# dsh-plugin-security-audit

> Static security audit for dynamic Cordis plugins in DeepSeek Harness (DSH): rule-based source scanning, risk reports injected into tool results, and user-approval escalation before activating high-risk plugin packages. 动态 Cordis 插件静态安全审查。

## Metadata

- Author: [@chendengyuanxm](https://github.com/chendengyuanxm)
- Repo: <https://github.com/chendengyuanxm/dsh-plugin-security-audit>
- GitHub: [chendengyuanxm/dsh-plugin-security-audit](https://github.com/chendengyuanxm/dsh-plugin-security-audit)
- Stars: 0
- Language: JavaScript
- License: [MIT](https://spdx.org/licenses/MIT.html)
- Topics: `cordis`, `deepseek-harness`, `dsh`, `dsh-plugin`, `security-audit`, `static-analysis`
- Forks: 0
- Open Issues: 0
- Last push: 2026-08-15T19:07:31.000Z
- Added: 2026-08-15T00:00:00.000Z

## Install

```bash
dsh plugin --profile web add github:chendengyuanxm/dsh-plugin-security-audit
```

---

This document is auto-generated by [deepseek-plugin.org](https://deepseek-plugin.org). HTML page: [dsh-plugin-security-audit](https://deepseek-plugin.org/plugins/chendengyuanxm/dsh-plugin-security-audit)