dsh-plugin-vetting — release evidence https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.atom.xml 2026-08-16T13:41:06Z Updated: dsh-plugin-vetting tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/148e80b87113502b 2026-08-16T13:41:06Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: awesome-dsh-plugin/awesome-dsh-plugin; changed: description, description_i18n. Updated: dsh-plugin-vetting tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/7c79633ee3559ed0 2026-08-16T09:56:16Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: zoahdev/dsh-subscribe; changed: description, description_i18n. Updated: dsh-plugin-vetting tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/70d2d7b2fa0f38be 2026-08-16T08:41:44Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: dsh-market/dsh-market; changed: description, description_i18n. Updated: dsh-plugin-vetting tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/39c4cd8ba93a4acf 2026-08-15T22:14:49Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: zoahdev/dsh-subscribe; changed: sources. Updated: dsh-plugin-vetting tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/e1d2ae6b34bd984b 2026-08-15T22:14:49Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: dsh-market/dsh-market; changed: sources. New: dsh-plugin-vetting tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/0aa1d725c44f3843 2026-08-15T22:14:49Z truelove-dreamer Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: awesome-dsh-plugin/awesome-dsh-plugin; changed: listed.