dsh-plugin-security-review

In the development workflow of DeepSeek Harness (DSH), the dynamic installation and execution of plugins introduce potential security risks, such as malicious code injection or sensitive data leakage. dsh-plugin-security-review aims to build a robust security barrier by utilizing a static code analysis engine to deeply scan plugin source code. It features a rigorous "Security First" strategy that automatically detects high-risk behaviors like credential exposure or dynamic code execution, intelligently intercepting or guiding approvals based on risk levels. Beyond manual approval popups, it introduces a "Whitelist" mechanism, allowing administrators to add locally trusted plugins directly to the trust list to avoid repetitive blocking during development. Paired with powerful audit tools, developers can gain comprehensive control over plugin compliance, ensuring system security. This makes it an ideal solution for DSH developers and operations personnel who require strict control over the plugin ecosystem to prevent security vulnerabilities.