DSH TrustLens

dsh-plugin-trustlens is a DeepSeek Harness plugin that reviews installed plugins before a user enables or updates them.

It combines:

• Read-only static scanning for common remote execution, download-and-execute, encoded evaluation, persistence, and environment exfiltration patterns.
• Semantic review through the model selected by the current DSH session. It does not hard-code DeepSeek or silently choose another model.
• Comment and README contradiction reporting through commentConflicts.
• User confirmation gates for enabling, updating, and disabling/quarantining a plugin.

The auditor never requires, imports, launches, installs, downloads, or executes the plugin being inspected. Plugin code, comments, README files, strings, and model output are treated as untrusted data.

DSH installation

Install from the repository with the DSH CLI:

dsh plugin --profile web add github:Mengshang-spec/dsh-plugin-trustlens

The package declares its bundle manifest and patch entry automatically. For a manual local checkout, copy this package into the DSH profile's node_modules directory and add it to the profile patch:

- insert:
    - id: plugin-trustlens
      name: dsh-plugin-trustlens

The DSH Desktop companion synchronizer performs those two steps automatically for the bundled plugin.

Use

Open DSH settings, choose AI 审查, enter the installed package name and its path under the current profile's node_modules, then start the review. The result shows the active provider/model, static findings, semantic findings, and comment/document conflicts.

Static high-risk findings disable the enable/update actions. A user can still explicitly choose isolation/disable after reviewing the report.

Development tests

Run from a DSH Desktop checkout with the bundled Node runtime:

vendor/node/node.exe --test scripts/test/unit-plugin-trustlens-protocol.test.mjs scripts/test/unit-plugin-trustlens.test.cjs

The same checks are available with npm test after installing dependencies.

Limitations

Static scanning is intentionally conservative and can produce findings for security-related example strings or regular expressions. It is a review signal, not proof of malware. Semantic review also requires an active DSH model and credentials; if the current model cannot be determined, the plugin fails closed.

License

MIT. See LICENSE.