DSHUNIVERSE
Back to catalog

GITHUB TOPIC

supply-chain-security

15projects include this topic

The "supply-chain-security" topic on GitHub groups 15 open-source projects in the DeepSeek Harness (DSH) ecosystem, led by SkillSpector with 17k GitHub stars. SkillSpector — Security scanner for AI agent skills. Every project here is indexed by DSH Universe with live GitHub data — stars, activity and install status — so you can compare and install directly.

{count} projects

Exact GitHub Topic match

DSH PluginsSkill

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Structure check pending
agent-securityagent-skillsagentic-aiai-security
17k 1.4k 131
21 days
Development toolsInfrastructure

DeepSeek Harness (DSH) plugin management panel: one-click enable/disable plugins + GitHub dsh-plugin plugin marketplace, with plugin details and one-click install | Plugin manager & marketplace for DeepSeek Harness

Outside plugin validation
ai-empowerclideepseek-harnessdsh
93 8 1
Today
Security & governanceSkill

Security-audit skill pack + plugin_vet supply-chain gate for DeepSeek Harness (dsh): 8 bilingual agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) plus the plugin_vet automated pre-install scanner. Apache-2.0.

Structure check pending
deepseek-harnessdshdsh-plugingate
15 1 0
8 days
Security & governancePlugin

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Structure check pending
agent-securityai-agentsbreaking-changescordis
8 1 2
1 months
Security & governancePlugin

🛡️ X-ray your DeepSeek Harness plugins — plugin security checkup and health check. Read-only static scan: code execution/credentials/exfiltration/obfuscation/install scripts/bundle manifest, 0-100 risk score. DSH tool plugin + standalone CLI.

Structure check pending
deepseek-harnessdsh-pluginscannersecurity
5 0 0
1 months
Models & MCPSkill

dsh-capability-receipt

dongsheng123132

Content-addressed receipts for skills actually loaded by DeepSeek Harness

Structure check pending
agent-skillsai-agentcapabilitydeepseek-harness
4 0 0
1 months
Security & governanceInfrastructure

dsh-xray

unStone

X-ray for DeepSeek Harness plugins: declared capabilities vs actual behavior. Registry + static scanner + badges.

Outside plugin validation
agent-securityai-agentsai-securitycapability-analysis
3 1 0
1 months
Security & governanceSkill

DeepSeek Harness plugin for safely discovering, auditing, and adopting external Agent Skills — prompt-injection and AgentBaiting defense.

Structure check pending
agent-skillsagentbaitingai-agentclaude-code
2 0 0
1 months
Security & governancePlugin

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

Structure check pending
agent-toolingdeepseek-harnessdeveloper-toolsdsh-plugin
1 0 0
1 months
Security & governancePlugin

Ask what a DeepSeek Harness plugin can actually do, from inside your agent. Companion to dsh-xray.

Structure check pending
agent-securitycapability-analysisdeepseek-harnessdsh
1 0 0
1 months
Security & governancePlugin

Know what a DeepSeek Harness plugin does before you install it

Structure check pending
deepseek-harnessdsh-pluginsupply-chain-security
0 0 0
3 days
Security & governancePlugin

dsh-attestation-proof

dongsheng123132

Offline content-addressed DSSE/in-toto attestation proof for DeepSeek Harness

Structure check pending
deepseek-harnessdshdsh-plugindsse
0 0 0
1 months
Security & governancePlugin

dsh-plugin-validator

DshMarketPlace

Sandboxed install validation for DeepSeek Harness plugins — installs each one into a fresh profile in a throwaway container and reports what the harness recorded

Structure check pending
deepseek-harnessdockerdshdsh-plugin
0 0 0
1 months
Security & governancePlugin

Offline-first security scanner for DeepSeek Harness plugins: prompt injection, ransomware, exfiltration, and supply-chain risks.

Structure check pending
agent-securitydeepseek-harnessdsh-pluginjavascript
0 0 0
1 months
Security & governancePlugin

Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.

Structure check pending
deepseek-harnessdsh-pluginplugin-securitysupply-chain-security
0 0 1
1 months