dsh-sentinel-scanner
Run the following command in DeepSeek Harness:
dsh plugin install Eligahyu/dsh-sentinel-scanner
Paste the following prompt into your AI chat to install this plugin:
In DeepSeek Harness, you can install this plugin by running 'dsh plugin install Eligahyu/dsh-sentinel-scanner', with the full source code at https://github.com/Eligahyu/dsh-sentinel-scanner。
About this plugin
In the DeepSeek Harness ecosystem, plugins often have access to system files, networks, and credentials, making security risks a serious concern. dsh-sentinel-scanner addresses this by acting as a read-only scanner that performs in-depth security checks on plugin source code, npm packages, or CI pipelines without executing any code. It combines 51 heuristic rules with AST-based taint analysis to precisely identify threats like command execution, data exfiltration, and obfuscation, outputting structured reports with risk scores. Whether you're a plugin user evaluating risks before activation or a developer ensuring code safety before publication, this tool provides reliable support to build a more secure plugin ecosystem.
Use Cases
- Perform security risk checks before installing third-party plugins.
- Automatically scan plugin dependencies and code in CI/CD pipelines.
- Audit code before publishing plugins to detect supply-chain or health issues.
Best For
- Plugin users who want to ensure the security and reliability of their plugins.
- Plugin developers and maintainers who need to detect code issues before release.
- DevOps engineers or security teams responsible for integrating security scanning tools.
Related Plugins
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.
Dockyard DSH is a native DeepSeek Harness plugin that unifies official OAuth/client sessions for Codex, Antigravity, Grok, Claude, and Cursor, providing account pool, model catalog, and quota status.