truelove-dreamer/dsh-plugin-vetting

Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.

Install

dsh plugin --profile web add github:truelove-dreamer/dsh-plugin-vetting

Details

• Repo: truelove-dreamer/dsh-plugin-vetting
• Category: Development & Runtime
• Stars: 0
• Last push: —
• First seen: —