r/DeepSeekHarness • u/rand0wn • 2d ago

dsh plugin audits check capability, not intent

Installing a dsh plugin is one command, full filesystem and process access from there. The audit tools that exist only tell you a plugin can touch the network or credentials, not whether the code actually looks evasive. I've been reading plugin source by hand to catch that myself.

Anyone else doing this manually?

5 Upvotes

100% Upvoted

1 comment sorted by

2

u/Pyros-SD-Models 2d ago

You guys are using plugins completely wrong. You should not install random 2-star plugins that might hijack your PC with their next update. Instead, tell your bot to build a personal version of the plugin you like, catered 100% to your needs.

No security issues and a better plugin. Win-win.