Overview
dsh-plugin-trustlens
DSH 插件安全审查:静态扫描 + 当前会话模型语义审查 + 用户确认
README / EN
Package documentation
Registry summary
DSH 插件安全审查:静态扫描 + 当前会话模型语义审查 + 用户确认
dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.
Read the full README on GitHubLIMITATIONS
Known limitations
Static scanning is intentionally conservative and can produce findings for security-related example strings or regular expressions. It is a review signal, not proof of malware. Semantic review also requires an active DSH model and credentials; if the current model cannot be determined, the plugin fails closed.
