static-analysis

brooks-lint

hyhmrright

AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix

dsh-harbor

ZSeven-W

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidence, declared-vs-detected reconciliation, cross-profile version drift, and a diff of what changed since the last scan.

dsh-plugin-codegraph

CC19990113

Structural code intelligence for DeepSeek Harness (dsh) — gives the agent codegraph and codegraph_index tools to find where a symbol is declared, what calls it, and what a change reaches, from a tree-sitter index it builds itself. Compatible with the codegraph CLI's on-disk format.

Caushell

fatmo666

Compiler-style pre-execution safety analysis for Harness shell actions.

dsh-sentinel-scanner

Eligahyu

🛡️ X-ray your DeepSeek Harness plugins — plugin security checkup and health check. Read-only static scan: code execution/credentials/exfiltration/obfuscation/install scripts/bundle manifest, 0-100 risk score. DSH tool plugin + standalone CLI.

anchorlaw

unknowbug

Code verification protocol for vibe coding — every claim must have a verifiable practice anchor.

npm-safe-forDSH

nisconder

Local-first npm package supply chain security scanning engine, deepseek harness plugin version

dsh-xray

unStone

X-ray for DeepSeek Harness plugins: declared capabilities vs actual behavior. Registry + static scanner + badges.

dsh-tool-codereview

chengganping-ship-it

Professional Code Review & Security Scan plugin for DeepSeek Harness - SARIF output, OWASP Top 10, AI-enhanced analysis, auto-fixes

dsh-cordis-plugin-kit

hinayoung23

Offline Cordis/DSH plugin standards, scaffolding, static checks, runtime debugging, and performance gates.

adversarial-review

RevolutionLA

三方对抗式代码评审 Agent Skill：蓝军(敌意审查) → 第三方(独立复核) → 中立裁定，每条结论带证据链。安装：npx skills add RevolutionLA/adversarial-review · Tri-role adversarial code review for AI coding agents.

skill-security-guard

rrrrrredy

Static security scanner for agent skills: A-F risk rating, safe zip scanning, CI-tested rules

dsh-graft-plugin

adithyanraj03

A DeepSeek Harness plugin that puts graft — a prebuilt graph of every symbol, its file:line span, and who calls what — in front of both you and the model.

dsh-code-reuse-firewall

keyiadiannao

Pre-write reuse firewall for DeepSeek Harness: before the agent writes a new helper/service, surface the existing implementations that already cover that intent. Deterministic retrieval (no LLM) via the Auto_code_audit capability channel.

dsh-preflight

nzl153

DSH plugin: dry-run conflicts before installation, read logs to locate root causes after problems, and give directly executable fix commands.

dsh-plugin-security-audit

chendengyuanxm

Static security audit for dynamic Cordis plugins in DeepSeek Harness (DSH): rule-based source scanning, risk reports injected into tool results, and user-approval escalation before activating high-risk plugin packages.

code-ownership-audit

ffseika0304

Determine whether Python code is original or derivative work — pure local AST analysis, zero dependencies, offline. Agent Skill, usable by any agent. Detect derivative work in Python code, offline & dependency-free.

code-ownership-audit-java

ffseika0304

Java code ownership checkup: determines whether Java code is original or derivative. Pure local JavaParser AST analysis, dependencies baked into audit.jar, zero install, no network, no model calls.