Security & governancePlugin
Use ChatGPT (Codex), Claude, and Grok (X Premium) subscriptions as DeepSeek Harness LLM providers â OAuth login in the web UI, no API keys
Structure check pending
ai-agentchatgptclaudecodex
Back to Marketplace
Security & governancePlugin
dsh-sentinel-scanner
Eligahyu/dsh-sentinel-scanner
dsh-sentinel-scanner is a tool for DeepSeek Harness. ð¡ïž X-ray your DeepSeek Harness plugins â plugin security checkup and health check. Read-only static scan: code execution/credentials/exfiltration/obfuscation/install scripts/bundle manifest, 0-100 risk score. DSH tool plugin + standalone CLI.
- Stars
- 5
- Forks
- 0
- Issues
- 0
- Update
- 59 days
REVIEW SCORECARD
Review Scorecard
7.5/10Average
License compliance9.0
Engineering quality5.4
Content completeness7.0
Repository scale7.0
Maintenance activity8.0
â No risk detected · Automated scan results are for reference only, not an official endorsement
AI DEEP REVIEW
Worth AI Review
8.0/10Recommended
A well-scoped read-only security scanner for DSH plugins with strong safety boundaries and clear documentation.
Code quality8
README describes 51 heuristic rules, AST/taint analysis, bounded module graph, quarantine extraction, and explicit scan-coverage reporting, indicating substantial engineering rigor, though no test/CI details are visible.
Security8
The tool itself is read-only, never executes scanned code, skips npm install during pre-install audit, redacts secrets, and gates dynamic analysis behind explicit opt-in with no host-execution fallback.
Utility9
Addresses a real supply-chain pain point by letting users and authors audit third-party DSH plugins for execution, credential, exfiltration, and manifest risks before installation.
Maintenance8
Last updated 2026-08-23, not archived, MIT licensed, and README references a roadmap and architecture docs suggesting ongoing development.
Documentation7
README is detailed with capabilities tables, security model, and links to rules/architecture/roadmap docs, but the install command is listed as unknown and no concrete setup steps are shown in the excerpt.
Generated by AI after reading the project README â a decision aid, not an endorsement. Neutral scores are given when information is limited.
PROJECT READMEREADMEExpandCollapse
Loading GitHub README...
The GitHub README is temporarily unavailable. Please try again later.
Open repositoryPROJECT TOPICS
Project topics
VALIDATION LADDER
Validation progress
01Store discoveryPassed
02ClassificationPassed
03Structure checkPending
04Sandbox validationPending
FAQ
Frequently Asked Questions
What is dsh-sentinel-scanner used for?
ð¡ïž X-ray your DeepSeek Harness plugins â plugin security checkup and health check. Read-only static scan: code execution/credentials/exfiltration/obfuscation/install scripts/bundle manifest, 0-100 risk score. DSH tool p
How popular is dsh-sentinel-scanner?
dsh-sentinel-scanner has 5 stars and 0 forks on GitHub, last updated 2026-08-23.
What license does dsh-sentinel-scanner use?
dsh-sentinel-scanner is distributed under the MIT license.
Is dsh-sentinel-scanner compatible with DeepSeek Harness?
dsh-sentinel-scanner is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.
CLASSIFICATION EVIDENCE
Classification evidence
Project typePlugin
Feature categorySecurity & governance
Rule confidenceHigh
The system checks GitHub Topics against the site taxonomy and keyword rules. Current matches:securityãstatic-analysisãsupply-chain-securityã
Security & governancePlugin
dsh-codex-subscription
WSL043
Connect your ChatGPT / Codex subscription to DeepSeek Harness: OAuth, models, quota, search and image generation, no API Key or Codex CLI needed.
Structure check pending
ai-agentchatgptchatgpt-pluschatgpt-pro
Security & governancePlugin
dsh-auto-review
PerryLink
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).
Structure check pending
ai-safetyapprovalauto-reviewcordis
Security & governancePlugin
dsh-permission-rules
PerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
Structure check pending
ai-safetyallow-deny-askapprovalcordis
Security & governancePlugin
dsh-win32
sjh9714
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
Structure check pending
ai-agentdeepseekdeepseek-harnessdeepseek-harness-plugin
Security & governancePlugin
dsh-reverse-skill
dhicoc
Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin â reverse engineering, authorized pentesting and security research skill pack.
Structure check pending
ctfdeepseek-harnessdsh-pluginpentest