dsh-plugin-vetting
securitytested: passnpmlow
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool c
下载量 / Downloads
1,072
依赖体积 / node_modules
0.04 MB
测试时间 / Tested
2026-11-06
DSH 版本 / Version
0.2.2-rc.1
Install
dsh plugin --profile web add dsh-plugin-vetting
Sandbox test results
| Stage | Result |
|---|---|
| 1 install | ✓ |
| 2 list | ✓ |
| 3 mount | ✓ |
| 4 boot | — |
Four stages run in an isolated sandbox: install (network on) → list → mount → boot (last three with no network).
Declared permissions
fs-write · fs-read · env