dsh-sentinel-scanner

dsh-sentinel is a read-only security, supply-chain, and health scanner for DeepSeek Harness (DSH) plugins. It performs heuristic static analysis, AST/taint analysis, manifest validation, pre-install quarantine, dependency intelligence, and report export without executing scanned code. Scans include a 0–100 risk score and safe / review / risky / dangerous verdict. It is available as a DSH Agent Tool plugin, standalone CLI, GitHub Action, and JavaScript API. Heuristic static analysis is not a proo

• Read-only static analysis for DeepSeek Harness plugin source trees, published npm packages, DSH profiles, and CI pipelines.
• Combines 51 heuristic rules with AST-based taint analysis and bounded module/cross-file analysis.
• Audits execution, credentials, exfiltration, obfuscation, install scripts, persistence, native binaries, manifest escapes, and package drift.
• Validates DSH manifests including dsh.bundle, cordis.patch.yml, package entry contracts, and path containment.
• Scan modes: source skips generated build trees, package includes dist/build output, profile discovers installed DSH plugins.
• Supports pre-install npm tarball quarantine with integrity verification, traversal blocking, and cleanup.
• Outputs text, JSON, SARIF 2.1.0, standalone HTML, CycloneDX, and SPDX with stable fingerprints and baselines.
• Optional Phase B dynamic analysis is explicit opt-in, static-preflight-gated, and network-denied; current release reports unavailable.