页面加载中
dsh-plugin-vetting
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
PromptHub provides the directory and install command only. Plugin code comes from the author's GitHub or npm source; review it locally before installing.
dsh plugin --profile web add dsh-plugin-vettingThese labels describe capabilities publicly declared by the plugin; actual behavior depends on the author's source and host configuration.
A DSH Plugin runs with your local permissions and may access files, shells, networks, or credentials. Listing and static metadata are not a security guarantee from PromptHub; review the source first.