truelove-dreamer/dsh-plugin-vetting
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
$ dsh plugin --profile web add dsh-plugin-vetting$ dsh plugin --profile web add github:truelove-dreamer/dsh-plugin-vettingHealth breakdown
40 / 100This plugin has not fully disclosed its data-collection behavior. Review the source and manifest before installing.
Security
Key metrics
Related
Related plugins
Software-engineering method pack for coding agents, with skills for baseline-first planning, systematic debugging, prompt hygiene, verification before completion, and repair/retirement tracking.
An MC-Fabric-style hook processor.
Pin Git commits to the environment's own author identity; env-var injection overrides all `git config` settings.
Plugin health checks: manifest protocol / patch format / build traps, zero-dependency and read-only.
Local security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.
Finds potential UX issues in your project: automatically reviews React/TypeScript code, pinpoints each problem, and gives concrete suggestions.