Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
dsh plugin --profile web add github:shaoshi20/dshscan#path:benchmark/cases/malicious-remote-download-exec-powershell