DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.
dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
View the source on GitHub