{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"simon300000-dsh-auto","slug":"simon300000-dsh-auto","rank":651,"url":"https://github.com/simon300000/dsh-auto","name":"simon300000/dsh-auto","category":"security","description":{"zh":"为 WebUI 增加 Auto Approve 权限档位，由全新且受限的审查 Agent 逐次允许或拒绝审批请求。","en":"Adds an Auto Approve permission preset to the Web UI, using a fresh restricted Reviewer Agent to allow or deny each approval request."},"stars":4,"starsCheckedAt":"2026-08-21","repository":{"owner":"simon300000","repo":"dsh-auto","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:simon300000/dsh-auto","tarball":null,"added":"2026-08-14","page":"https://awesome-dsh-plugin.com/p/simon300000/dsh-auto/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"simon300000-dsh-auto","slug":"simon300000-dsh-auto","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-21T13:17:05.902Z","scanStatus":"static-complete","verdict":"caution","score":95,"commit":"eb409400843e195886edb45d9a75d2188120a2b6","commitDate":"2026-08-14T22:57:47+08:00","artifactDigest":"sha256:804e3650c2858849eb521df0641ad508fb9f3f31c229753f66fa6f39d5e9ee76","downloadUrl":"https://github.com/simon300000/dsh-auto/archive/eb409400843e195886edb45d9a75d2188120a2b6.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:simon300000/dsh-auto","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-auto","packageVersion":"0.1.0","bundle":{"patch":"./cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"not-published","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-auto","nameMatch":null,"npm":null,"repositoryMatch":"not-checked","provenance":"not-checked","tarballHost":null},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-auto-approve","name":"dsh-auto","path":"cordis.patch.yml","disabled":false}],"overrides":[{"id":"permission","tier":"critical","mode":"override","disabled":false,"replacesImplementation":false,"name":null,"keys":["presets"],"path":"cordis.patch.yml"}],"jsExpressions":0,"clientPlatform":null,"parseErrors":[]},"capabilities":["agent-control","filesystem","host-bundle"],"outboundHosts":[],"findings":[{"id":"HT-PERMISSION-001","title":"覆盖安全关键宿主能力","severity":"medium","confidence":"high","path":"cordis.patch.yml","line":3,"evidence":"override: id=permission config[presets]","remediation":"安全关键 seam 的替换必须逐项解释、最小化，并接受人工复核；用户安装前应知晓该能力被谁接管。","note":"改写配置 权限预设（permission）","layer":"dsh-semantics","pathClass":"cordis","hash":"3f8552c40e7de21122e3f5b0","review":{"verdict":"functional","reason":"该覆盖为插件核心功能：在permission.config.presets中新增auto档(sandbox: workspace-write, approval: ask)，并配合分类器prompt对危险/不确定操作强制ask，与其自述功能一致，未见默认放开danger-full-access等异常改写。","model":"sonnet@p2","reviewedAt":"2026-08-21T13:16:43.218Z"}}],"counts":{"critical":0,"high":0,"medium":1,"low":0},"rawCounts":{"critical":0,"high":0,"medium":1,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":9,"bytesScanned":58367,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":4,"cordis":1,"manifest":1,"source":2,"test-example-docs":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-21T13:17:05.902Z","summary":null,"intentMatch":null,"findingsReviewed":1,"findingsCandidates":1,"fromCache":1,"usage":null}},"timeline":[{"scannedAt":"2026-08-21T13:17:05.902Z","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.2","verdict":"caution","status":"static-complete"},{"scannedAt":"2026-08-21T11:28:48.655Z","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.1","verdict":"caution","status":"static-complete"},{"scannedAt":"2026-08-21T10:57:51.547Z","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.0","verdict":"caution","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.2","at":"2026-08-21T13:17:05.902Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:28:48.655Z"},{"kind":"first-scan","from":null,"to":"caution","commit":"eb409400843e195886edb45d9a75d2188120a2b6","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:57:51.547Z"}]}