v0.2.0 — first published iteration

First published iteration. Both packages are live on npm.

Run it

npx dsh-plugin-guard-cli@0.2.0 scan ./my-plugin

Scans a local directory or an npm package name, prints a verdict with the reasons, and exits non-zero when something high-risk is found. --json for machines, doctor for environment checks.

Use it inside DSH

dsh plugin --profile desktop add dsh-plugin-guard-tool

Registers one agent tool, plugin_guard, so the agent can scan a package before installing it. Requires DSH >=0.2.0-rc.1 <0.3.0-0.

What is in this release

• Scanner: dsh bundle + patch resolution, npm publish state, dsh.permissions declaration and over-broad grants, install scripts, dangerous APIs and obfuscation, dependency risk, source integrity, compatibility.
• Permission spec: docs/permissions-spec.md defines the dsh.permissions block (filesystem, shell, env, network, credentials, process). DSH itself ignores this block today; the spec is a convention this tool introduces, and the README says so.
• Trust index: local, opt-in, dsh-plugin-guard index add|update|list. Nothing is fetched unless you ask for it.
• Audit adapter: sidecar NDJSON log with a documented interface; no claim of an official DSH hook, because DSH has none.
• Zero-config: one command, built-in rules and thresholds, config file optional.

The scan only reads files. It never imports, installs, evaluates or runs the package it is inspecting.

Links

• README: https://github.com/RyeSama/dsh-plugin-guard#readme
• Rules: https://github.com/RyeSama/dsh-plugin-guard/blob/main/docs/rules.md
• Threat model: https://github.com/RyeSama/dsh-plugin-guard/blob/main/docs/threat-model.md
• npm: https://www.npmjs.com/package/dsh-plugin-guard-cli · https://www.npmjs.com/package/dsh-plugin-guard-tool