dsh-plugin-security-review
Security review gate for dsh plugins — static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
A security review plugin for DeepSeek Harness (dsh) plugins. Once installed, every other plugin is statically reviewed before it is installed or loaded: dangerous code, vulnerabilities, and supply-chain risks are analyzed, a review report is produced, and an install recommendation is given. At runtime it keeps auditing the installed roster and disables dangerous plugins.
See README.zh.md for the Chinese quick start.
Full user guides:
- English: docs/USER_GUIDE.en.md
- 中文（简体）: docs/使用说明.md
Three layers
| Layer | When | What it does |
|---|---|---|
| 1. Install gate | before install (dsh-safe-plugin add) | downloads source without running any install scripts, analyzes it, prints the report; block refuses the install, warn needs confirmation, pass forwards to dsh plugin add --ignore-scripts |
| 2. Runtime gate | after dsh boots | audits every out-of-tree plugin in the profile (cached); blocked plugins are disabled via loader.update(id,{disabled:true}) and written into a managed disabled: true block in the profile's cordis.patch.yml, so their code is never imported on the next boot |
| 3. In-session tools | during sessions | security_review / security_review_status tools review any plugin/source directory and read historical reports |
Install
dsh-safe-plugin add dsh-plugin-security-review
# or: dsh plugin --profile web add dsh-plugin-security-reviewThe package declares dsh.bundle, so the dsh plugin manager joins it into dsh.profile.bundles automatically.
Review and install other plugins
dsh-safe-plugin add dsh-plugin-foo # review + install
dsh-safe-plugin add ./local-plugin-dir
dsh-safe-plugin add https://github.com/me/plugin.git
dsh-safe-plugin review dsh-plugin-foo # review only
dsh-safe-plugin review . --ignore test/fixtures # skip fixtures dirs
dsh-safe-plugin list # historical reports
dsh-safe-plugin verify # re-review installed pluginsReports
- Score (0-100), verdict
pass / warn / block / audit, per-finding detail
(severity, category, file:line, snippet, recommendation) and an install recommendation.
- Persisted under
$DSH_HOME/security-review/:reports/latest/<name>.md
(markdown), reports/history/*.json, index.json.
- The web settings UI gains a
security-reviewsection (policy,
auto-disable switch, allowlist).
Known limitations
- Static analysis cannot cover native binaries, runtime-downloaded code, or
heavily obfuscated payloads; block means strong risk signals, not proof of malice.
- The runtime gate deterministically blocks plugin imports that happen after
this plugin applies; plugins that start earlier in the same boot batch load for a few milliseconds before the boot audit disables them, and the managed patch block keeps them from loading on the next boot. Use dsh-safe-plugin add for deterministic pre-install blocking.
- Blocking a plugin that provides services other rows
injectfails boot
loudly with the missing service named — that is dsh's fail-loud contract.
- Transitive dependencies are checked by name heuristics only (no full
source scan of the whole dependency tree).
- A review-engine failure degrades to
warn(fail-open) so the reviewer
itself can never brick dsh; re-check with dsh-safe-plugin verify.
Development
npm test # analyzer unit tests (no dsh needed; run from this dir)License: MIT
