Security & governancePlugin
Use ChatGPT (Codex), Claude, and Grok (X Premium) subscriptions as DeepSeek Harness LLM providers — OAuth login in the web UI, no API keys
Structure check pending
ai-agentchatgptclaudecodex
Back to Marketplace
Security & governancePlugin
npm-safe-forDSH
nisconder/npm-safe-forDSH
npm-safe-forDSH is a tool for DeepSeek Harness. Local-first npm package supply chain security scanning engine, deepseek harness plugin version
- Stars
- 4
- Forks
- 0
- Issues
- 0
- Update
- 58 days
REVIEW SCORECARD
Review Scorecard
7.5/10Average
License compliance9.0
Engineering quality5.4
Content completeness7.0
Repository scale7.0
Maintenance activity8.0
✓ No risk detected · Automated scan results are for reference only, not an official endorsement
AI DEEP REVIEW
Worth AI Review
8.0/10Recommended
A well-documented, actively maintained supply-chain scanner that gates npm installs before agents run them.
Code quality8
README documents a pnpm workspace with build, typecheck, test scripts, live smoke tests, and a CI badge, indicating real engineering rigor.
Security7
The tool is itself a security scanner with a stated local-first deterministic model, integrity verification, and bounded archive limits, though the install command grants build permission to better-sqlite3.
Utility9
It addresses the concrete and common risk of AI agents installing malicious npm packages by returning evidence, severity, and scores before the install decision.
Maintenance8
Last updated 2026-08-24 with an active CI workflow and no archive flag, and the README notes peer alignment to the DSH 0.1.0-rc.6 preview family.
Documentation8
The README provides a 30-second install, a tool catalog of 14 tools, a signal comparison table, sample output, and links to scanner rules, API, and architecture docs.
Generated by AI after reading the project README — a decision aid, not an endorsement. Neutral scores are given when information is limited.
PROJECT READMEREADMEExpandCollapse
Loading GitHub README...
The GitHub README is temporarily unavailable. Please try again later.
Open repositoryINSTALL REFERENCE
Install reference
dsh plugin --profile tui add @npm-safe/dsh-tool-npm-safe --allow-build=better-sqlite3This command was extracted from an explicit README install reference and is display-only; the DSH host will not execute it automatically.
PROJECT TOPICS
Project topics
VALIDATION LADDER
Validation progress
01Store discoveryPassed
02ClassificationPassed
03Structure checkPending
04Sandbox validationPending
FAQ
Frequently Asked Questions
What is npm-safe-forDSH used for?
Local-first npm package supply chain security scanning engine, deepseek harness plugin version
How popular is npm-safe-forDSH?
npm-safe-forDSH has 4 stars and 0 forks on GitHub, last updated 2026-08-24.
What license does npm-safe-forDSH use?
npm-safe-forDSH is distributed under the Apache-2.0 license.
Is npm-safe-forDSH compatible with DeepSeek Harness?
npm-safe-forDSH is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.
CLASSIFICATION EVIDENCE
Classification evidence
Project typePlugin
Feature categorySecurity & governance
Rule confidenceHigh
The system checks GitHub Topics against the site taxonomy and keyword rules. Current matches:security、security-scanner、sqlite、static-analysis。
Security & governancePlugin
dsh-codex-subscription
WSL043
Connect your ChatGPT / Codex subscription to DeepSeek Harness: OAuth, models, quota, search and image generation, no API Key or Codex CLI needed.
Structure check pending
ai-agentchatgptchatgpt-pluschatgpt-pro
Security & governancePlugin
dsh-auto-review
PerryLink
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).
Structure check pending
ai-safetyapprovalauto-reviewcordis
Security & governancePlugin
dsh-permission-rules
PerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
Structure check pending
ai-safetyallow-deny-askapprovalcordis
Security & governancePlugin
dsh-win32
sjh9714
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
Structure check pending
ai-agentdeepseekdeepseek-harnessdeepseek-harness-plugin
Security & governancePlugin
dsh-reverse-skill
dhicoc
Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
Structure check pending
ctfdeepseek-harnessdsh-pluginpentest