dshpluginsdshplugins.cc

toby-bridges/api-relay-audit

Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.

notifyLicense AGPL-3.0Python
73Health score

About this plugin

Your Agent Is Mine documents malicious API relays injecting payloads and exfiltrating credentials. Anthropic's September 10, 2026 report describes fraudulent Claude resellers swapping models and harvesting credentials through their client tooling. In his September 11 disclosure, co-author Chaofan Shou reports buying router data containing users' credentials.

Keywords
ai-agentsai-auditai-securityanthropicapi-gatewayclaudedsh-pluginllm-auditllm-proxyllm-securitymodel-substitutionopenai-apiprompt-injectionpythonsecurity-auditsecurity-scannersupply-chain-securitytool-call-rewritingweb3-securityweb3-wallet
Install · dsh CLI
npm$ dsh plugin --profile web add dsh-api-relay-audit
github$ dsh plugin --profile web add github:toby-bridges/api-relay-audit

Health breakdown

73 / 100
License15 / 25
Repo verified15 / 15
Documentation15 / 15
Adoption · stars20 / 20
Community · forks8 / 10
Distribution · downloads0 / 15

Score reflects license, community signals, documentation and distribution. It is not a code audit — review the source before installing.

Security

LicenseAGPL-3.0 ✓
Risk disclosurepartial — review the source
Network callsnone
Credentialsno
Manifestdeclared

Key metrics

Downloads / mo0
Star trend873
↑ 1%past week
Stars
873
Forks
83
Listed
Sep 18, 2026
Last updated
Oct 10, 2026

Related

Related plugins

MichengAI/dsh-im-connect82

Connects WeChat, WeCom, DingTalk, Feishu, Lark, QQ, and Telegram to a local DeepSeek Harness agent, with each IM chat as a separate workspace channel.

135.8k 42
liustack/modlens100

DeepSeek's flagship chat models, and GLM-5.3 itself, are text-only and cannot read images. GLM-5.3-Flash is native multimodal. ModLens is a plug-in vision engine that gives a text-only model sight. ModLens reads images pasted straight into the chat, no saving to a file and passing a path first.

97.1k 4.2k
xmanrui/dsh-im95

通过扫码或机器人凭据把IM机器人接入DeepSeek Harness(支持飞书、微信、钉钉、企业微信、QQ、Slack、Telegram、Discord和WhatsApp)。 Connect IM bots to DeepSeek Harness via QR code or credentials (9 channels).

62.9k 1.8k
john-walks-slow/dsh-im-humanize67

Humanized fork of @xmanrui/dsh-im (base 4.21.2): humanized message delivery with send-delay and typing two-phase, message_break + streaming coexistence, status reactions, reply quotes, per-bot humanize overrides, and a no_reply reclaim tool — across WeChat, Feishu, DingTalk, WeCom, QQ, Telegram, Slack and WhatsApp channels.

62.9k 1
shaobeichen/dsh-pocket83

把 DeepSeek Harness 装进你的口袋:电脑上跑 dsh web,手机扫码即同步访问(局域网 + 公网,实时同屏)Put DeepSeek Harness in your pocket: run dsh web on your computer and access it synchronously by scanning a QR code on your phone (LAN + public network, real‑time screen mirroring)

16.4k 1.6k
wenbin-wb/dsh-bridge83

Remote and mobile access for DeepSeek Harness: provides LAN QR code connection, Cloudflare/custom tunnels, WeChat, QQ, Feishu, Telegram bot integration, and security authentication.

11.6k 189