dsh-security-doctor
One-click local security checkup and guard plugin for DeepSeek Harness Web UI.
Install
$ dsh plugin --profile web add github:ChenChen913/dsh-security-doctor#v1.1.0Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- One-click local read-only security audit directly from the DSH Web UI sidebar
- Detection of unsafe !!js expressions and overrides in Cordis patch configurations
- Static inspection of third-party plugins for network calls, eval usage, and credential access
- File permission validation for credentials files without inspecting file contents
- Workspace instruction file (AGENTS.md, CLAUDE.md) tracking and hash diffing
- Optional experimental guard mode for in-memory outbound request auditing and file sentinel
Useful For
- Verifying DSH environment security before and after installing third-party plugins
- Auditing local credential file permissions and environment security policies
- Monitoring instruction file alterations and suspicious outbound network activity
Who It Fits
- DeepSeek Harness web UI users
- Security-conscious developers running external DSH plugins
- DSH plugin authors and system administrators
Documented Limitations
- Read-only static scanning is best-effort and cannot detect runtime obfuscated network destinations
- Guard mode audit relies on best-effort stack traces and does not hook fetch or raw sockets
- Requires restarting dsh web after installation to take effect
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- ChenChen913/dsh-security-doctor
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 24afe66 · 2026-09-13
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-11
- Last release
- 2026-09-11
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Skill manager UI for DeepSeek Harness to discover, toggle, import, and update agent skills.
View plugin →