiao-xxx/dsh-auto-approve","order":578,"name":"dsh-auto-approve","owner":"Jiao-XXX","repo":"Jiao-XXX/dsh-auto-approve","url":"https://github.com/Jiao-XXX/dsh-auto-approve","category":"dev","description":{"zh":"Conservative auto-approval preset for DeepSeek Harness sandbox escalations","en":"Conservative auto-approval preset for DeepSeek Harness sandbox escalations"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T11:00:33Z","updatedAt":"2026-08-14T11:00:45Z","createdAt":"2026-08-14T10:21:45Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-auto-approve","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"56bc9a38f60e369c21c9bf75ee566c7f12051462","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:35.910Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:00:35.910Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js","cordis.patch.yml"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"jiao-xxx/dsh-auto-approve@56bc9a38f60e369c21c9bf75ee566c7f12051462#scan-2","versionCount":1,"latestCommit":"56bc9a38f60e369c21c9bf75ee566c7f12051462","latestCheckedAt":"2026-09-05T00:00:35.910Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"gu-zt/dsh-auxiliary","order":579,"name":"dsh-auxiliary","owner":"Gu-ZT","repo":"Gu-ZT/dsh-auxiliary","url":"https://github.com/Gu-ZT/dsh-auxiliary","category":"dev","description":{"zh":"Auxiliary models for DeepSeek Harness: vision understanding and context compression through dedicated model routes.","en":"Auxiliary models for DeepSeek Harness: vision understanding and context compression through dedicated model routes."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T18:28:55Z","updatedAt":"2026-08-14T18:29:00Z","createdAt":"2026-08-14T05:26:24Z","license":"LGPL-3.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"@dsh-plugin/dsh-auxiliary","version":"0.4.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c612949112a75fef2fb0dc6974856bf1463a85cd","installCommand":"dsh plugin --profile web add github:Gu-ZT/dsh-auxiliary#c612949112a75fef2fb0dc6974856bf1463a85cd","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:14.289Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-02T12:01:14.289Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"gu-zt/dsh-auxiliary@c612949112a75fef2fb0dc6974856bf1463a85cd#scan-2","versionCount":1,"latestCommit":"c612949112a75fef2fb0dc6974856bf1463a85cd","latestCheckedAt":"2026-09-02T12:01:14.289Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"x2802490130-prog/dsh-balance-float","order":580,"name":"dsh-balance-float","owner":"x2802490130-prog","repo":"x2802490130-prog/dsh-balance-float","url":"https://github.com/x2802490130-prog/dsh-balance-float","category":"tools","description":{"zh":"DSH 悬浮余额/一键退出插件","en":"DSH 悬浮余额/一键退出插件"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T21:58:51Z","updatedAt":"2026-08-14T21:59:00Z","createdAt":"2026-08-14T19:22:12Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-balance-float","version":"1.0.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","client/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"14311f51e81b5b1fef335705d4e56c788d091979","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:07.534Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:07.534Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","client/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","client/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"x2802490130-prog/dsh-balance-float@14311f51e81b5b1fef335705d4e56c788d091979#scan-2","versionCount":1,"latestCommit":"14311f51e81b5b1fef335705d4e56c788d091979","latestCheckedAt":"2026-09-02T00:01:07.534Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"rainronin/dsh-balance-monitor","order":581,"name":"dsh-balance-monitor","owner":"Rainronin","repo":"Rainronin/dsh-balance-monitor","url":"https://github.com/Rainronin/dsh-balance-monitor","category":"workflow","description":{"zh":"DeepSeek Harness 插件：API 余额实时监测（ds_balance 工具 + 每轮注入 + Matrix 侧边栏徽章）","en":"DeepSeek Harness 插件：API 余额实时监测（ds_balance 工具 + 每轮注入 + Matrix 侧边栏徽章）"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T20:59:37Z","updatedAt":"2026-08-14T20:59:42Z","createdAt":"2026-08-14T20:53:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"@rainronin/dsh-balance-monitor","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"cde6fed4693411d78217fbd890ae6251abb1e9e0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:11.367Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:11.367Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"rainronin/dsh-balance-monitor@cde6fed4693411d78217fbd890ae6251abb1e9e0#scan-2","versionCount":1,"latestCommit":"cde6fed4693411d78217fbd890ae6251abb1e9e0","latestCheckedAt":"2026-09-02T00:01:11.367Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"tianyu209/dsh-browser-companion","order":582,"name":"dsh-browser-companion","owner":"Tianyu209","repo":"Tianyu209/dsh-browser-companion","url":"https://github.com/Tianyu209/dsh-browser-companion","category":"workflow","description":{"zh":"A personal DSH browser plugin: persistent profile, visible window, human-in-the-loop login, and safe agent browser tools.","en":"A personal DSH browser plugin: persistent profile, visible window, human-in-the-loop login, and safe agent browser tools."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T22:29:51Z","updatedAt":"2026-08-14T22:30:24Z","createdAt":"2026-08-14T21:54:55Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-browser-companion","version":"0.1.2","lifecycleScripts":[],"runtimeDependencies":5,"declaredPaths":["cordis.patch.yml","src/index.js","src/client.v3.js"],"invalidDeclaredPaths":[]},"screenedCommit":"02860d005494d9294d3ad4b95ad373a746b2c69d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:05.168Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:05.168Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["src/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.js","src/client.v3.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.js"]}],"filesInspected":["package.json","src/index.js","src/client.v3.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"tianyu209/dsh-browser-companion@02860d005494d9294d3ad4b95ad373a746b2c69d#scan-2","versionCount":1,"latestCommit":"02860d005494d9294d3ad4b95ad373a746b2c69d","latestCheckedAt":"2026-09-02T00:01:05.168Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"wqty123/dsh-browser","order":583,"name":"dsh-builtin-browser","owner":"wqty123","repo":"wqty123/dsh-browser","url":"https://github.com/wqty123/dsh-browser","category":"session","description":{"zh":"Shared real browser plugin for DeepSeek Harness","en":"Shared real browser plugin for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":3,"forks":0,"openIssues":0,"watchers":3,"pushedAt":"2026-08-15T21:30:04Z","updatedAt":"2026-08-15T21:25:30Z","createdAt":"2026-08-14T17:01:52Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-builtin-browser","version":"0.1.15","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9ffe5d6c0d782f3c489d342943fee56d22d6d283","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-26T00:00:17.677Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-26T00:00:17.677Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"wqty123/dsh-browser@9ffe5d6c0d782f3c489d342943fee56d22d6d283#scan-2","versionCount":1,"latestCommit":"9ffe5d6c0d782f3c489d342943fee56d22d6d283","latestCheckedAt":"2026-08-26T00:00:17.677Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"freakz2z/dsh-catgirl-plugin","order":584,"name":"dsh-catgirl-plugin","owner":"Freakz2z","repo":"Freakz2z/dsh-catgirl-plugin","url":"https://github.com/Freakz2z/dsh-catgirl-plugin","category":"ui","description":{"zh":"Neko — a token-efficient persona runtime for DeepSeek Harness. 把人格留在界面，把智能留给模型。Measured: -67% input tokens, -66% cache reads, 0-token catgirl rendering.","en":"Neko — a token-efficient persona runtime for DeepSeek Harness. 把人格留在界面，把智能留给模型。Measured: -67% input tokens, -66% cache reads, 0-token catgirl rendering."},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-22T02:15:45Z","updatedAt":"2026-08-22T02:16:00Z","createdAt":"2026-08-14T16:26:46Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-catgirl-plugin","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b1a7b4958edbc3458c2e3e8049b5fc8188a950c5","installCommand":"dsh plugin --profile web add github:Freakz2z/dsh-catgirl-plugin#b1a7b4958edbc3458c2e3e8049b5fc8188a950c5","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-22T12:00:57.998Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-08-22T12:00:57.998Z","findings":[],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"freakz2z/dsh-catgirl-plugin@b1a7b4958edbc3458c2e3e8049b5fc8188a950c5#scan-2","versionCount":1,"latestCommit":"b1a7b4958edbc3458c2e3e8049b5fc8188a950c5","latestCheckedAt":"2026-08-22T12:00:57.998Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"blockrunai/dsh-clawrouter","order":585,"name":"dsh-clawrouter","owner":"BlockRunAI","repo":"BlockRunAI/dsh-clawrouter","url":"https://github.com/BlockRunAI/dsh-clawrouter","category":"workflow","description":{"zh":"A second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 70 models from one wallet.","en":"A second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 70 models from one wallet."},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T11:59:52Z","updatedAt":"2026-08-14T11:59:56Z","createdAt":"2026-08-14T00:58:39Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-clawrouter","version":"0.10.6","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"9d8cf210771a8a71f0a4908e0bb30d5647d6d135","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:02:02.363Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:02:02.363Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml","src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"blockrunai/dsh-clawrouter@9d8cf210771a8a71f0a4908e0bb30d5647d6d135#scan-2","versionCount":1,"latestCommit":"9d8cf210771a8a71f0a4908e0bb30d5647d6d135","latestCheckedAt":"2026-09-05T00:02:02.363Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"hsiangnianian/dsh-auto-continue","order":586,"name":"dsh-client-auto-continue","owner":"HsiangNianian","repo":"HsiangNianian/dsh-auto-continue","url":"https://github.com/HsiangNianian/dsh-auto-continue","category":"ui","description":{"zh":"DSH Web UI plugin: automatically sends \"继续\" (continue) when a request is interrupted by network errors or other non-human causes","en":"DSH Web UI plugin: automatically sends \"继续\" (continue) when a request is interrupted by network errors or other non-human causes"},"added":"2026-08-14","curated":false,"topic":true,"stars":8,"forks":0,"openIssues":0,"watchers":8,"pushedAt":"2026-08-14T09:00:18Z","updatedAt":"2026-08-14T09:00:31Z","createdAt":"2026-08-14T03:08:20Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-client-auto-continue","version":"0.11.4","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"592afc0c143c1daf1c4fb3dd01a4547dd0e626c8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:40.133Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-07T00:00:40.133Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"hsiangnianian/dsh-auto-continue@592afc0c143c1daf1c4fb3dd01a4547dd0e626c8#scan-2","versionCount":1,"latestCommit":"592afc0c143c1daf1c4fb3dd01a4547dd0e626c8","latestCheckedAt":"2026-09-07T00:00:40.133Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"perrylink/dsh-composer-history","order":587,"name":"dsh-composer-history","owner":"PerryLink","repo":"PerryLink/dsh-composer-history","url":"https://github.com/PerryLink/dsh-composer-history","category":"session","description":{"zh":"Terminal-style input history for the DeepSeek Harness web composer - edge-first arrow keys, draft stashing with exact restore, Esc recovery. A dsh-plugin.","en":"Terminal-style input history for the DeepSeek Harness web composer - edge-first arrow keys, draft stashing with exact restore, Esc recovery. A dsh-plugin."},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T10:00:31Z","updatedAt":"2026-08-14T08:23:33Z","createdAt":"2026-08-13T19:16:45Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-composer-history","version":"0.7.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ec6cbd3bcbb33d8944a28e93ed6be022a7e9d626","installCommand":"dsh plugin --profile web add github:PerryLink/dsh-composer-history#ec6cbd3bcbb33d8944a28e93ed6be022a7e9d626","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:35.553Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-07T00:00:35.553Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"perrylink/dsh-composer-history@ec6cbd3bcbb33d8944a28e93ed6be022a7e9d626#scan-2","versionCount":1,"latestCommit":"ec6cbd3bcbb33d8944a28e93ed6be022a7e9d626","latestCheckedAt":"2026-09-07T00:00:35.553Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"xiaoheizi1212/dsh-computer-use","order":588,"name":"dsh-computer-use","owner":"xiaoheizi1212","repo":"xiaoheizi1212/dsh-computer-use","url":"https://github.com/xiaoheizi1212/dsh-computer-use","category":"dev","description":{"zh":"Model-agnostic Computer Use for DeepSeek Harness: isolated browser, Windows native helper, third-party vision perception, and a Chrome Cookie Bridge.","en":"Model-agnostic Computer Use for DeepSeek Harness: isolated browser, Windows native helper, third-party vision perception, and a Chrome Cookie Bridge."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T08:28:36Z","updatedAt":"2026-08-14T08:28:42Z","createdAt":"2026-08-14T08:28:32Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-computer-use","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7b45ffec5c844001cd85c50b408b9091965fb32b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:36.867Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:36.867Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"xiaoheizi1212/dsh-computer-use@7b45ffec5c844001cd85c50b408b9091965fb32b#scan-2","versionCount":1,"latestCommit":"7b45ffec5c844001cd85c50b408b9091965fb32b","latestCheckedAt":"2026-09-08T00:00:36.867Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"us/dsh-crw","order":589,"name":"dsh-crw","owner":"us","repo":"us/dsh-crw","url":"https://github.com/us/dsh-crw","category":"dev","description":{"zh":"fastCRW-backed web_search and web_fetch providers for DeepSeek Harness (ctx.web)","en":"fastCRW-backed web_search and web_fetch providers for DeepSeek Harness (ctx.web)"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T20:57:03Z","updatedAt":"2026-08-14T20:59:01Z","createdAt":"2026-08-14T20:56:13Z","license":"MIT","language":"TypeScript","homepage":"https://fastcrw.com","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-crw","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1f5d071324b7af377016e1e49695e98fe80f5957","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:14.255Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:14.255Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml","src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"us/dsh-crw@1f5d071324b7af377016e1e49695e98fe80f5957#scan-2","versionCount":1,"latestCommit":"1f5d071324b7af377016e1e49695e98fe80f5957","latestCheckedAt":"2026-09-02T00:01:14.255Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"niuniu-sir/dsh-data-ledger","order":590,"name":"dsh-data-ledger","owner":"Niuniu-Sir","repo":"Niuniu-Sir/dsh-data-ledger","url":"https://github.com/Niuniu-Sir/dsh-data-ledger","category":"session","description":{"zh":"数据台账：DeepSeek Harness 本地数据统一看板——对话/账本/技能/记忆/日志的来源、位置与内容摘要，回收站删除、浏览器存储清理（dsh-plugin）","en":"数据台账：DeepSeek Harness 本地数据统一看板——对话/账本/技能/记忆/日志的来源、位置与内容摘要，回收站删除、浏览器存储清理（dsh-plugin）"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T10:59:45Z","updatedAt":"2026-08-14T10:59:52Z","createdAt":"2026-08-14T09:08:45Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-data-ledger","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.mjs","client/main.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6e1496d75f23699386793aaa6ce8324ba3cd7a17","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:02:09.831Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:02:09.831Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/main.js"]}],"filesInspected":["package.json","lib/index.mjs","client/main.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"niuniu-sir/dsh-data-ledger@6e1496d75f23699386793aaa6ce8324ba3cd7a17#scan-2","versionCount":1,"latestCommit":"6e1496d75f23699386793aaa6ce8324ba3cd7a17","latestCheckedAt":"2026-09-05T00:02:09.831Z","diffSeverity":"baseline","verificationScore":4,"verificationPossible":7}},{"id":"golitter/dsh-deepseek-billing","order":591,"name":"dsh-deepseek-billing","owner":"golitter","repo":"golitter/dsh-deepseek-billing","url":"https://github.com/golitter/dsh-deepseek-billing","category":"tools","description":{"zh":"在 DSH 中查看 DeepSeek API 账户余额及计费信息","en":"在 DSH 中查看 DeepSeek API 账户余额及计费信息"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T11:59:56Z","updatedAt":"2026-08-14T12:00:07Z","createdAt":"2026-08-14T11:30:17Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-deepseek-billing","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8f4420fbfa7bb546616baaea63a01792bc48a39a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:25.909Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:00:25.909Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索"]},"passport":{"evidenceId":"golitter/dsh-deepseek-billing@8f4420fbfa7bb546616baaea63a01792bc48a39a#scan-2","versionCount":1,"latestCommit":"8f4420fbfa7bb546616baaea63a01792bc48a39a","latestCheckedAt":"2026-09-05T00:00:25.909Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"tecfancy/dsh-deeptutor","order":592,"name":"dsh-deeptutor","owner":"TecFancy","repo":"TecFancy/dsh-deeptutor","url":"https://github.com/TecFancy/dsh-deeptutor","category":"tools","description":{"zh":"DeepTutor bridge bundle for DeepSeek Harness (dsh): learning capabilities, knowledge bases & note archiving. | DeepTutor 桥接插件(bundle),为 DeepSeek Harness 提供学习能力、知识库与笔记归档工具。","en":"DeepTutor bridge bundle for DeepSeek Harness (dsh): learning capabilities, knowledge bases & note archiving. | DeepTutor 桥接插件(bundle),为 DeepSeek Harness 提供学习能力、知识库与笔记归档工具。"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T12:30:29Z","updatedAt":"2026-08-14T12:30:32Z","createdAt":"2026-08-13T15:26:43Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-deeptutor","version":"0.1.9","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0cb81a7c7e4153f9fec58f084ad2ba1e70dbc04c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:31.832Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:31.832Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"tecfancy/dsh-deeptutor@0cb81a7c7e4153f9fec58f084ad2ba1e70dbc04c#scan-2","versionCount":1,"latestCommit":"0cb81a7c7e4153f9fec58f084ad2ba1e70dbc04c","latestCheckedAt":"2026-09-04T12:00:31.832Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zhaiyateng/dsh-design-skills","order":593,"name":"dsh-design-skills","owner":"zhaiyateng","repo":"zhaiyateng/dsh-design-skills","url":"https://github.com/zhaiyateng/dsh-design-skills","category":"tools","description":{"zh":"Design aesthetics skill pack for DeepSeek Harness (DSH) - keeps vibe-coded websites away from the AI look. 6 styles: dark-saas, apple-minimal, neo-neumorphism, brutalism, glassmorphism, japanese-minimal.","en":"Design aesthetics skill pack for DeepSeek Harness (DSH) - keeps vibe-coded websites away from the AI look. 6 styles: dark-saas, apple-minimal, neo-neumorphism, brutalism, glassmorphism, japanese-minimal."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T17:00:37Z","updatedAt":"2026-08-14T16:23:18Z","createdAt":"2026-08-14T16:15:16Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-design-skills","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:00:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:00:50.641Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"2002yxy/dsh-nailong-desktop-pet","order":594,"name":"dsh-desktop-pet","owner":"2002yxy","repo":"2002yxy/dsh-nailong-desktop-pet","url":"https://github.com/2002yxy/dsh-nailong-desktop-pet","category":"fun","description":{"zh":"Nailong (奶龙) desktop-pet plugin for DeepSeek Harness","en":"Nailong (奶龙) desktop-pet plugin for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T17:00:43Z","updatedAt":"2026-08-14T14:09:38Z","createdAt":"2026-08-14T13:45:16Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-desktop-pet","version":"0.1.0-alpha.2","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:00:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:00:50.832Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"screenedCommit":null},{"id":"ylifeonlyonce/dsh-dynamic-island","order":595,"name":"dsh-dynamic-island","owner":"YLifeOnlyOnce","repo":"YLifeOnlyOnce/dsh-dynamic-island","url":"https://github.com/YLifeOnlyOnce/dsh-dynamic-island","category":"workflow","description":{"zh":"A tiny glass companion for DeepSeek Harness — it breathes while the agent thinks, pulses while it works, and politely checks with you before touching anything.  🍎 Liquid Glass looks · 🌱 zero extra dependencies · 👀 always knows what your agent is up to；给 DeepSeek Harness 的一只小玻璃伙伴——Agent 思考时它轻轻呼吸，干活时它微微脉动，要动你的东西之前，它还会先礼貌地问你一声。","en":"A tiny glass companion for DeepSeek Harness — it breathes while the agent thinks, pulses while it works, and politely checks with you before touching anything.  🍎 Liquid Glass looks · 🌱 zero extra dependencies · 👀 always knows what your agent is up to；给 DeepSeek Harness 的一只小玻璃伙伴——Agent 思考时它轻轻呼吸，干活时它微微脉动，要动你的东西之前，它还会先礼貌地问你一声。"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T13:00:22Z","updatedAt":"2026-08-14T11:53:59Z","createdAt":"2026-08-14T11:25:17Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-dynamic-island","version":"0.3.5","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d92f9bc83d20949b5f1beec1fd0051f9386a8b63","installCommand":"dsh plugin --profile web add github:YLifeOnlyOnce/dsh-dynamic-island#d92f9bc83d20949b5f1beec1fd0051f9386a8b63","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:27.389Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-04T12:00:27.389Z","findings":[],"filesInspected":["package.json","src/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"ylifeonlyonce/dsh-dynamic-island@d92f9bc83d20949b5f1beec1fd0051f9386a8b63#scan-2","versionCount":1,"latestCommit":"d92f9bc83d20949b5f1beec1fd0051f9386a8b63","latestCheckedAt":"2026-09-04T12:00:27.389Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"mbj733/dsh-edit-resend","order":596,"name":"dsh-edit-resend","owner":"mbj733","repo":"mbj733/dsh-edit-resend","url":"https://github.com/mbj733/dsh-edit-resend","category":"tools","description":{"zh":"DeepSeek Harness (DSH) plugin: edit sent messages and resend (stop an in-flight reply, edit, resend), plus branch-based edit / reroll / retry and a version timeline.","en":"DeepSeek Harness (DSH) plugin: edit sent messages and resend (stop an in-flight reply, edit, resend), plus branch-based edit / reroll / retry and a version timeline."},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T19:00:29Z","updatedAt":"2026-08-14T18:55:10Z","createdAt":"2026-08-14T14:56:22Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-edit-resend","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.mjs","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a17721bc62e732f950b5891b510981f1e8c9a5d2","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:08.635Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:08.635Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.mjs"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.mjs"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.mjs","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"mbj733/dsh-edit-resend@a17721bc62e732f950b5891b510981f1e8c9a5d2#scan-2","versionCount":1,"latestCommit":"a17721bc62e732f950b5891b510981f1e8c9a5d2","latestCheckedAt":"2026-09-02T12:01:08.635Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"wuykjl/dsh-equip-engine","order":597,"name":"dsh-equip-engine","owner":"wuykjl","repo":"wuykjl/dsh-equip-engine","url":"https://github.com/wuykjl/dsh-equip-engine","category":"tools","description":{"zh":"dsh-equip-engine","en":"dsh-equip-engine"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T19:27:53Z","updatedAt":"2026-08-14T19:28:12Z","createdAt":"2026-08-14T18:33:12Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-equip-engine","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","src/plugin.js"],"invalidDeclaredPaths":[]},"screenedCommit":"95110d4d27d6806377a9c97f7e3be8fe4fec73b6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:08.449Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:08.449Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","src/plugin.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"wuykjl/dsh-equip-engine@95110d4d27d6806377a9c97f7e3be8fe4fec73b6#scan-2","versionCount":1,"latestCommit":"95110d4d27d6806377a9c97f7e3be8fe4fec73b6","latestCheckedAt":"2026-09-02T12:01:08.449Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"zhn1100/dsh-forge","order":598,"name":"dsh-forge","owner":"zhn1100","repo":"zhn1100/dsh-forge","url":"https://github.com/zhn1100/dsh-forge","category":"tools","description":{"zh":"Reproducible DeepSeek Harness plugin development environment","en":"Reproducible DeepSeek Harness plugin development environment"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T16:29:01Z","updatedAt":"2026-08-14T16:30:09Z","createdAt":"2026-08-14T16:28:41Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-forge","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T16:30:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T16:30:50.759Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"screenedCommit":null},{"id":"perrylink/dsh-github","order":599,"name":"dsh-github","owner":"PerryLink","repo":"PerryLink/dsh-github","url":"https://github.com/PerryLink/dsh-github","category":"tools","description":{"zh":"GitHub integration for DeepSeek Harness: create PRs, review PRs in background jobs, read issues - every write gated by human approval","en":"GitHub integration for DeepSeek Harness: create PRs, review PRs in background jobs, read issues - every write gated by human approval"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T10:00:22Z","updatedAt":"2026-08-14T10:00:38Z","createdAt":"2026-08-13T19:12:59Z","license":"Apache-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-github","version":"0.4.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T10:00:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T10:00:51.072Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"screenedCommit":null},{"id":"stardustlc666/dsh-hyperframes","order":600,"name":"dsh-hyperframes","owner":"STARDUSTLC666","repo":"STARDUSTLC666/dsh-hyperframes","url":"https://github.com/STARDUSTLC666/dsh-hyperframes","category":"tools","description":{"zh":"DSH 视频创作技能插件：注册 HyperFrames by HeyGen 官方移植技能五件套（HTML 写视频/CLI/注册表/网址转视频/GSAP），安装即用。· HyperFrames skill plugin for DeepSeek Harness.","en":"DSH 视频创作技能插件：注册 HyperFrames by HeyGen 官方移植技能五件套（HTML 写视频/CLI/注册表/网址转视频/GSAP），安装即用。· HyperFrames skill plugin for DeepSeek Harness."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T20:28:37Z","updatedAt":"2026-08-14T20:28:52Z","createdAt":"2026-08-14T20:28:32Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"missing","branch":"master","kinds":[],"packageName":null,"version":null,"lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":[],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-15T12:00:06.901Z"},"screening":{"version":1,"scope":"manifest","state":"review","risk":"unknown","checkedAt":"2026-08-15T12:00:06.901Z","findings":[{"id":"current-inspection-error","severity":"medium","label":{"zh":"当前仓库无法完成检查，安装命令已暂时撤回","en":"The current repository inspection could not complete; the install command was withdrawn"},"files":["package.json"]}],"filesInspected":["package.json"],"checks":{"manifest":false,"license":false,"readme":false,"lockfile":false,"source":false,"securityDisclosure":false}},"attention":{"level":"review","reasons":["当前仓库无法完成检查，安装命令已暂时撤回"]},"screenedCommit":null},{"id":"spyqwer1/dsh-imagecraft","order":601,"name":"dsh-imagecraft","owner":"SPYQWER1","repo":"SPYQWER1/dsh-imagecraft","url":"https://github.com/SPYQWER1/dsh-imagecraft","category":"tools","description":{"zh":"dsh-imagecraft","en":"dsh-imagecraft"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T11:30:02Z","updatedAt":"2026-08-14T11:30:03Z","createdAt":"2026-08-14T07:21:23Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-codex-tools","version":"1.0.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"68efb8c16bcfb208a4b118b4827e878837630ff7","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:02:10.096Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:02:10.096Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"spyqwer1/dsh-imagecraft@68efb8c16bcfb208a4b118b4827e878837630ff7#scan-2","versionCount":1,"latestCommit":"68efb8c16bcfb208a4b118b4827e878837630ff7","latestCheckedAt":"2026-09-05T00:02:10.096Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"plutokeating/dsh-lark-bot","order":602,"name":"dsh-lark-bot","owner":"PlutoKeating","repo":"PlutoKeating/dsh-lark-bot","url":"https://github.com/PlutoKeating/dsh-lark-bot","category":"notify","description":{"zh":"dsh-lark-bot：把 DeepSeek Harness (dsh) 桥接进飞书/Lark 的 bot，含完整项目工作区管理。A bridge bot connecting DeepSeek Harness (dsh) into Feishu/Lark with full workspace management. deepseek · deepseek harness · feishu · lark · bridge · bot","en":"dsh-lark-bot：把 DeepSeek Harness (dsh) 桥接进飞书/Lark 的 bot，含完整项目工作区管理。A bridge bot connecting DeepSeek Harness (dsh) into Feishu/Lark with full workspace management. deepseek · deepseek harness · feishu · lark · bridge · bot"},"added":"2026-08-14","curated":false,"topic":true,"stars":20,"forks":3,"openIssues":28,"watchers":20,"pushedAt":"2026-08-17T11:48:18Z","updatedAt":"2026-08-17T11:48:41Z","createdAt":"2026-08-13T20:03:14Z","license":"AGPL-3.0","language":"TypeScript","homepage":"https://dshfind.com/zh/plugins/PlutoKeating/dsh-lark-bot","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-lark-bot","version":"0.15.0","lifecycleScripts":["prepare"],"runtimeDependencies":9,"declaredPaths":["cordis.patch.yml","dist/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8a49bed51661f565a32268d26475eca82760d393","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-17T12:00:53.556Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-17T12:00:53.556Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"plutokeating/dsh-lark-bot@8a49bed51661f565a32268d26475eca82760d393#scan-2","versionCount":1,"latestCommit":"8a49bed51661f565a32268d26475eca82760d393","latestCheckedAt":"2026-08-17T12:00:53.556Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"yeruizhi/dsh-lark-meeting-notifier","order":603,"name":"dsh-lark-meeting-notifier","owner":"yeruizhi","repo":"yeruizhi/dsh-lark-meeting-notifier","url":"https://github.com/yeruizhi/dsh-lark-meeting-notifier","category":"notify","description":{"zh":"飞书会议提醒插件：唯一副作用是在你跟 AI 聊得神魂颠倒时，提醒你「该去跟碳基生命开会了」。","en":"飞书会议提醒插件：唯一副作用是在你跟 AI 聊得神魂颠倒时，提醒你「该去跟碳基生命开会了」。"},"added":"2026-08-14","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-14T14:30:01Z","updatedAt":"2026-08-14T14:30:17Z","createdAt":"2026-08-14T12:48:29Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-lark-meeting-notifier","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"65782f8d13f79143af86fec1628dfa0918af335f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:35.270Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:35.270Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"yeruizhi/dsh-lark-meeting-notifier@65782f8d13f79143af86fec1628dfa0918af335f#scan-2","versionCount":1,"latestCommit":"65782f8d13f79143af86fec1628dfa0918af335f","latestCheckedAt":"2026-09-04T00:00:35.270Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"omdsh-dev/dsh-llm-fallbacks","order":604,"name":"dsh-llm-fallbacks","owner":"omdsh-dev","repo":"omdsh-dev/dsh-llm-fallbacks","url":"https://github.com/omdsh-dev/dsh-llm-fallbacks","category":"dev","description":{"zh":"An dsh plugin for role-based LLM retry&fallback strategy. 基于角色的模型重试备用策略插件","en":"An dsh plugin for role-based LLM retry&fallback strategy. 基于角色的模型重试备用策略插件"},"added":"2026-08-14","curated":false,"topic":true,"stars":5,"forks":1,"openIssues":0,"watchers":5,"pushedAt":"2026-08-15T23:30:03Z","updatedAt":"2026-08-15T23:29:27Z","createdAt":"2026-08-07T16:53:10Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-llm-fallbacks","version":"0.1.6","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["bundle/cordis.patch.yml","dist/index.js","dist/client/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"e81a5622429a0d1866e67da7dbc7635e59b74bc8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-15T23:30:06.827Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T23:30:11.658Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","bundle/cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]},"codexPick":{"repo":"omdsh-dev/dsh-llm-fallbacks","pickedAt":"2026-08-20T12:37:35.138Z","reviewedCommit":"b6c2bccd869999b0319d902c27a25680a3b384ab","category":"workflow","summary":{"zh":"在 LLM 重试耗尽、鉴权、额度或限流失败时，按角色和时段切换到备用 provider/model，让当前步骤继续运行；v0.3.2 补齐 dsh-tui 的可写 /settings 配置。","en":"Switches to backup provider/model routes by role and time slot after exhausted retries, auth, quota, or rate-limit failures so the current step can continue; v0.3.2 adds writable /settings parity for dsh-tui."},"reason":{"zh":"v0.3.2 的 npm 包带 provenance，gitHead 与已核实提交一致；CI 的测试和构建均通过，registry 包预构建 dist，只有一个运行时依赖。新版还支持模型 ID 中包含斜杠，并提供预置角色恢复命令。","en":"The v0.3.2 npm package carries provenance and its gitHead matches the verified commit; CI tests and build pass, the registry package ships prebuilt dist, and it has one runtime dependency. This release also accepts model IDs containing slashes and adds a seeded-role revert command."},"safety":{"risk":"medium","zh":"中风险：插件会拦截请求失败并把当前任务透明切换到另一家已配置模型服务，提示词和代码可能因此流向备用供应商；角色自动匹配还会发起一次受限模型判断，并且 Web/TUI 都能改写回退设置。运行时代码未发现直接网络请求、凭据读取、遥测或 Shell；仓库里的会话日志修复脚本不会由插件自动执行，必须显式使用 --apply --backup。建议只把可信供应商放进链，并限制自动切换范围。","en":"Medium risk: the plugin intercepts request failures and transparently reroutes the current task to another configured model service, so prompts and code may reach fallback providers; role auto-match can issue one bounded model judgment, and both Web and TUI can rewrite fallback settings. Runtime code contains no direct network call, credential read, telemetry, or shell execution. The repository repair script is not run by the plugin and requires explicit --apply --backup. Keep only trusted providers in chains and constrain automatic switching."}}},{"id":"caopu16/dsh-llm-kiro","order":605,"name":"dsh-llm-kiro","owner":"caopu16","repo":"caopu16/dsh-llm-kiro","url":"https://github.com/caopu16/dsh-llm-kiro","category":"dev","description":{"zh":"deepseek-harness 的插件，可以使用kiro的模型（claude系列）和账号","en":"deepseek-harness 的插件，可以使用kiro的模型（claude系列）和账号"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T09:00:15Z","updatedAt":"2026-08-14T09:00:33Z","createdAt":"2026-08-14T05:52:09Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-llm-kiro","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"94ca2c2e55d0d95612ba2613010b0fefaf3101f6","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:34.474Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:34.474Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","cordis.patch.yml","src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"caopu16/dsh-llm-kiro@94ca2c2e55d0d95612ba2613010b0fefaf3101f6#scan-2","versionCount":1,"latestCommit":"94ca2c2e55d0d95612ba2613010b0fefaf3101f6","latestCheckedAt":"2026-09-08T00:00:34.474Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"labmimors/dsh-mcp-lens","order":606,"name":"dsh-mcp-lens","owner":"labmimors","repo":"labmimors/dsh-mcp-lens","url":"https://github.com/labmimors/dsh-mcp-lens","category":"tools","description":{"zh":"Shrink MCP context in DeepSeek Harness: 1,000 remote tools behind 2 exact-schema interfaces, with a measured V4 Flash cost pilot.","en":"Shrink MCP context in DeepSeek Harness: 1,000 remote tools behind 2 exact-schema interfaces, with a measured V4 Flash cost pilot."},"added":"2026-08-14","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":4,"watchers":4,"pushedAt":"2026-08-15T19:30:04Z","updatedAt":"2026-08-15T17:30:53Z","createdAt":"2026-08-14T13:41:49Z","license":"MIT","language":"TypeScript","homepage":"https://deepseek-harness-mcp-lens.charmingkla.chatgpt.site","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-mcp-lens","version":"0.1.0-rc.9","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d6ff88b976ad2898786049bbeb1f29f85ee492e3","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-27T00:00:18.611Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-27T00:00:18.611Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"labmimors/dsh-mcp-lens@d6ff88b976ad2898786049bbeb1f29f85ee492e3#scan-2","versionCount":1,"latestCommit":"d6ff88b976ad2898786049bbeb1f29f85ee492e3","latestCheckedAt":"2026-08-27T00:00:18.611Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"aka-danielzhang/dsh-mcp-settings","order":607,"name":"dsh-mcp-settings","owner":"aka-danielZhang","repo":"aka-danielZhang/dsh-mcp-settings","url":"https://github.com/aka-danielZhang/dsh-mcp-settings","category":"tools","description":{"zh":"DSH bundle for MCP server management, inventory status, and Web settings","en":"DSH bundle for MCP server management, inventory status, and Web settings"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T17:59:58Z","updatedAt":"2026-08-14T17:54:02Z","createdAt":"2026-08-14T17:43:12Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-mcp-settings","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T18:00:45.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T18:00:51.038Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"tsonglew/dsh-media-preview","order":608,"name":"dsh-media-preview","owner":"tsonglew","repo":"tsonglew/dsh-media-preview","url":"https://github.com/tsonglew/dsh-media-preview","category":"ui","description":{"zh":"Audio/video preview viewer for dsh-better-sidebar: native playback with Range-seeking streaming route","en":"Audio/video preview viewer for dsh-better-sidebar: native playback with Range-seeking streaming route"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T13:30:41Z","updatedAt":"2026-08-14T13:27:29Z","createdAt":"2026-08-14T13:17:49Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-media-preview","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ef9685c9b4f0f4e3c810ebf520d3f67d099b1e39","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:44.809Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:44.809Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"tsonglew/dsh-media-preview@ef9685c9b4f0f4e3c810ebf520d3f67d099b1e39#scan-2","versionCount":1,"latestCommit":"ef9685c9b4f0f4e3c810ebf520d3f67d099b1e39","latestCheckedAt":"2026-09-04T00:00:44.809Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"yiyan129600/dsh-mobile-access","order":609,"name":"dsh-mobile-access","owner":"YiYan129600","repo":"YiYan129600/dsh-mobile-access","url":"https://github.com/YiYan129600/dsh-mobile-access","category":"tools","description":{"zh":"DeepSeek Harness plugin: one-page mobile access setup — Tailscale/LAN detection, scan-to-open QR (offline), insecure-origin polyfill","en":"DeepSeek Harness plugin: one-page mobile access setup — Tailscale/LAN detection, scan-to-open QR (offline), insecure-origin polyfill"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:00:00Z","updatedAt":"2026-08-14T14:00:08Z","createdAt":"2026-08-14T13:59:55Z","license":null,"language":null,"homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","plugin"],"packageName":"dsh-mobile-access","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T14:00:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T14:00:52.216Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["lib/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现网络监听能力，需确认监听地址与认证","发现 HTML 或 SVG 主动内容处理能力"]},"screenedCommit":null},{"id":"mafeis/dsh-net-proxy","order":610,"name":"dsh-net-proxy","owner":"mafeis","repo":"mafeis/dsh-net-proxy","url":"https://github.com/mafeis/dsh-net-proxy","category":"tools","description":{"zh":"dsh-net-proxy","en":"dsh-net-proxy"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T12:29:28Z","updatedAt":"2026-08-14T12:29:48Z","createdAt":"2026-08-14T10:05:21Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-net-proxy","version":"0.2.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ca52e9680145b063c05a2ee9cfb5938e0e3169c9","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:35.157Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:35.157Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力"]},"passport":{"evidenceId":"mafeis/dsh-net-proxy@ca52e9680145b063c05a2ee9cfb5938e0e3169c9#scan-2","versionCount":1,"latestCommit":"ca52e9680145b063c05a2ee9cfb5938e0e3169c9","latestCheckedAt":"2026-09-04T12:00:35.157Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"yangyongzhen/dsh-notify","order":611,"name":"dsh-notify","owner":"yangyongzhen","repo":"yangyongzhen/dsh-notify","url":"https://github.com/yangyongzhen/dsh-notify","category":"notify","description":{"zh":"Task-completion notifications for DeepSeek Harness: ServerChan / DingTalk / Feishu / generic webhooks. dsh plugin.","en":"Task-completion notifications for DeepSeek Harness: ServerChan / DingTalk / Feishu / generic webhooks. dsh plugin."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T09:30:07Z","updatedAt":"2026-08-14T09:30:34Z","createdAt":"2026-08-14T09:24:56Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-notify","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"710a154e3ad722b0b8d069b2f764f79d2c020e17","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:39.798Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-07T00:00:39.798Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"yangyongzhen/dsh-notify@710a154e3ad722b0b8d069b2f764f79d2c020e17#scan-2","versionCount":1,"latestCommit":"710a154e3ad722b0b8d069b2f764f79d2c020e17","latestCheckedAt":"2026-09-07T00:00:39.798Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"hoshino-yumetsuki/dsh-onebot","order":612,"name":"dsh-onebot","owner":"Hoshino-Yumetsuki","repo":"Hoshino-Yumetsuki/dsh-onebot","url":"https://github.com/Hoshino-Yumetsuki/dsh-onebot","category":"tools","description":{"zh":"OneBot Adapter For DSH","en":"OneBot Adapter For DSH"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T17:29:37Z","updatedAt":"2026-08-14T17:30:32Z","createdAt":"2026-08-14T16:34:05Z","license":"MPL-2.0","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-onebot","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:30:52.602Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"zhang66633/dsh-plugin-installer","order":613,"name":"dsh-plugin-installer","owner":"zhang66633","repo":"zhang66633/dsh-plugin-installer","url":"https://github.com/zhang66633/dsh-plugin-installer","category":"tools","description":{"zh":"dsh-plugin-installer","en":"dsh-plugin-installer"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T11:30:14Z","updatedAt":"2026-08-14T11:30:24Z","createdAt":"2026-08-14T01:56:46Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-installer","version":"2.0.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"3b24f5d5089a4edfe8f6ee6c908cf127297a695b","installCommand":"dsh plugin --profile web add github:zhang66633/dsh-plugin-installer#3b24f5d5089a4edfe8f6ee6c908cf127297a695b","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:35.321Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-05T00:00:35.321Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"zhang66633/dsh-plugin-installer@3b24f5d5089a4edfe8f6ee6c908cf127297a695b#scan-2","versionCount":1,"latestCommit":"3b24f5d5089a4edfe8f6ee6c908cf127297a695b","latestCheckedAt":"2026-09-05T00:00:35.321Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"liqichen/dsh-plugin-manager","order":614,"name":"dsh-plugin-manager","owner":"liqichen","repo":"liqichen/dsh-plugin-manager","url":"https://github.com/liqichen/dsh-plugin-manager","category":"ui","description":{"zh":"DSH 插件管理器:在 DeepSeek Harness 设置面板内嵌 GUI,管理 MCP 服务 / Skills / 内置插件包,改动热生效无需重启","en":"DSH 插件管理器:在 DeepSeek Harness 设置面板内嵌 GUI,管理 MCP 服务 / Skills / 内置插件包,改动热生效无需重启"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T17:30:27Z","updatedAt":"2026-08-14T17:12:44Z","createdAt":"2026-08-14T17:02:26Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-manager","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js","client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:30:50.714Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client.js"]}],"filesInspected":["package.json","index.js","client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现主动网络请求能力"]},"screenedCommit":null},{"id":"huguangyu666/dsh-plugin-notify","order":615,"name":"dsh-plugin-notify","owner":"huguangyu666","repo":"huguangyu666/dsh-plugin-notify","url":"https://github.com/huguangyu666/dsh-plugin-notify","category":"workflow","description":{"zh":"DeepSeek Harness 插件：通知出口——agent 通过桌面通知 / 中文语音播报 / 提示音主动联系用户（长任务完成、出错、呼叫用户回来）。Windows 本机零依赖。","en":"DeepSeek Harness 插件：通知出口——agent 通过桌面通知 / 中文语音播报 / 提示音主动联系用户（长任务完成、出错、呼叫用户回来）。Windows 本机零依赖。"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T18:00:41Z","updatedAt":"2026-08-14T17:54:55Z","createdAt":"2026-08-14T13:12:03Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-notify","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T18:00:45.438Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T18:00:49.977Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"mervyn-teo/dsh-plugin-qr-connect","order":616,"name":"dsh-plugin-qr-connect","owner":"mervyn-teo","repo":"mervyn-teo/dsh-plugin-qr-connect","url":"https://github.com/mervyn-teo/dsh-plugin-qr-connect","category":"ui","description":{"zh":"DeepSeek Harness dynamic plugin: QR-code sidebar button for connecting mobile devices to the web UI","en":"DeepSeek Harness dynamic plugin: QR-code sidebar button for connecting mobile devices to the web UI"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T12:59:41Z","updatedAt":"2026-08-14T13:00:37Z","createdAt":"2026-08-14T11:05:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-qr-connect","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"430ad448366fdf5303674295c793f85240ce0da5","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:30.886Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:30.886Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力"]},"passport":{"evidenceId":"mervyn-teo/dsh-plugin-qr-connect@430ad448366fdf5303674295c793f85240ce0da5#scan-2","versionCount":1,"latestCommit":"430ad448366fdf5303674295c793f85240ce0da5","latestCheckedAt":"2026-09-04T12:00:30.886Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"huguangyu666/dsh-plugin-session-import","order":617,"name":"dsh-plugin-session-import","owner":"huguangyu666","repo":"huguangyu666/dsh-plugin-session-import","url":"https://github.com/huguangyu666/dsh-plugin-session-import","category":"session","description":{"zh":"DeepSeek Harness plugin: import claude-code / codex / reasonix / zcode sessions","en":"DeepSeek Harness plugin: import claude-code / codex / reasonix / zcode sessions"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T19:59:01Z","updatedAt":"2026-08-14T19:59:05Z","createdAt":"2026-08-13T22:17:19Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-plugin-session-import","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"13139abe5820ea07bf5a89cef36801ee17987aa0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:05.340Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:05.340Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"huguangyu666/dsh-plugin-session-import@13139abe5820ea07bf5a89cef36801ee17987aa0#scan-2","versionCount":1,"latestCommit":"13139abe5820ea07bf5a89cef36801ee17987aa0","latestCheckedAt":"2026-09-02T12:01:05.340Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"yoke233/dsh-prime-agent","order":618,"name":"dsh-prime-agent","owner":"yoke233","repo":"yoke233/dsh-prime-agent","url":"https://github.com/yoke233/dsh-prime-agent","category":"workflow","description":{"zh":"Prime Agent-inspired persistent RLM control plane for DeepSeek Harness Code Mode","en":"Prime Agent-inspired persistent RLM control plane for DeepSeek Harness Code Mode"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T10:30:12Z","updatedAt":"2026-08-14T10:18:49Z","createdAt":"2026-08-13T16:25:39Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-prime-agent","version":"0.2.0","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T10:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T10:30:51.345Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件","发现遥测或分析服务线索"]},"screenedCommit":null},{"id":"slowdownnn/dsh-read-history","order":619,"name":"dsh-read-history","owner":"Slowdownnn","repo":"Slowdownnn/dsh-read-history","url":"https://github.com/Slowdownnn/dsh-read-history","category":"session","description":{"zh":"迁移claude/codex的对话历史到dsh","en":"迁移claude/codex的对话历史到dsh"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T09:00:08Z","updatedAt":"2026-08-14T09:00:21Z","createdAt":"2026-08-14T08:20:06Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-read-history","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"0cfcc39713507a8def41c4be50020ee078ef298a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:34.394Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:34.394Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现主动网络请求能力"]},"passport":{"evidenceId":"slowdownnn/dsh-read-history@0cfcc39713507a8def41c4be50020ee078ef298a#scan-2","versionCount":1,"latestCommit":"0cfcc39713507a8def41c4be50020ee078ef298a","latestCheckedAt":"2026-09-08T00:00:34.394Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"limbo947/dsh-recall-plugin","order":620,"name":"dsh-recall-plugin","owner":"limbo947","repo":"limbo947/DSH-recall-plugin","url":"https://github.com/limbo947/DSH-recall-plugin","category":"tools","description":{"zh":"DSH 消息撤回插件：回到发送该消息时的状态","en":"DSH 消息撤回插件：回到发送该消息时的状态"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T19:30:43Z","updatedAt":"2026-08-14T19:30:42Z","createdAt":"2026-08-14T17:43:10Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-recall-plugin","version":"2.3.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ef3d7f9e7b74725004bd4866a30ee44d61806583","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:06.560Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:06.560Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"limbo947/dsh-recall-plugin@ef3d7f9e7b74725004bd4866a30ee44d61806583#scan-2","versionCount":1,"latestCommit":"ef3d7f9e7b74725004bd4866a30ee44d61806583","latestCheckedAt":"2026-09-02T12:01:06.560Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"flymysql/dsh-remote","order":621,"name":"dsh-remote","owner":"flymysql","repo":"flymysql/dsh-remote","url":"https://github.com/flymysql/dsh-remote","category":"tools","description":{"zh":"Remote-access assistant for DeepSeek Harness: /remote command and settings page printing the exact SSH tunnel / reverse-tunnel / reverse-proxy commands (harness intentionally binds loopback only)","en":"Remote-access assistant for DeepSeek Harness: /remote command and settings page printing the exact SSH tunnel / reverse-tunnel / reverse-proxy commands (harness intentionally binds loopback only)"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T10:00:26Z","updatedAt":"2026-08-14T10:00:44Z","createdAt":"2026-08-14T04:26:57Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-remote","version":"0.8.13","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d558df2968dbf416356e4f126e1fa03a1e274980","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:38.685Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-07T00:00:38.685Z","findings":[{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现主动网络请求能力","发现环境变量、密钥或凭据访问线索","发现遥测或分析服务线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"flymysql/dsh-remote@d558df2968dbf416356e4f126e1fa03a1e274980#scan-2","versionCount":1,"latestCommit":"d558df2968dbf416356e4f126e1fa03a1e274980","latestCheckedAt":"2026-09-07T00:00:38.685Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"liguobao/deepseek-harness-remote","order":622,"name":"dsh-remote","owner":"liguobao","repo":"liguobao/deepseek-harness-remote","url":"https://github.com/liguobao/deepseek-harness-remote","category":"dev","description":{"zh":"基于 DeepSeek Harness 插件机制的多端远程访问方案，让桌面端与 Android 端安全连接并操作远程 Harness。（A multi-device remote access solution built on the DeepSeek Harness plugin system, enabling desktop and Android clients to securely connect to and operate a remote Harness.）","en":"基于 DeepSeek Harness 插件机制的多端远程访问方案，让桌面端与 Android 端安全连接并操作远程 Harness。（A multi-device remote access solution built on the DeepSeek Harness plugin system, enabling desktop and Android clients to securely connect to and operate a remote Harness.）"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-15T01:28:51Z","updatedAt":"2026-08-15T01:28:57Z","createdAt":"2026-08-14T15:33:53Z","license":null,"language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-remote","version":"0.2.8","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","index.js","packages/plugin/dist/client.github.js"],"invalidDeclaredPaths":[]},"screenedCommit":"b3f523d1b8e6a5e8f7d60bddcd43c6e463de41ba","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-15T01:30:06.878Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T01:30:13.447Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["packages/plugin/dist/client.github.js"]}],"filesInspected":["package.json","index.js","packages/plugin/dist/client.github.js","cordis.patch.yml"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证","仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]}},{"id":"stardustlc666/dsh-remotion","order":623,"name":"dsh-remotion","owner":"STARDUSTLC666","repo":"STARDUSTLC666/dsh-remotion","url":"https://github.com/STARDUSTLC666/dsh-remotion","category":"tools","description":{"zh":"DSH 视频创作技能插件：注册 Remotion 官方移植技能（React 编程式视频，38 个规则文件），安装即用。· Remotion skill plugin for DeepSeek Harness.","en":"DSH 视频创作技能插件：注册 Remotion 官方移植技能（React 编程式视频，38 个规则文件），安装即用。· Remotion skill plugin for DeepSeek Harness."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T20:28:28Z","updatedAt":"2026-08-14T20:28:46Z","createdAt":"2026-08-14T20:28:24Z","license":null,"language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-remotion","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"67ea0f0b328d609785bbf3a0f0b5cc52445d315d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:04.064Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:04.064Z","findings":[{"id":"license-missing","severity":"medium","label":{"zh":"仓库未声明可识别许可证","en":"No recognized repository license"},"files":[]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":false,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库未声明可识别许可证"]},"passport":{"evidenceId":"stardustlc666/dsh-remotion@67ea0f0b328d609785bbf3a0f0b5cc52445d315d#scan-2","versionCount":1,"latestCommit":"67ea0f0b328d609785bbf3a0f0b5cc52445d315d","latestCheckedAt":"2026-09-02T12:01:04.064Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"linxichen/dsh-rigorquant","order":624,"name":"dsh-rigorquant","owner":"linxichen","repo":"linxichen/dsh-rigorquant","url":"https://github.com/linxichen/dsh-rigorquant","category":"tools","description":{"zh":"Adds capability to Deepseek harness to do rigorous quant finance work","en":"Adds capability to Deepseek harness to do rigorous quant finance work"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T20:29:53Z","updatedAt":"2026-08-14T20:30:21Z","createdAt":"2026-08-14T17:00:09Z","license":"MIT","language":"Shell","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle"],"packageName":"dsh-rigorquant","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T20:30:45.418Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T20:30:50.572Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"screenedCommit":null},{"id":"asaiuta/dsh-session-hub","order":625,"name":"dsh-session-hub","owner":"Asaiuta","repo":"Asaiuta/dsh-session-hub","url":"https://github.com/Asaiuta/dsh-session-hub","category":"ui","description":{"zh":"Aggregate and natively control multiple remote DeepSeek Harness (DSH) servers' sessions from one official Web UI — hub gateway + official-UI bridge. 多服务器 DSH 会话聚合与原生操控","en":"Aggregate and natively control multiple remote DeepSeek Harness (DSH) servers' sessions from one official Web UI — hub gateway + official-UI bridge. 多服务器 DSH 会话聚合与原生操控"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T08:29:04Z","updatedAt":"2026-08-14T08:29:08Z","createdAt":"2026-08-13T18:33:57Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-session-hub","version":"0.1.0","lifecycleScripts":["prepare"],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fef18684e2112c2546f6098fd8aaf6e289126b95","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-08T00:00:35.726Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-08T00:00:35.726Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js","lib/client.js"]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"asaiuta/dsh-session-hub@fef18684e2112c2546f6098fd8aaf6e289126b95#scan-2","versionCount":1,"latestCommit":"fef18684e2112c2546f6098fd8aaf6e289126b95","latestCheckedAt":"2026-09-08T00:00:35.726Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"devmom/dsh-session-import","order":626,"name":"dsh-session-import","owner":"devmom","repo":"devmom/dsh-session-import","url":"https://github.com/devmom/dsh-session-import","category":"session","description":{"zh":"dsh-session-import","en":"dsh-session-import"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T18:28:23Z","updatedAt":"2026-08-14T18:28:27Z","createdAt":"2026-08-14T17:51:36Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-session-import","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":8,"declaredPaths":["cordis.patch.yml","dist/plugin.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"7e4f57d49525ca9bc527360f8ed467a1da5a4cea","installCommand":"dsh plugin --profile web add github:devmom/dsh-session-import#7e4f57d49525ca9bc527360f8ed467a1da5a4cea","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:14.155Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-02T12:01:14.155Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"devmom/dsh-session-import@7e4f57d49525ca9bc527360f8ed467a1da5a4cea#scan-2","versionCount":1,"latestCommit":"7e4f57d49525ca9bc527360f8ed467a1da5a4cea","latestCheckedAt":"2026-09-02T12:01:14.155Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"cokiscarazo-rgb/dsh-session-management","order":627,"name":"dsh-session-management","owner":"cokiscarazo-rgb","repo":"cokiscarazo-rgb/dsh-session-management","url":"https://github.com/cokiscarazo-rgb/dsh-session-management","category":"session","description":{"zh":"dsh-session-management","en":"dsh-session-management"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T13:00:19Z","updatedAt":"2026-08-14T12:21:25Z","createdAt":"2026-08-14T10:29:13Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-session-management","version":"1.0.6","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"ae5258e3e780d10c468268682169e7e5fe01e45b","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:27.607Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:27.607Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"shell-execution","severity":"medium","label":{"zh":"发现 Shell 或子进程调用","en":"Shell or subprocess execution signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["lib/client.js"]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现 Shell 或子进程调用","发现主动网络请求能力","发现 HTML 或 SVG 主动内容处理能力","发现遥测或分析服务线索"]},"passport":{"evidenceId":"cokiscarazo-rgb/dsh-session-management@ae5258e3e780d10c468268682169e7e5fe01e45b#scan-2","versionCount":1,"latestCommit":"ae5258e3e780d10c468268682169e7e5fe01e45b","latestCheckedAt":"2026-09-04T12:00:27.607Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"lesliewylie/dsh-session-search-pro","order":628,"name":"dsh-session-search-pro","owner":"LeslieWylie","repo":"LeslieWylie/dsh-session-search-pro","url":"https://github.com/LeslieWylie/dsh-session-search-pro","category":"session","description":{"zh":"Advanced cross-session full-text search for DeepSeek Harness — search past and current DSH sessions using the built-in sessionQuery service","en":"Advanced cross-session full-text search for DeepSeek Harness — search past and current DSH sessions using the built-in sessionQuery service"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T12:30:07Z","updatedAt":"2026-08-14T12:30:26Z","createdAt":"2026-08-14T11:45:14Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-session-search-pro","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"82787487d75f6af3d0e1b219a19dec49b93213cb","installCommand":"dsh plugin --profile web add github:LeslieWylie/dsh-session-search-pro#82787487d75f6af3d0e1b219a19dec49b93213cb","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:32.064Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-04T12:00:32.064Z","findings":[],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"lesliewylie/dsh-session-search-pro@82787487d75f6af3d0e1b219a19dec49b93213cb#scan-2","versionCount":1,"latestCommit":"82787487d75f6af3d0e1b219a19dec49b93213cb","latestCheckedAt":"2026-09-04T12:00:32.064Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ishuowang/dsh-sideband","order":629,"name":"dsh-sideband","owner":"ishuowang","repo":"ishuowang/dsh-sideband","url":"https://github.com/ishuowang/dsh-sideband","category":"session","description":{"zh":"Async LLM context relay between DeepSeek Harness sessions and Agent Team Rooms","en":"Async LLM context relay between DeepSeek Harness sessions and Agent Team Rooms"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T18:59:57Z","updatedAt":"2026-08-14T19:00:44Z","createdAt":"2026-08-14T18:58:20Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-sideband","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"393acf603fbbfec89958f5c8735e26e7a5da477c","installCommand":"dsh plugin --profile web add github:ishuowang/dsh-sideband#393acf603fbbfec89958f5c8735e26e7a5da477c","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:09.938Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-02T12:01:09.938Z","findings":[],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"ishuowang/dsh-sideband@393acf603fbbfec89958f5c8735e26e7a5da477c#scan-2","versionCount":1,"latestCommit":"393acf603fbbfec89958f5c8735e26e7a5da477c","latestCheckedAt":"2026-09-02T12:01:09.938Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"ytxue/dsh-skill-manager","order":630,"name":"dsh-skill-manager","owner":"YTxue","repo":"YTxue/dsh-skill-manager","url":"https://github.com/YTxue/dsh-skill-manager","category":"ui","description":{"zh":"DSH web plugin: skill manager in the Settings sidebar - list/enable/disable, folder batch import with conflict prompts, state-driven one-click DSH-spec check & auto-fix, system/project scope labels.","en":"DSH web plugin: skill manager in the Settings sidebar - list/enable/disable, folder batch import with conflict prompts, state-driven one-click DSH-spec check & auto-fix, system/project scope labels."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:00:11Z","updatedAt":"2026-08-14T13:24:52Z","createdAt":"2026-08-14T12:24:34Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-skill-manager-ytxue","version":"0.6.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"f254f3005a446062e312144f27ed0820d38d4654","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:43.679Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:43.679Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"passport":{"evidenceId":"ytxue/dsh-skill-manager@f254f3005a446062e312144f27ed0820d38d4654#scan-2","versionCount":1,"latestCommit":"f254f3005a446062e312144f27ed0820d38d4654","latestCheckedAt":"2026-09-04T00:00:43.679Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"sulfide2085/dsh-skill-manager","order":631,"name":"dsh-skill-manager","owner":"sulfide2085","repo":"sulfide2085/dsh-skill-manager","url":"https://github.com/sulfide2085/dsh-skill-manager","category":"tools","description":{"zh":"在 DeepSeek Harness 设置页统一管理 DSH / Codex / Claude 的 AI 技能：热开关启停、GitHub 技能市场一键发现安装、本地 ZIP 导入（dsh-plugin skill hub）","en":"在 DeepSeek Harness 设置页统一管理 DSH / Codex / Claude 的 AI 技能：热开关启停、GitHub 技能市场一键发现安装、本地 ZIP 导入（dsh-plugin skill hub）"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T18:59:14Z","updatedAt":"2026-08-14T18:57:39Z","createdAt":"2026-08-14T13:06:35Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-skill-manager","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5f19e7f9afac64afe8a118d9b1771145d421fbaf","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:10.148Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:10.148Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"passport":{"evidenceId":"sulfide2085/dsh-skill-manager@5f19e7f9afac64afe8a118d9b1771145d421fbaf#scan-2","versionCount":1,"latestCommit":"5f19e7f9afac64afe8a118d9b1771145d421fbaf","latestCheckedAt":"2026-09-02T12:01:10.148Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"sakka6868/dsh-skin","order":632,"name":"dsh-skin-alphacoders","owner":"sakka6868","repo":"sakka6868/dsh-skin","url":"https://github.com/sakka6868/dsh-skin","category":"tools","description":{"zh":"DSH skin plugin: Alphacoders popular wallpapers as the DeepSeek Harness Web GUI background — gallery, search, local image upload, light/dark mask","en":"DSH skin plugin: Alphacoders popular wallpapers as the DeepSeek Harness Web GUI background — gallery, search, local image upload, light/dark mask"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T23:59:02Z","updatedAt":"2026-08-14T23:59:08Z","createdAt":"2026-08-14T15:13:17Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["client"],"packageName":"dsh-skin-alphacoders","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":1,"declaredPaths":["lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-15T00:00:45.424Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-15T00:00:51.105Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["src/index.ts"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["src/index.ts"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["src/index.ts"]}],"filesInspected":["package.json","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"screenedCommit":null},{"id":"crazyshout/dsh-ssh-remote","order":633,"name":"dsh-ssh-remote","owner":"CrazyShout","repo":"CrazyShout/dsh-ssh-remote","url":"https://github.com/CrazyShout/dsh-ssh-remote","category":"tools","description":{"zh":"SSH remote workspaces for DeepSeek Harness: browse/read/write remote files, run remote commands, with connection status dots.","en":"SSH remote workspaces for DeepSeek Harness: browse/read/write remote files, run remote commands, with connection status dots."},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T10:29:45Z","updatedAt":"2026-08-14T10:29:57Z","createdAt":"2026-08-13T19:30:54Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ssh-remote","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":3,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T10:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T10:30:52.611Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"screenedCommit":null},{"id":"huguangyu666/dsh-store","order":634,"name":"dsh-store","owner":"huguangyu666","repo":"huguangyu666/dsh-store","url":"https://github.com/huguangyu666/dsh-store","category":"tools","description":{"zh":"dsh-store","en":"dsh-store"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T19:58:03Z","updatedAt":"2026-08-14T19:58:08Z","createdAt":"2026-08-14T15:14:57Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-store","version":"0.5.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"1f7c63c4e16804717f0faa734adf613324999919","installCommand":"dsh plugin --profile web add github:huguangyu666/dsh-store#1f7c63c4e16804717f0faa734adf613324999919","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:05.486Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-02T12:01:05.486Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"huguangyu666/dsh-store@1f7c63c4e16804717f0faa734adf613324999919#scan-2","versionCount":1,"latestCommit":"1f7c63c4e16804717f0faa734adf613324999919","latestCheckedAt":"2026-09-02T12:01:05.486Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"khiqwq/dsh-system-proxy","order":635,"name":"dsh-system-proxy","owner":"khiqwq","repo":"khiqwq/dsh-system-proxy","url":"https://github.com/khiqwq/dsh-system-proxy","category":"session","description":{"zh":"DSH host plugin - smart outbound HTTP(S) routing: named proxies (http/https/socks4/4a/5/5h), per-host/provider/plugin rules, direct-first fallback with health memory (global fetch + node http/https)","en":"DSH host plugin - smart outbound HTTP(S) routing: named proxies (http/https/socks4/4a/5/5h), per-host/provider/plugin rules, direct-first fallback with health memory (global fetch + node http/https)"},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":5,"watchers":2,"pushedAt":"2026-08-14T17:00:14Z","updatedAt":"2026-08-14T17:00:33Z","createdAt":"2026-08-14T03:30:51Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-system-proxy","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":7,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:00:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:00:52.203Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js","lib/client.js","cordis.patch.yml"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","发现主动网络请求能力"]},"screenedCommit":null},{"id":"juhe291/dsh-token-panel","order":636,"name":"dsh-token-panel","owner":"juhe291","repo":"juhe291/dsh-token-panel","url":"https://github.com/juhe291/dsh-token-panel","category":"ui","description":{"zh":"Real-time token consumption HUD plugin for DeepSeek Harness. Live token usage monitor, context pressure, cost estimation, history curves, per-day/per-month stats. DeepSeek Harness 实时 Token 消耗监控插件：用量统计、成本估算、趋势曲线、按日按月报表。","en":"Real-time token consumption HUD plugin for DeepSeek Harness. Live token usage monitor, context pressure, cost estimation, history curves, per-day/per-month stats. DeepSeek Harness 实时 Token 消耗监控插件：用量统计、成本估算、趋势曲线、按日按月报表。"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T11:59:55Z","updatedAt":"2026-08-14T12:00:06Z","createdAt":"2026-08-14T05:24:37Z","license":"MIT","language":"TypeScript","homepage":"https://github.com/topics/dsh-plugin","archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-token-panel","version":"0.4.7","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5d7fb80c2b2bc9a2072a4e247cba1fb8160ec4f0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:27.441Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:00:27.441Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/index.js","lib/client.js"]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","发现主动网络请求能力","发现本地文件写入能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"juhe291/dsh-token-panel@5d7fb80c2b2bc9a2072a4e247cba1fb8160ec4f0#scan-2","versionCount":1,"latestCommit":"5d7fb80c2b2bc9a2072a4e247cba1fb8160ec4f0","latestCheckedAt":"2026-09-05T00:00:27.441Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"huantian1223/dsh-token-stats","order":637,"name":"dsh-token-stats","owner":"huantian1223","repo":"huantian1223/dsh-token-stats","url":"https://github.com/huantian1223/dsh-token-stats","category":"tools","description":{"zh":"dsh-token-stats","en":"dsh-token-stats"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:00:25Z","updatedAt":"2026-08-14T14:00:01Z","createdAt":"2026-08-14T13:59:28Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-token-stats","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dsh/index.js","client/bundle.js"],"invalidDeclaredPaths":[]},"screenedCommit":"29d80016a762c4fabe56dcdd07f4137979befdc0","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T00:00:38.011Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T00:00:38.011Z","findings":[{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["dsh/index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["dsh/index.js"]},{"id":"html-execution","severity":"medium","label":{"zh":"发现 HTML 或 SVG 主动内容处理能力","en":"Active HTML or SVG handling signal found"},"files":["dsh/index.js","client/bundle.js"]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["client/bundle.js"]}],"filesInspected":["package.json","dsh/index.js","client/bundle.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现本地文件写入能力","发现环境变量、密钥或凭据访问线索","发现 HTML 或 SVG 主动内容处理能力","发现主动网络请求能力"]},"passport":{"evidenceId":"huantian1223/dsh-token-stats@29d80016a762c4fabe56dcdd07f4137979befdc0#scan-2","versionCount":1,"latestCommit":"29d80016a762c4fabe56dcdd07f4137979befdc0","latestCheckedAt":"2026-09-04T00:00:38.011Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"leemancheung/dsh-token-usage","order":638,"name":"dsh-token-usage","owner":"LeemanCheung","repo":"LeemanCheung/dsh-token-usage","url":"https://github.com/LeemanCheung/dsh-token-usage","category":"tools","description":{"zh":"Persistent token usage records and dashboard for DeepSeek Harness","en":"Persistent token usage records and dashboard for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":3,"forks":1,"openIssues":0,"watchers":3,"pushedAt":"2026-08-14T21:29:30Z","updatedAt":"2026-08-14T21:29:54Z","createdAt":"2026-08-14T12:29:22Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-token-usage","version":"0.3.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"c59f94808f659d81872cffe626e142a528f2077d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:10.234Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:10.234Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/index.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"leemancheung/dsh-token-usage@c59f94808f659d81872cffe626e142a528f2077d#scan-2","versionCount":1,"latestCommit":"c59f94808f659d81872cffe626e142a528f2077d","latestCheckedAt":"2026-09-02T00:01:10.234Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"lxj808624/dsh-tool-git","order":639,"name":"dsh-tool-git","owner":"lxj808624","repo":"lxj808624/dsh-tool-git","url":"https://github.com/lxj808624/dsh-tool-git","category":"tools","description":{"zh":"Structured safe Git tools for DeepSeek Harness (dsh): git_status/diff/log/branch/stage/commit/stash/show + destructive-command guard","en":"Structured safe Git tools for DeepSeek Harness (dsh): git_status/diff/log/branch/stage/commit/stash/show + destructive-command guard"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":1,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T15:30:28Z","updatedAt":"2026-08-14T15:30:40Z","createdAt":"2026-08-13T17:30:39Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-tool-git","version":"0.1.3","lifecycleScripts":["prepare"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.mjs"],"invalidDeclaredPaths":[]},"screenedCommit":"09df9e9ad56a144d61647f465b54f84bbf90113c","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:31.660Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:31.660Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]}],"filesInspected":["package.json","cordis.patch.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare"]},"passport":{"evidenceId":"lxj808624/dsh-tool-git@09df9e9ad56a144d61647f465b54f84bbf90113c#scan-2","versionCount":1,"latestCommit":"09df9e9ad56a144d61647f465b54f84bbf90113c","latestCheckedAt":"2026-09-03T12:00:31.660Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"lssyd20070106/dsh-ui-preset-enhance","order":640,"name":"dsh-ui-preset-enhance","owner":"lssyd20070106","repo":"lssyd20070106/dsh-ui-preset-enhance","url":"https://github.com/lssyd20070106/dsh-ui-preset-enhance","category":"ui","description":{"zh":"Third-party DSH WebUI enhancement plugin: custom backgrounds, theme colors, prompt presets, token/context visibility, and manual compact.","en":"Third-party DSH WebUI enhancement plugin: custom backgrounds, theme colors, prompt presets, token/context visibility, and manual compact."},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T22:28:40Z","updatedAt":"2026-08-14T22:29:19Z","createdAt":"2026-08-14T20:47:07Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-ui-preset-enhance","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","dsh/index.js","dsh/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"36a18e24340677cf3c7a4771c861b9b931360e1e","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T00:01:06.266Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T00:01:06.266Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","dsh/index.js","dsh/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"lssyd20070106/dsh-ui-preset-enhance@36a18e24340677cf3c7a4771c861b9b931360e1e#scan-2","versionCount":1,"latestCommit":"36a18e24340677cf3c7a4771c861b9b931360e1e","latestCheckedAt":"2026-09-02T00:01:06.266Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"ox0400/dsh-vault","order":641,"name":"dsh-vault","owner":"Ox0400","repo":"Ox0400/dsh-vault","url":"https://github.com/Ox0400/dsh-vault","category":"ui","description":{"zh":"Encrypted credential vault for DeepSeek Harness — AES-256-GCM + TOTP, model tools + Settings UI","en":"Encrypted credential vault for DeepSeek Harness — AES-256-GCM + TOTP, model tools + Settings UI"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T16:29:01Z","updatedAt":"2026-08-14T16:29:07Z","createdAt":"2026-08-14T03:28:05Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-vault","version":"1.10.28-rc.1","lifecycleScripts":["prepare"],"runtimeDependencies":1,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"6852039c249b6d5ee4d5140ff5635bf46c330652","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:29.247Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:29.247Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：prepare","en":"Install lifecycle scripts found: prepare"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：prepare","仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"ox0400/dsh-vault@6852039c249b6d5ee4d5140ff5635bf46c330652#scan-2","versionCount":1,"latestCommit":"6852039c249b6d5ee4d5140ff5635bf46c330652","latestCheckedAt":"2026-09-03T12:00:29.247Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"ysr666/dsh-vision-router","order":642,"name":"dsh-vision-router","owner":"ysr666","repo":"ysr666/dsh-vision-router","url":"https://github.com/ysr666/dsh-vision-router","category":"workflow","description":{"zh":"Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.","en":"Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns."},"added":"2026-08-14","curated":false,"topic":true,"stars":283,"forks":16,"openIssues":3,"watchers":283,"pushedAt":"2026-08-16T10:00:49Z","updatedAt":"2026-08-16T10:00:50Z","createdAt":"2026-08-13T18:57:47Z","license":"MIT","language":"JavaScript","homepage":"https://github.com/ysr666/dsh-vision-router","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-vision-router","version":"1.3.0","lifecycleScripts":[],"runtimeDependencies":4,"declaredPaths":["cordis.patch.yml","entry.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"5ad9556e8630555944e1f47106e0ee97cba1ffc1","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-16T10:01:11.592Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-16T10:01:11.592Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","entry.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"ysr666/dsh-vision-router@5ad9556e8630555944e1f47106e0ee97cba1ffc1#scan-2","versionCount":1,"latestCommit":"5ad9556e8630555944e1f47106e0ee97cba1ffc1","latestCheckedAt":"2026-08-16T10:01:11.592Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7},"codexPick":{"repo":"ysr666/dsh-vision-router","pickedAt":"2026-08-17T07:16:06.689Z","reviewedCommit":"511aacce61c737f443a8bc8786c71e3cc8607750","category":"tools","summary":{"zh":"让纯文本 DSH Agent 通过视觉模型链与 11 个像素级工具完成图片问答、定位、OCR、裁剪和像素对比；v1.4.5 新增默认关闭的 1+x 结构化预识别。","en":"Gives text-only DSH agents a vision-model chain and 11 pixel-level tools for image Q&A, grounding, OCR, crop, and pixel diff; v1.4.5 adds an opt-in structured 1+x pre-scan."},"reason":{"zh":"默认免 Key、无 Python；图片轮由主模型按需调用工具。v1.4.5 已发布到 npm，核对的包内关键文件与 Release tag 一致，Node 22/24 与三平台 CI 均通过。","en":"Keyless and Python-free by default, with the main model invoking vision tools on demand. v1.4.5 is published on npm, reviewed package files match the release tag, and Node 22/24 plus three-platform CI pass."},"safety":{"risk":"medium","zh":"识图会把图片与提示发送至默认 OVHcloud 匿名端点，也可改用自有端点；插件可读取宿主 fs 允许的图片、在工作区写 artifacts，并在 ~/.dsh 写脱敏轮转日志。无 install/prepare 脚本；发布提交未签名、npm 无 provenance，依赖审计还有 1 个 potrace→jimp→phin 中风险。敏感图片建议使用私有端点。","en":"Vision sends images and prompts to the default anonymous OVHcloud endpoint unless a private endpoint is configured; the plugin can read images allowed by the host fs, write workspace artifacts, and keep redacted rotating logs under ~/.dsh. It has no install/prepare script; the release commit is unsigned, npm lacks provenance, and audit reports one moderate potrace-to-jimp-to-phin issue. Use a private endpoint for sensitive images."}}},{"id":"acidgr/dsh-web-lan-access","order":643,"name":"dsh-web-lan-access","owner":"AcidGr","repo":"AcidGr/dsh-web-lan-access","url":"https://github.com/AcidGr/dsh-web-lan-access","category":"tools","description":{"zh":"DeepSeek Harness (dsh) Web plugin","en":"DeepSeek Harness (dsh) Web plugin"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:30:34Z","updatedAt":"2026-08-14T14:18:06Z","createdAt":"2026-08-14T14:17:04Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-web-lan-access","version":"1.2.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"8eeb1d0cb79a6e199bde94f16f1e2f2b5a818f01","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:36.269Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:36.269Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"public-listener","severity":"medium","label":{"zh":"发现网络监听能力，需确认监听地址与认证","en":"Network listener signal found; bind address and auth need review"},"files":["cordis.patch.yml"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现网络监听能力，需确认监听地址与认证"]},"passport":{"evidenceId":"acidgr/dsh-web-lan-access@8eeb1d0cb79a6e199bde94f16f1e2f2b5a818f01#scan-2","versionCount":1,"latestCommit":"8eeb1d0cb79a6e199bde94f16f1e2f2b5a818f01","latestCheckedAt":"2026-09-03T12:00:36.269Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"acidgr/dsh-web-mobile-fix","order":644,"name":"dsh-web-mobile-fix","owner":"AcidGr","repo":"AcidGr/dsh-web-mobile-fix","url":"https://github.com/AcidGr/dsh-web-mobile-fix","category":"tools","description":{"zh":"DeepSeek Harness (dsh) Web plugin","en":"DeepSeek Harness (dsh) Web plugin"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T14:30:30Z","updatedAt":"2026-08-14T14:18:56Z","createdAt":"2026-08-14T14:17:02Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-web-mobile-fix","version":"1.0.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"015d905b5f9196b5d442878e5682d8aaa598aa3f","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-03T12:00:37.925Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-03T12:00:37.925Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件"]},"passport":{"evidenceId":"acidgr/dsh-web-mobile-fix@015d905b5f9196b5d442878e5682d8aaa598aa3f#scan-2","versionCount":1,"latestCommit":"015d905b5f9196b5d442878e5682d8aaa598aa3f","latestCheckedAt":"2026-09-03T12:00:37.925Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"kxsenlin/dsh-whale-font","order":645,"name":"dsh-whale-font","owner":"kxSenlin","repo":"kxSenlin/dsh-whale-font","url":"https://github.com/kxSenlin/dsh-whale-font","category":"tools","description":{"zh":"把 DeepSeek Harness 对话里的主语人称「我/你/I/me」渲染成 DeepSeek 蓝鲸图标（DSH 插件）","en":"把 DeepSeek Harness 对话里的主语人称「我/你/I/me」渲染成 DeepSeek 蓝鲸图标（DSH 插件）"},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T18:29:12Z","updatedAt":"2026-08-14T18:29:16Z","createdAt":"2026-08-14T18:17:46Z","license":"MIT","language":"Python","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-whale-font","version":"1.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a3f3f50c4d143e0206705418b898f3563360266d","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-02T12:01:11.278Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-02T12:01:11.278Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现遥测或分析服务线索"]},"passport":{"evidenceId":"kxsenlin/dsh-whale-font@a3f3f50c4d143e0206705418b898f3563360266d#scan-2","versionCount":1,"latestCommit":"a3f3f50c4d143e0206705418b898f3563360266d","latestCheckedAt":"2026-09-02T12:01:11.278Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"senmuuuuw/dsh-whale-report","order":646,"name":"dsh-whale-report","owner":"SenmuuuuW","repo":"SenmuuuuW/dsh-whale-report","url":"https://github.com/SenmuuuuW/dsh-whale-report","category":"session","description":{"zh":"🐋 鲸鱼记事本 — 你的 Agent 年度报告：从会话事件日志生成日报/周报/月报/年报，任意区间、只读不改写","en":"🐋 鲸鱼记事本 — 你的 Agent 年度报告：从会话事件日志生成日报/周报/月报/年报，任意区间、只读不改写"},"added":"2026-08-14","curated":false,"topic":true,"stars":4,"forks":0,"openIssues":0,"watchers":4,"pushedAt":"2026-08-14T12:59:50Z","updatedAt":"2026-08-14T13:00:38Z","createdAt":"2026-08-14T10:40:58Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"dsh-whale-report","version":"0.6.1","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"a20003e6ddbd4352846bfbf6ad105127bfcc2ec4","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:30.781Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:30.781Z","findings":[{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"senmuuuuw/dsh-whale-report@a20003e6ddbd4352846bfbf6ad105127bfcc2ec4#scan-2","versionCount":1,"latestCommit":"a20003e6ddbd4352846bfbf6ad105127bfcc2ec4","latestCheckedAt":"2026-09-04T12:00:30.781Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"yuanzehui313/dsh-workspace-enhance","order":647,"name":"dsh-workspace-enhance","owner":"yuanzehui313","repo":"yuanzehui313/dsh-workspace-enhance","url":"https://github.com/yuanzehui313/dsh-workspace-enhance","category":"session","description":{"zh":"DeepSeek Harness workspace & session enhancement plugin: recycle bin, cross-workspace drag, ungrouped sessions, multi-folder roots, session merge","en":"DeepSeek Harness workspace & session enhancement plugin: recycle bin, cross-workspace drag, ungrouped sessions, multi-folder roots, session merge"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T09:30:31Z","updatedAt":"2026-08-14T09:30:39Z","createdAt":"2026-08-14T08:59:33Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-workspace-enhance","version":"1.0.2","lifecycleScripts":["postinstall"],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"061ec543d39d6443ab3176629f09e1b1db71a223","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-07T00:00:39.049Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-07T00:00:39.049Z","findings":[{"id":"lifecycle-script","severity":"medium","label":{"zh":"发现安装生命周期脚本：postinstall","en":"Install lifecycle scripts found: postinstall"},"files":["package.json"]},{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["发现安装生命周期脚本：postinstall","仓库根目录未发现依赖锁文件","发现主动网络请求能力"]},"passport":{"evidenceId":"yuanzehui313/dsh-workspace-enhance@061ec543d39d6443ab3176629f09e1b1db71a223#scan-2","versionCount":1,"latestCommit":"061ec543d39d6443ab3176629f09e1b1db71a223","latestCheckedAt":"2026-09-07T00:00:39.049Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"tsonglew/dsh-workspace-search","order":648,"name":"dsh-workspace-search","owner":"tsonglew","repo":"tsonglew/dsh-workspace-search","url":"https://github.com/tsonglew/dsh-workspace-search","category":"ui","description":{"zh":"VS Code-style workspace keyword search for DeepSeek Harness: a Search tab in dsh-better-sidebar","en":"VS Code-style workspace keyword search for DeepSeek Harness: a Search tab in dsh-better-sidebar"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T12:29:48Z","updatedAt":"2026-08-14T12:30:13Z","createdAt":"2026-08-14T12:23:35Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"master","maintenance":"active","manifest":{"state":"verified","branch":"master","kinds":["bundle","client"],"packageName":"dsh-workspace-search","version":"0.1.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"fc2ebaa9f998c592ecc725ca96519ea3b131408a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:33.042Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-04T12:00:33.042Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"telemetry","severity":"medium","label":{"zh":"发现遥测或分析服务线索","en":"Telemetry or analytics signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":false}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现遥测或分析服务线索"]},"passport":{"evidenceId":"tsonglew/dsh-workspace-search@fc2ebaa9f998c592ecc725ca96519ea3b131408a#scan-2","versionCount":1,"latestCommit":"fc2ebaa9f998c592ecc725ca96519ea3b131408a","latestCheckedAt":"2026-09-04T12:00:33.042Z","diffSeverity":"baseline","verificationScore":5,"verificationPossible":7}},{"id":"severuszh/dsh-yolo-mode","order":649,"name":"dsh-yolo-mode","owner":"SeverusZh","repo":"SeverusZh/dsh-yolo-mode","url":"https://github.com/SeverusZh/dsh-yolo-mode","category":"dev","description":{"zh":"dsh-yolo-mode - an LLM-powered auto-approval plugin for DeepSeek Harness sandbox escalations (built-in presets + custom permission levels, fail-closed)","en":"dsh-yolo-mode - an LLM-powered auto-approval plugin for DeepSeek Harness sandbox escalations (built-in presets + custom permission levels, fail-closed)"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T17:29:56Z","updatedAt":"2026-08-14T17:30:21Z","createdAt":"2026-08-14T11:35:49Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["client"],"packageName":"dsh-yolo-mode","version":"0.4.0","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["lib/index.js","lib/client/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:30:45.416Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:30:52.068Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"filesystem-write","severity":"medium","label":{"zh":"发现本地文件写入能力","en":"Local filesystem write capability signal found"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/index.js","lib/client/index.js"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现本地文件写入能力"]},"screenedCommit":null},{"id":"seamas0825-lab/dsh-youmind-plugin","order":650,"name":"dsh-youmind-plugin","owner":"seamas0825-lab","repo":"seamas0825-lab/dsh-youmind-plugin","url":"https://github.com/seamas0825-lab/dsh-youmind-plugin","category":"tools","description":{"zh":"YouMind OpenAPI tools and skill bundle for DeepSeek Harness","en":"YouMind OpenAPI tools and skill bundle for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":0,"forks":0,"openIssues":0,"watchers":0,"pushedAt":"2026-08-14T12:00:01Z","updatedAt":"2026-08-14T12:00:06Z","createdAt":"2026-08-14T11:34:15Z","license":"MIT","language":"JavaScript","homepage":"https://youmind.com/","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"dsh-youmind-plugin","version":"0.1.1","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","index.js"],"invalidDeclaredPaths":[]},"screenedCommit":"d70df4302679c595482011f23b739883fa2e5742","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-05T00:00:25.914Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-05T00:00:25.914Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"network-egress","severity":"medium","label":{"zh":"发现主动网络请求能力","en":"Outbound network capability signal found"},"files":["index.js"]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["index.js"]}],"filesInspected":["package.json","index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现主动网络请求能力","发现环境变量、密钥或凭据访问线索"]},"passport":{"evidenceId":"seamas0825-lab/dsh-youmind-plugin@d70df4302679c595482011f23b739883fa2e5742#scan-2","versionCount":1,"latestCommit":"d70df4302679c595482011f23b739883fa2e5742","latestCheckedAt":"2026-09-05T00:00:25.914Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"adkid-zephyr/liltloom","order":651,"name":"liltloom","owner":"Adkid-Zephyr","repo":"Adkid-Zephyr/Liltloom","url":"https://github.com/Adkid-Zephyr/Liltloom","category":"session","description":{"zh":"语织：中文优先、用户可控的 AI 写作风格记忆层，让 AI 学会你的表达，需要时再调用。Chinese-first style memory for AI; DeepSeek Harness adapter included.","en":"语织：中文优先、用户可控的 AI 写作风格记忆层，让 AI 学会你的表达，需要时再调用。Chinese-first style memory for AI; DeepSeek Harness adapter included."},"added":"2026-08-14","curated":false,"topic":true,"stars":2,"forks":0,"openIssues":0,"watchers":2,"pushedAt":"2026-08-14T13:30:36Z","updatedAt":"2026-08-14T13:28:32Z","createdAt":"2026-08-14T11:52:37Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"liltloom","version":"0.2.0","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"514f853c8f072d892aee59b12f54b8ee56f5a6c5","installCommand":"dsh plugin --profile web add github:Adkid-Zephyr/Liltloom#514f853c8f072d892aee59b12f54b8ee56f5a6c5","discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-04T12:00:26.170Z"},"screening":{"version":1,"scope":"source","state":"clear","risk":"low","checkedAt":"2026-09-04T12:00:26.170Z","findings":[],"filesInspected":["package.json","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"clear","reasons":[]},"passport":{"evidenceId":"adkid-zephyr/liltloom@514f853c8f072d892aee59b12f54b8ee56f5a6c5#scan-2","versionCount":1,"latestCommit":"514f853c8f072d892aee59b12f54b8ee56f5a6c5","latestCheckedAt":"2026-09-04T12:00:26.170Z","diffSeverity":"baseline","verificationScore":7,"verificationPossible":7}},{"id":"amplifthq/oh-my-dsh","order":652,"name":"oh-my-dsh","owner":"amplifthq","repo":"amplifthq/oh-my-dsh","url":"https://github.com/amplifthq/oh-my-dsh","category":"tools","description":{"zh":"A curated distribution of DeepSeek Harness. Overlay, not a fork.","en":"A curated distribution of DeepSeek Harness. Overlay, not a fork."},"added":"2026-08-14","curated":false,"topic":true,"stars":1,"forks":0,"openIssues":0,"watchers":1,"pushedAt":"2026-08-14T16:59:53Z","updatedAt":"2026-08-14T17:00:08Z","createdAt":"2026-08-14T09:38:49Z","license":"MIT","language":"TypeScript","homepage":"https://www.npmjs.com/package/oh-my-dsh","archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle"],"packageName":"oh-my-dsh","version":"0.1.3","lifecycleScripts":[],"runtimeDependencies":36,"declaredPaths":["bundles/omd.cordis.yml","dist/src/index.js"],"invalidDeclaredPaths":[]},"installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-14T17:00:45.417Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-14T17:00:52.527Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["bundles/omd.cordis.yml"]}],"filesInspected":["package.json","bundles/omd.cordis.yml","src/index.ts"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","发现环境变量、密钥或凭据访问线索"]},"screenedCommit":null},{"id":"morgogh/widget-dock","order":653,"name":"widget-dock","owner":"MorGogh","repo":"MorGogh/widget-dock","url":"https://github.com/MorGogh/widget-dock","category":"ui","description":{"zh":"DSH plugin: draggable widget panel (balance, tokens, stats, commands, goal, cost) for DeepSeek Harness","en":"DSH plugin: draggable widget panel (balance, tokens, stats, commands, goal, cost) for DeepSeek Harness"},"added":"2026-08-14","curated":false,"topic":true,"stars":4,"forks":1,"openIssues":0,"watchers":4,"pushedAt":"2026-08-15T07:29:29Z","updatedAt":"2026-08-15T07:29:43Z","createdAt":"2026-08-13T16:42:47Z","license":"MIT","language":"JavaScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"widget-dock","version":"1.0.2","lifecycleScripts":[],"runtimeDependencies":0,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"65ed17e76c3d05fc3cdffa8e9a4f1856ba928ad8","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-08-23T12:00:47.815Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-08-23T12:00:47.815Z","findings":[{"id":"lockfile-missing","severity":"medium","label":{"zh":"仓库根目录未发现依赖锁文件","en":"No root dependency lockfile found"},"files":[]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/client.js"]}],"filesInspected":["package.json","lib/index.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":false,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["仓库根目录未发现依赖锁文件","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"morgogh/widget-dock@65ed17e76c3d05fc3cdffa8e9a4f1856ba928ad8#scan-2","versionCount":1,"latestCommit":"65ed17e76c3d05fc3cdffa8e9a4f1856ba928ad8","latestCheckedAt":"2026-08-23T12:00:47.815Z","diffSeverity":"baseline","verificationScore":6,"verificationPossible":7}},{"id":"mishibeikejie/zat-dsh-engine","order":654,"name":"zat-dsh-engine","owner":"mishibeikejie","repo":"mishibeikejie/zat-dsh-engine","url":"https://github.com/mishibeikejie/zat-dsh-engine","category":"ui","description":{"zh":"Visual plugin marketplace for DeepSeek Harness — browse, search and install community plugins","en":"Visual plugin marketplace for DeepSeek Harness — browse, search and install community plugins"},"added":"2026-08-14","curated":false,"topic":true,"stars":79,"forks":3,"openIssues":7,"watchers":79,"pushedAt":"2026-09-24T11:07:40Z","updatedAt":"2026-09-24T11:07:41Z","createdAt":"2026-08-14T12:31:16Z","license":"MIT","language":"TypeScript","homepage":null,"archived":false,"defaultBranch":"main","maintenance":"active","manifest":{"state":"verified","branch":"main","kinds":["bundle","client"],"packageName":"zat-dsh-engine","version":"0.8.2","lifecycleScripts":[],"runtimeDependencies":2,"declaredPaths":["cordis.patch.yml","lib/index.js","lib/client.js"],"invalidDeclaredPaths":[]},"screenedCommit":"11d5b5fb424b6d9dee7821c7c2f771bd42e7f46a","installCommand":null,"discovery":{"source":"topic","firstSeenAt":"2026-08-14","lastSeenAt":"2026-09-24T12:01:49.796Z"},"screening":{"version":1,"scope":"source","state":"review","risk":"medium","checkedAt":"2026-09-24T12:01:49.796Z","findings":[{"id":"credential-access","severity":"medium","label":{"zh":"发现环境变量、密钥或凭据访问线索","en":"Environment, secret, or credential access signal found"},"files":["lib/client.js"]},{"id":"inspection-incomplete","severity":"medium","label":{"zh":"部分公开文件超过静态检查读取上限，需人工复核","en":"Some public files exceeded the static inspection limit and need manual review"},"files":["lib/index.js"]}],"filesInspected":["package.json","lib/client.js","cordis.patch.yml"],"checks":{"manifest":true,"license":true,"readme":true,"lockfile":true,"source":true,"securityDisclosure":true}},"attention":{"level":"review","reasons":["发现环境变量、密钥或凭据访问线索","部分公开文件超过静态检查读取上限，需人工复核"]},"passport":{"evidenceId":"mishibeikejie/zat-dsh-engine@11d5b5fb424b6d9dee7821c7c2f771bd42e7f46a#scan-2","versionCount":2,"latestCommit":"11d5b5fb424b6d9dee7821c7c2f771bd42e7f46a","latestCheckedAt":"2026-09-24T12:01:49.796Z","diffSeverity":"low","verificationScore":7,"verificationPossible":7}}]}