dsh-security-manager

Plugin manager for DeepSeek Harness — auto-discovers installed security plugins, locates their npm / GitHub source, and provides snapshot-backed update & rollback.

Features

• Auto-discovery — reads the profile manifest and lists every installed security plugin; no manual registry needed
• Source location — resolves each security plugin's npm package / GitHub repository from its metadata
• Snapshot-backed update & rollback — every update snapshots package.json / cordis.patch.yml / pnpm-lock.yaml first; rollback restores any snapshot in one click
• Security tab — Settings → Plugins → Security (中英双语 UI), shipped as a dsh.client plugin
• Source updates — npm (name@version, pins the latest dist-tag) or GitHub (github:owner/repo)
• Hardened inputs — package names are allowlist-validated before update/check (blocks path traversal, backslashes, ..)

Install

dsh plugin --profile web add "github:Kolos-alter/dsh-security-manager"