Plugin directory / Security / dsh-plugin-firewall
dsh-plugin-firewall
Verified · install-tested on dsh MkaliezZ
What it does
Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.
Works — verified, early-stage project
Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it. It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
dsh-plugin-firewall
Offline-first static admission scanner for DeepSeek Harness community plugins.
/plugin-firewall <path> inspects a local plugin package before you trust it. v0.1 looks for package install scripts, git/URL dependencies, native addons, Cordis/profile patches, tool registration, process/network/filesystem/environment access indicators, and emits a deterministic risk receipt with a SHA-256 digest.
v0.1 goals
- no network calls or vulnerability database;
- deterministic local analysis;
- explicit LOW / MEDIUM / HIGH findings;
- JSON-safe receipt with digest;
- never executes the scanned plugin;
- does not claim malware detection or complete supply-chain safety.
Development
npm install
npm test
License
MIT
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-plugin-firewall for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:MkaliezZ/dsh-plugin-firewallHeadless (CLI) profile:
dsh plugin --profile headless add github:MkaliezZ/dsh-plugin-firewallTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-plugin-firewall/)<a href="https://dshbase.com/plugins/dsh-plugin-firewall/"><img src="https://dshbase.com/badges/dsh-plugin-firewall.svg" alt="dshbase install-tested"></a>