Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST (JS-X-Ray) + deobfuscation + regex. Catches obfuscated exfiltration, eval, hidden shell commands.
dsh plugin --profile web add github:zoahdev/dsh-poison-guard
View the source on GitHub