@moonquake2004/dsh-security 0.1.0

package/src/checks/ss1-credential-leak.mjs

@@ -0,0 +1,158 @@
+/**
+ * SS1: Credential Leak — 会话日志凭据泄露检测
+ *
+ * 扫描 session.jsonl 中的敏感凭据（API key/token/私钥）。
+ * 检查是否已通过 dsh-redact 脱敏。
+ *
+ * Severity: CRITICAL
+ * Phase: POST_INSTALL
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { createReadStream } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+/** 凭据模式 */
+const CREDENTIAL_PATTERNS = [
+  { name: 'OpenAI API Key', regex: /sk-[a-zA-Z0-9]{20,}/g },
+  { name: 'GitHub PAT', regex: /ghp_[a-zA-Z0-9]{36}/g },
+  { name: 'GitHub Fine-grained PAT', regex: /github_pat_[a-zA-Z0-9_]{20,}/g },
+  { name: 'AWS Access Key', regex: /AKIA[0-9A-Z]{16}/g },
+  { name: 'Slack Token', regex: /xox[baprs]-[a-zA-Z0-9-]+/g },
+  { name: 'Google API Key', regex: /AIza[0-9A-Za-z_-]{35}/g },
+  { name: 'PEM Private Key', regex: /-----BEGIN (RSA |EC |DSA )?PRIVATE KEY-----/g },
+  { name: 'Bearer Token', regex: /Bearer\s+[a-zA-Z0-9._-]{20,}/g },
+  { name: 'Basic Auth', regex: /Basic\s+[a-zA-Z0-9+/=]{20,}/g },
+];
+
+/**
+ * 从一行 JSONL 中提取文本内容
+ */
+function extractTextFromLine(line) {
+  try {
+    const event = JSON.parse(line);
+    // 递归提取所有字符串值
+    const texts = [];
+    function extract(obj) {
+      if (typeof obj === 'string') {
+        texts.push(obj);
+      } else if (Array.isArray(obj)) {
+        for (const item of obj) extract(item);
+      } else if (obj && typeof obj === 'object') {
+        for (const val of Object.values(obj)) extract(val);
+      }
+    }
+    extract(event.data || event);
+    return texts.join(' ');
+  } catch {
+    return '';
+  }
+}
+
+/**
+ * 扫描单行中的凭据
+ */
+function scanLine(text) {
+  const findings = [];
+  for (const pattern of CREDENTIAL_PATTERNS) {
+    const matches = text.matchAll(new RegExp(pattern.regex.source, 'g'));
+    for (const match of matches) {
+      findings.push({
+        type: pattern.name,
+        snippet: match[0].slice(0, 20) + '...' + match[0].slice(-4),
+      });
+    }
+  }
+  return findings;
+}
+
+/**
+ * SS1 检查：扫描会话日志中的凭据泄露
+ * @param {string} sessionFile - session.jsonl 或 session.jsonl.zstd 路径
+ * @returns {Promise<import('../protocol/check.mjs').SecurityCheckResult>}
+ */
+export async function run(sessionFile) {
+  const id = 'SS1';
+
+  if (!existsSync(sessionFile)) {
+    return pass(id, Severity.CRITICAL, '会话文件不存在，跳过检查');
+  }
+
+  // 检查是否是 zstd 压缩的（需要先解压）
+  if (sessionFile.endsWith('.zstd')) {
+    return pass(id, Severity.CRITICAL, 'zstd 压缩的会话文件需先解压再检查（或使用 dsh-redact 直接处理）');
+  }
+
+  // 检查是否已通过 dsh-redact 脱敏
+  try {
+    const firstLines = createReadStream(sessionFile, { encoding: 'utf8' });
+    const rl = createInterface({ input: firstLines, crlfDelay: Infinity });
+    let alreadyRedacted = false;
+    let checkCount = 0;
+    for await (const line of rl) {
+      if (checkCount++ > 5) break;
+      if (line.includes('[REDACTED]') || line.includes('[redacted]') || line.includes('***')) {
+        alreadyRedacted = true;
+        break;
+      }
+    }
+    firstLines.destroy();
+    if (alreadyRedacted) {
+      return pass(id, Severity.CRITICAL, '会话文件似乎已通过 dsh-redact 脱敏');
+    }
+  } catch { /* 继续正常检查 */ }
+
+  const findings = [];
+  let lineCount = 0;
+
+  const fileStream = createReadStream(sessionFile, { encoding: 'utf8' });
+  const rl = createInterface({ input: fileStream, crlfDelay: Infinity });
+
+  for await (const line of rl) {
+    lineCount++;
+    if (!line.trim()) continue;
+    const text = extractTextFromLine(line);
+    if (!text) continue;
+    const lineFindings = scanLine(text);
+    for (const f of lineFindings) {
+      findings.push({ ...f, line: lineCount });
+    }
+  }
+
+  if (findings.length === 0) {
+    return pass(id, Severity.CRITICAL, `扫描 ${lineCount} 行会话日志，未检测到凭据泄露`);
+  }
+
+  // 按类型聚合
+  const byType = {};
+  for (const f of findings) {
+    if (!byType[f.type]) byType[f.type] = 0;
+    byType[f.type]++;
+  }
+
+  const summary = Object.entries(byType)
+    .map(([type, count]) => `${type}: ${count}`)
+    .join(', ');
+
+  const details = findings
+    .slice(0, 10)
+    .map(f => `行 ${f.line} — ${f.type}（${f.snippet}）`)
+    .join('\n');
+
+  const fix = '使用 dsh-redact 脱敏后再分享会话日志：npx dsh-redact <session.jsonl> --out redacted.jsonl';
+
+  return fail(id, Severity.CRITICAL, `检测到 ${findings.length} 个凭据泄露（${summary}）：\n${details}`, fix, ['#962']);
+}
+
+export const ss1Check = {
+  id: 'SS1',
+  name: 'credential-leak',
+  severity: Severity.CRITICAL,
+  phase: CheckPhase.POST_INSTALL,
+  description: '会话日志凭据泄露检测',
+  src: 'builtin',
+  runner: (sessionFile) => run(sessionFile),
+};

package/src/checks/ss2-pii-exposure.mjs

@@ -0,0 +1,70 @@
+/**
+ * SS2: PII Exposure — PII 数据暴露检测
+ *
+ * 扫描会话日志中的个人身份信息（PII）：
+ * - 邮箱地址
+ * - 电话号码
+ * - 身份证号码
+ * - IP 地址
+ *
+ * Severity: MEDIUM
+ * Phase: POST_INSTALL
+ */
+
+import { existsSync, createReadStream } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+const PII_PATTERNS = [
+  { name: 'email', regex: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, severity: 'medium' },
+  { name: 'phone', regex: /(\+?86)?1[3-9]\d{9}/g, severity: 'medium' },
+  { name: 'ID card', regex: /[1-9]\d{5}(19|20)\d{2}(0[1-9]|1[0-2])(0[1-9]|[12]\d|3[01])\d{3}[\dXx]/g, severity: 'high' },
+  { name: 'IPv4', regex: /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/g, severity: 'low' },
+];
+
+function extractTextFromLine(line) {
+  try {
+    const event = JSON.parse(line);
+    const texts = [];
+    function extract(obj) {
+      if (typeof obj === 'string') texts.push(obj);
+      else if (Array.isArray(obj)) obj.forEach(extract);
+      else if (obj && typeof obj === 'object') Object.values(obj).forEach(extract);
+    }
+    extract(event.data || event);
+    return texts.join(' ');
+  } catch { return ''; }
+}
+
+export async function run(sessionFile) {
+  const id = 'SS2';
+  if (!sessionFile || !existsSync(sessionFile)) return pass(id, Severity.MEDIUM, '无会话文件，跳过 PII 检测');
+  if (sessionFile.endsWith('.zstd')) return pass(id, Severity.MEDIUM, 'zstd 文件需先解压');
+
+  const findings = [];
+  let lineCount = 0;
+  const rl = createInterface({ input: createReadStream(sessionFile, { encoding: 'utf8' }), crlfDelay: Infinity });
+
+  for await (const line of rl) {
+    lineCount++;
+    if (!line.trim()) continue;
+    const text = extractTextFromLine(line);
+    for (const pattern of PII_PATTERNS) {
+      for (const match of text.matchAll(new RegExp(pattern.regex.source, 'g'))) {
+        findings.push({ type: pattern.name, severity: pattern.severity, line: lineCount, snippet: match[0].slice(0, 30) });
+      }
+    }
+  }
+
+  if (findings.length === 0) return pass(id, Severity.MEDIUM, `扫描 ${lineCount} 行，未检测到 PII 暴露`);
+
+  const byType = {};
+  for (const f of findings) { if (!byType[f.type]) byType[f.type] = 0; byType[f.type]++; }
+  const summary = Object.entries(byType).map(([t, c]) => `${t}: ${c}`).join(', ');
+  const details = findings.slice(0, 10).map(f => `行${f.line} — ${f.type}: ${f.snippet}`).join('\n');
+  return fail(id, Severity.MEDIUM, `检测到 ${findings.length} 个 PII 暴露（${summary}）：\n${details}`, '使用 dsh-redact 脱敏后再分享会话日志');
+}
+
+export const ss2Check = { id: 'SS2', name: 'pii-exposure', severity: Severity.MEDIUM, phase: CheckPhase.POST_INSTALL, description: 'PII 数据暴露检测', src: 'builtin', runner: (f) => run(f) };

package/src/checks/ss3-sensitive-output.mjs

@@ -0,0 +1,63 @@
+/**
+ * SS3: Sensitive Output — 插件输出敏感数据检测
+ *
+ * 扫描会话日志中工具输出的敏感数据：
+ * - 大量文件内容泄露
+ * - 环境变量输出
+ * - 配置文件内容
+ *
+ * Severity: LOW
+ * Phase: POST_INSTALL
+ */
+
+import { existsSync, createReadStream } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+import { pass, fail } from '../protocol/check.mjs';
+
+const SENSITIVE_OUTPUT_PATTERNS = [
+  { name: 'env dump', regex: /(?:process\.env|ENV|env)\s*[=:]\s*\{[^}]{50,}/gi, severity: 'medium' },
+  { name: 'config dump', regex: /(?:config|settings|credentials)\s*[=:]\s*\{[^}]{100,}/gi, severity: 'medium' },
+  { name: 'large file content', regex: /(?:readFileSync|cat\s+)\S+[\s\S]{500,}/gi, severity: 'low' },
+];
+
+function extractToolOutputs(line) {
+  try {
+    const event = JSON.parse(line);
+    if (event.type !== 'tool/result') return [];
+    const data = event.data || {};
+    const output = data.output || data.result || data.text || '';
+    return [typeof output === 'string' ? output : JSON.stringify(output)];
+  } catch { return []; }
+}
+
+export async function run(sessionFile) {
+  const id = 'SS3';
+  if (!sessionFile || !existsSync(sessionFile)) return pass(id, Severity.LOW, '无会话文件，跳过敏感输出检测');
+  if (sessionFile.endsWith('.zstd')) return pass(id, Severity.LOW, 'zstd 文件需先解压');
+
+  const findings = [];
+  let lineCount = 0;
+  const rl = createInterface({ input: createReadStream(sessionFile, { encoding: 'utf8' }), crlfDelay: Infinity });
+
+  for await (const line of rl) {
+    lineCount++;
+    if (!line.trim()) continue;
+    const outputs = extractToolOutputs(line);
+    for (const output of outputs) {
+      for (const pattern of SENSITIVE_OUTPUT_PATTERNS) {
+        for (const match of output.matchAll(new RegExp(pattern.regex.source, 'g'))) {
+          findings.push({ type: pattern.name, severity: pattern.severity, line: lineCount, snippet: match[0].slice(0, 60) });
+        }
+      }
+    }
+  }
+
+  if (findings.length === 0) return pass(id, Severity.LOW, `扫描 ${lineCount} 行，未检测到敏感输出`);
+
+  const details = findings.slice(0, 10).map(f => `行${f.line} — ${f.type}: ${f.snippet}`).join('\n');
+  return fail(id, Severity.LOW, `检测到 ${findings.length} 个敏感输出模式：\n${details}`, '检查工具输出是否包含不必要的敏感信息');
+}
+
+export const ss3Check = { id: 'SS3', name: 'sensitive-output', severity: Severity.LOW, phase: CheckPhase.POST_INSTALL, description: '插件输出敏感数据检测', src: 'builtin', runner: (f) => run(f) };

package/src/config.mjs

@@ -0,0 +1,43 @@
+/**
+ * DSH Security Framework — 配置管理
+ *
+ * 支持 ~/.dsh/security.json 配置文件：
+ * - 启用/禁用特定检查
+ * - 覆盖 severity 阈值
+ * - 配置外部工具集成
+ */
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+
+const DEFAULT_CONFIG = {
+  enabled: false,
+  checks: {},
+  external: {},
+  severityThreshold: 'info',
+  autoRedact: true,
+};
+
+export function loadConfig(dshHome) {
+  const configPath = join(dshHome || join(homedir(), '.dsh'), 'security.json');
+  if (!existsSync(configPath)) return DEFAULT_CONFIG;
+  try {
+    const raw = JSON.parse(readFileSync(configPath, 'utf8'));
+    return { ...DEFAULT_CONFIG, ...raw };
+  } catch {
+    return DEFAULT_CONFIG;
+  }
+}
+
+export function isCheckEnabled(config, checkId) {
+  if (!config.enabled) return false;
+  const checkConfig = config.checks[checkId];
+  if (checkConfig && checkConfig.enabled === false) return false;
+  return true;
+}
+
+export function getCheckSeverity(config, checkId, defaultSeverity) {
+  const checkConfig = config.checks[checkId];
+  return checkConfig?.severity || defaultSeverity;
+}

package/src/index.mjs

@@ -0,0 +1,49 @@
+/**
+ * DSH Security Framework — 统一安全检查框架
+ *
+ * 为 DSH 生态提供全生命周期安全检查（17 个检查项，4 层架构）。
+ *
+ * @example
+ * import { createDefaultRegistry } from '@moonquake2004/dsh-security';
+ * const registry = await createDefaultRegistry();
+ * const { results, exitCode, summary } = await registry.runAll((check) => profileDir);
+ */
+
+// Protocol
+export { Severity, severityToExitCode, severityGte, maxSeverity } from './protocol/severity.mjs';
+export { CheckPhase } from './protocol/phase.mjs';
+export { createResult, pass, fail } from './protocol/check.mjs';
+
+// Layer 1: Static Checks
+export { sp1Check } from './checks/sp1-dependency-audit.mjs';
+export { sp2Check } from './checks/sp2-secret-scan.mjs';
+export { sp3Check } from './checks/sp3-sandbox-consistency.mjs';
+export { sp4Check } from './checks/sp4-entry-poison.mjs';
+export { sp5Check } from './checks/sp5-permission-model.mjs';
+export { sp6Check } from './checks/sp6-vuln-match.mjs';
+
+// Layer 2: Runtime Checks
+export { sr1Check } from './checks/sr1-sandbox-violation.mjs';
+export { sr2Check } from './checks/sr2-privilege-escalation.mjs';
+export { sr3Check } from './checks/sr3-data-exfiltration.mjs';
+export { sr4Check } from './checks/sr4-isolation-verify.mjs';
+
+// Layer 3: Lifecycle Checks
+export { sl1Check } from './checks/sl1-supply-chain.mjs';
+export { sl2Check } from './checks/sl2-update-integrity.mjs';
+export { sl3Check } from './checks/sl3-reputation-score.mjs';
+export { sl4Check } from './checks/sl4-release-compat.mjs';
+
+// Session Checks
+export { ss1Check } from './checks/ss1-credential-leak.mjs';
+export { ss2Check } from './checks/ss2-pii-exposure.mjs';
+export { ss3Check } from './checks/ss3-sensitive-output.mjs';
+
+// Registry
+export { SecurityCheckRegistry, createDefaultRegistry } from './registry.mjs';
+
+// Integrations
+export { poisonGuardCheck, sandboxAuditCheck, ecosystemCheck, pluginReducerCheck } from './integrations/index.mjs';
+
+// Config
+export { loadConfig, isCheckEnabled, getCheckSeverity } from './config.mjs';

package/src/integrations/ecosystem.mjs

@@ -0,0 +1,95 @@
+/**
+ * dsh-ecosystem 集成
+ *
+ * 从 dsh-ecosystem 获取发布兼容性数据：
+ * - 已知 bug 状态
+ * - 发布兼容性报告
+ * - 生态健康信号
+ */
+
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+
+const ECOSYSTEM_API = 'https://raw.githubusercontent.com/zoahdev/dsh-ecosystem/main/docs';
+
+/**
+ * 获取发布兼容性报告
+ */
+async function fetchReleaseCompat() {
+  try {
+    const response = await fetch(`${ECOSYSTEM_API}/release-compat/`, { signal: AbortSignal.timeout(10000) });
+    if (!response.ok) return null;
+    // 解析目录列表找最新的兼容性报告
+    const text = await response.text();
+    const match = text.match(/release-compat-[\d-]+\.md/);
+    if (!match) return null;
+
+    const reportResponse = await fetch(`${ECOSYSTEM_API}/release-compat/${match[0]}`, { signal: AbortSignal.timeout(10000) });
+    if (!reportResponse.ok) return null;
+    return await reportResponse.text();
+  } catch { return null; }
+}
+
+/**
+ * 获取 bug 雷达
+ */
+async function fetchBugRadar() {
+  try {
+    const response = await fetch(`${ECOSYSTEM_API}/weekly-2026-08-15.md`, { signal: AbortSignal.timeout(10000) });
+    if (!response.ok) return null;
+    return await response.text();
+  } catch { return null; }
+}
+
+export async function runCheck(profileDir) {
+  const id = 'EXT-ECO-1';
+
+  const releaseNotes = await fetchReleaseCompat();
+  const bugRadar = await fetchBugRadar();
+
+  if (!releaseNotes && !bugRadar) {
+    return { id, ok: true, severity: Severity.LOW, detail: 'dsh-ecosystem 数据源不可用，跳过生态兼容性检查' };
+  }
+
+  const issues = [];
+
+  // 检查是否有已知的 breaking changes
+  if (releaseNotes) {
+    const breakingMatch = releaseNotes.match(/breaking|incompatible|migration/gi);
+    if (breakingMatch && breakingMatch.length > 0) {
+      issues.push({ type: 'breaking-changes', detail: `发布兼容性报告中发现 ${breakingMatch.length} 个 breaking change 提及` });
+    }
+  }
+
+  // 检查是否有 critical bugs
+  if (bugRadar) {
+    const criticalMatch = bugRadar.match(/critical|CRITICAL|严重/gi);
+    if (criticalMatch && criticalMatch.length > 0) {
+      issues.push({ type: 'critical-bugs', detail: `Bug 雷达中发现 ${criticalMatch.length} 个 critical 级别问题` });
+    }
+  }
+
+  if (issues.length === 0) {
+    return { id, ok: true, severity: Severity.LOW, detail: 'dsh-ecosystem 生态兼容性检查通过' };
+  }
+
+  const details = issues.map(i => `${i.type}: ${i.detail}`).join('\n');
+  return {
+    id,
+    ok: false,
+    severity: Severity.LOW,
+    detail: `dsh-ecosystem 检测到 ${issues.length} 个生态关注点：\n${details}`,
+    fix: '查看 dsh-ecosystem 周报获取最新生态状态',
+  };
+}
+
+export const ecosystemCheck = {
+  id: 'EXT-ECO-1',
+  name: 'ecosystem-compat',
+  severity: Severity.LOW,
+  phase: CheckPhase.LIFECYCLE,
+  description: 'dsh-ecosystem 生态兼容性检查',
+  src: 'external',
+  source: 'dsh-ecosystem',
+  runner: (profileDir) => runCheck(profileDir),
+};

package/src/integrations/index.mjs

@@ -0,0 +1,37 @@
+export { poisonGuardCheck, isAvailable as isPoisonGuardAvailable } from './poison-guard.mjs';
+export { sandboxAuditCheck, isAvailable as isSandboxAuditAvailable } from './sandbox-audit.mjs';
+export { ecosystemCheck } from './ecosystem.mjs';
+export { pluginReducerCheck, isAvailable as isPluginReducerAvailable } from './plugin-reducer.mjs';
+
+/**
+ * 获取所有可用的外部集成检查
+ */
+export async function getAvailableIntegrations() {
+  const integrations = [];
+
+  // dsh-poison-guard（需要安装）
+  try {
+    const mod = await import('./poison-guard.mjs');
+    if (mod.isAvailable()) integrations.push(mod.poisonGuardCheck);
+  } catch { /* skip */ }
+
+  // dsh-sandbox-audit（需要安装）
+  try {
+    const mod = await import('./sandbox-audit.mjs');
+    if (mod.isAvailable()) integrations.push(mod.sandboxAuditCheck);
+  } catch { /* skip */ }
+
+  // dsh-ecosystem（总是可用，网络 API）
+  try {
+    const mod = await import('./ecosystem.mjs');
+    integrations.push(mod.ecosystemCheck);
+  } catch { /* skip */ }
+
+  // dsh-plugin-reducer（需要安装）
+  try {
+    const mod = await import('./plugin-reducer.mjs');
+    if (mod.isAvailable()) integrations.push(mod.pluginReducerCheck);
+  } catch { /* skip */ }
+
+  return integrations;
+}

package/src/integrations/plugin-reducer.mjs

@@ -0,0 +1,66 @@
+/**
+ * dsh-plugin-reducer 集成
+ *
+ * 在检测到故障时，提供最小化故障插件集的能力。
+ * 如果 dsh-plugin-reducer 已安装，自动建议运行。
+ */
+
+import { execSync } from 'node:child_process';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+
+export function isAvailable() {
+  try {
+    execSync('which dsh-plugin-reducer', { encoding: 'utf8', stdio: 'pipe' });
+    return true;
+  } catch {
+    try {
+      execSync('npx dsh-plugin-reducer --version', { encoding: 'utf8', stdio: 'pipe', timeout: 10000 });
+      return true;
+    } catch { return false; }
+  }
+}
+
+export async function runReducer(profileDir, probeType = 'web') {
+  const id = 'EXT-RED-1';
+
+  if (!isAvailable()) {
+    return { id, ok: true, severity: Severity.LOW, detail: 'dsh-plugin-reducer 未安装，跳过故障最小化' };
+  }
+
+  try {
+    const output = execSync(`npx dsh-plugin-reducer --profile "${profileDir}" --probe ${probeType} --report /tmp/reducer-report.json --json`, {
+      encoding: 'utf8',
+      timeout: 120000,
+      stdio: ['pipe', 'pipe', 'pipe'],
+    });
+
+    const result = JSON.parse(output);
+
+    if (result.minimalSet && result.minimalSet.length > 0) {
+      return {
+        id,
+        ok: false,
+        severity: Severity.MEDIUM,
+        detail: `dsh-plugin-reducer 找到最小故障插件集：${result.minimalSet.join(', ')}`,
+        fix: '移除或禁用故障插件集中的插件',
+        evidence: result,
+      };
+    }
+
+    return { id, ok: true, severity: Severity.LOW, detail: 'dsh-plugin-reducer 未发现故障插件集' };
+  } catch (e) {
+    return { id, ok: true, severity: Severity.LOW, detail: `dsh-plugin-reducer 执行失败：${e.message.slice(0, 80)}` };
+  }
+}
+
+export const pluginReducerCheck = {
+  id: 'EXT-RED-1',
+  name: 'plugin-reducer',
+  severity: Severity.MEDIUM,
+  phase: CheckPhase.LIFECYCLE,
+  description: 'dsh-plugin-reducer 故障最小化',
+  src: 'external',
+  source: 'dsh-plugin-reducer',
+  runner: (profileDir) => runReducer(profileDir),
+};

package/src/integrations/poison-guard.mjs

@@ -0,0 +1,83 @@
+/**
+ * dsh-poison-guard 集成
+ *
+ * 通过 Plugin Interface 注册投毒扫描检查。
+ * 如果 dsh-poison-guard 已安装，自动集成到安全检查流程。
+ */
+
+import { execSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { Severity } from '../protocol/severity.mjs';
+import { CheckPhase } from '../protocol/phase.mjs';
+
+/**
+ * 检测 dsh-poison-guard 是否可用
+ */
+export function isAvailable() {
+  try {
+    execSync('which dsh-poison-guard', { encoding: 'utf8', stdio: 'pipe' });
+    return true;
+  } catch {
+    // 也检查 npx 可用性
+    try {
+      execSync('npx dsh-poison-guard --version', { encoding: 'utf8', stdio: 'pipe', timeout: 10000 });
+      return true;
+    } catch {
+      return false;
+    }
+  }
+}
+
+/**
+ * 运行 dsh-poison-guard 扫描
+ * @param {string} targetPath - 要扫描的目录或包路径
+ * @returns {Promise<import('../protocol/check.mjs').SecurityCheckResult>}
+ */
+export async function runScan(targetPath) {
+  const id = 'EXT-PG-1';
+
+  if (!isAvailable()) {
+    return { id, ok: true, severity: Severity.HIGH, detail: 'dsh-poison-guard 未安装，跳过投毒扫描' };
+  }
+
+  try {
+    const output = execSync(`npx dsh-poison-guard scan "${targetPath}" --json`, {
+      encoding: 'utf8',
+      timeout: 60000,
+      stdio: ['pipe', 'pipe', 'pipe'],
+    });
+
+    const result = JSON.parse(output);
+
+    if (result.clean || result.vulnerabilities?.length === 0) {
+      return { id, ok: true, severity: Severity.HIGH, detail: 'dsh-poison-guard 扫描通过：未检测到投毒模式' };
+    }
+
+    const vulns = result.vulnerabilities || [];
+    const details = vulns.slice(0, 10).map(v => `[${v.severity}] ${v.type}: ${v.message}`).join('\n');
+
+    return {
+      id,
+      ok: false,
+      severity: Severity.HIGH,
+      detail: `dsh-poison-guard 检测到 ${vulns.length} 个投毒模式：\n${details}`,
+      fix: '检查相关插件的源码，移除恶意代码',
+    };
+  } catch (e) {
+    return { id, ok: true, severity: Severity.HIGH, detail: `dsh-poison-guard 执行失败：${e.message.slice(0, 80)}` };
+  }
+}
+
+/**
+ * dsh-poison-guard 集成检查对象
+ */
+export const poisonGuardCheck = {
+  id: 'EXT-PG-1',
+  name: 'poison-scan',
+  severity: Severity.HIGH,
+  phase: CheckPhase.POST_INSTALL,
+  description: 'dsh-poison-guard 投毒扫描（AST + 反混淆）',
+  src: 'external',
+  source: 'dsh-poison-guard',
+  runner: (targetPath) => runScan(targetPath),
+};