dsh-preset-github-plugin-security-review

DSH agent preset: a two-role (recon scout -> security auditor) pipeline that statically reviews plugin source downloaded from GitHub. Never installs, never executes, and never runs any code from the reviewed repository.