supply-chain-security

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Security-audit skill pack + plugin_vet supply-chain gate for DeepSeek Harness (dsh): 8 bilingual agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) plus the plugin_vet automated pre-install scanner. Apache-2.0.

X-ray for DeepSeek Harness plugins: declared capabilities vs actual behavior. Registry + static scanner + badges.

🛡️ 给 DeepSeek Harness 插件拍 X 光 — 插件安全体检与健康检查。只读静态扫描:代码执行/凭据/外传/混淆/安装脚本/bundle 清单,0-100 风险分。DSH tool plugin + standalone CLI。

Know what a DeepSeek Harness plugin does before you install it

Content-addressed receipts for skills actually loaded by DeepSeek Harness

Read-only MCP server over the dsh-plugin-certification registry: get_certification, list_certified, certification_spec.

Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

Ask what a DeepSeek Harness plugin can actually do, from inside your agent. Companion to dsh-xray.

Offline-first security scanner for DeepSeek Harness plugins: prompt injection, ransomware, exfiltration, and supply-chain risks.

Offline content-addressed DSSE/in-toto attestation proof for DeepSeek Harness

Sandboxed install validation for DeepSeek Harness plugins — installs each one into a fresh profile in a throwaway container and reports what the harness recorded