DSH Plugin Market

Key features

• Live community browse of the GitHub dsh-plugin topic (ranked by stars / latest, paginated) plus a personal My Favorites list (☆-save, survives restarts)
• Audit gate (fail-closed)before install/update, the exact artifact that would be installed (npm dist tarball or GitHub codeload HEAD) is downloaded into a temp dir and scanned statically — code is never executed
• Cross-language searchChinese queries find English plugins and vice versa — built-in thesaurus plus real-time LLM translation via the host model
• Pre-install audit of the exact published artifact (dynamic exec, credential access, install scripts are hard-blocked)
• when blocked, the audit card offers "Install anyway" (forced download, at your own risk) and "Cancel" side by side