安全与治理
插件
mirage
strukto-ai
The World's First Unified Virtual Filesystem For AI Agents
PROJECT TOPICS
项目标签
INSTALL REFERENCE
安装参考
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
该命令指向仓库当前默认分支；尚无绑定当前 commit 的完整验证结果。
PROJECT README
README
dsh-plugin-guard
One plugin, two surfaces. Static analysis only — never executes the target plugin.
| Surface | Tool | Job |
|---|---|---|
| Gate | plugin_audit |
Static audit before install |
| Gate | plugin_verify |
Hash + capability lock after install |
| Clinic | plugin_peers |
Local fingerprint peers; query searches GitHub topic:dsh-plugin |
| Clinic | plugin_detox |
Mechanical amputation, not an equivalent rewrite |
plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.
Install
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh webScoring
Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.
P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.
Not
- Not output redaction
- Not general SAST
- Does not prove a plugin is safe
- Detox does not keep the original behavior
License
MIT
CLASSIFICATION EVIDENCE
分类依据
项目类型插件
功能分类安全与治理
规则置信度高
系统优先读取 GitHub Topics，再与站内分类词典和词根规则比对。当前命中： security。
安全与治理
插件
api-relay-audit
toby-bridges
Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks.
安全与治理
插件
k8e
xiaods
k8e.sh - OpenSource Agentic AI Sandbox Matrix