#3062 · Plugin
DSH Security Audit
By omdsh-dev
Adds policy, review, diagnostics, or safety controls around agent actions.
Plugin curation evidence
- Primary use case
- Govern and secure
- Curation score
- 88 / 100
- Utility and fit
- 24 / 25
- Source and license
- 20 / 20
- Security and privacy
- 8 / 15
- Maintenance
- 13 / 15
- Documentation
- 14 / 15
- Differentiation
- 9 / 10
Localized evidence summary
- DSH Security Audit is reviewed for the “Govern and secure” outcome; its primary use case is part of the published record.
- Official source omdsh-dev/dsh-security-audit@deeb194dc9bf03047acf77013d17bbd5257e965a and its immutable MIT license evidence are bound to this record.
- The 7 source-bound evidence notes support a score of 88; the Plugin remains showcase-only until separate runtime certification passes.
Exact source-bound evidence (recorded in English)
- Pinned CSV row 52: omdsh-dev/dsh-security-audit; kind=installable_dsh_plugin; category=security_audit.
- Row facts: verification=verified; risk=high; licenseClaim=MIT; lastActivity=2026-08-13.
- Verification source: README and dsh.bundle.patch; category frequency in reviewed pool=1.
- Independent official-source review: omdsh-dev/dsh-security-audit@deeb194dc9bf03047acf77013d17bbd5257e965a; SPDX MIT; https://github.com/omdsh-dev/dsh-security-audit/blob/deeb194dc9bf03047acf77013d17bbd5257e965a/LICENSE.
- Pinned candidate identity omdsh-dev/dsh-security-audit: kind=installable_dsh_plugin; verification=verified; risk=high.
- Official source omdsh-dev/dsh-security-audit@deeb194dc9bf03047acf77013d17bbd5257e965a binds SPDX MIT through LICENSE.
- Review decision: Selected as catalogId 3062 for govern-and-secure; official source and license were independently rebound after CSV discovery.
Pinned upstream source
- Pinned source
- deeb194dc9bf03047acf77013d17bbd5257e965a
- Reviewed
- August 26, 2026
Rights and attribution
- License
- MITOpens in a new window
- Asset rights
- The software license is verified for the pinned source; media and user-supplied content remain separately governed.
- Trademarks
- Project and platform names identify their sources and do not imply endorsement.
Runtime and compatibility
- Runtime status
- Runtime review pending
- Network behavior
- Executable plugin behavior must be read from the pinned source and disclosed before installation.
- Risk disclosure
- Directory publication is not an executable-runtime certification.
- Rollback
- No installation occurs, so rollback is not applicable.
- Compatible
- Verification pending · 0.1.1-rc.2
- Distribution
- Upstream source
Admission checks
Documentation · Passed
The official project documents its Harness-facing purpose and integration boundary.
Source integrity · Passed
Source and license use one immutable commit.
Maintenance · Passed
The project appears in the pinned independently maintained candidate evidence set.
Preview quality · Passed
A deterministic editorial illustration is bound to pinned project documentation and identified in source evidence.
Compatibility · Pending
Directory publication is not an executable-runtime certification.
A descriptive, source-backed catalog record
Review the pinned source, license, runtime notes, and rollback path here, then open the upstream project to download or follow its installation guidance.