Task fit
30%15 points for catalog classification, 8 for an explicit category tag, and 7 when the name, description, or tags match: security, guard, credential, approval, audit, sandbox, redaction, safe, permission.
Security, guardrail, audit, credential, and safety projects ranked by public ecosystem evidence—not assumed trust.
Published selection rule
Standalone, installable public repositories classified as Security. Upstream, directory/list, archived, adaptation-required, watch, removed, placeholder, and non-plugin records are excluded. This is discovery, not a source-code security audit.
Ties are resolved by maintenance score, then Stars, then repository name.
100
point scale
15 points for catalog classification, 8 for an explicit category tag, and 7 when the name, description, or tags match: security, guard, credential, approval, audit, sandbox, redaction, safe, permission.
25 points if updated within 30 days; then 20 within 90, 14 within 180, 8 within 365, and 2 thereafter.
Stars are bucketed, not directly sorted: 20 at 1,000+, 17 at 250+, 14 at 50+, 10 at 10+, 7 at 3+, and 4 at 1+.
Forks are bucketed: 10 at 100+, 8 at 25+, 6 at 10+, 4 at 3+, and 2 at 1+.
8 points for Awesome + Topic, 6 for Awesome only, or 2 for Topic only; 4 for an 80+ character English description or 2 for 30+; 3 for 3+ tags or 1 for 1–2.
Scores use public catalog and repository metadata. They do not replace hands-on evaluation, permission review, or a security audit.
Scored results
agentic-os-org / ANOLISA
ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with runtime, security, observability, and Tokenless response compression for lower token usage and cost.
Why it placed here
Anionex / dsh-turn-rewind
deepseek harness对话和代码状态回退插件 | DSH — rewind conversation and workspace state, powered by a persistent Change Ledger
Why it placed here
Devin-AXIS / jev-dsh-decision
Jev DSH 决策引擎|面向 Agent Harness 的结构化决策插件。原生支持 DeepSeek Harness,通过 iPolloWork 支持 OpenCode、Codex Harness。
Why it placed here
sjh9714 / dsh-win32
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
Why it placed here
xiaods / k8e
k8e.sh - OpenSource Agentic AI Sandbox Matrix
Why it placed here
FuRongJun-1999 / dsh-memory
白箱AGI架构探索:元认知(自我认知循环)、持续学习(知识飞轮)、世界模型(条件空间+语义时空图)、自我改进(自举纪律)、零LLM白箱管线与可审计信任护栏。
Why it placed here
Anionex / dsh-computer-use
为 DeepSeek Harness 提供电脑控制插件:新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入(目前支持macos)|Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.
Why it placed here
BlockRunAI / dsh-clawrouter
A safety gate for DeepSeek Harness: a stronger model reviews dangerous tool calls before they run. Plus vision and BlockRun's full model catalog from one wallet, paid per request over x402.
Why it placed here
Unclecheng-li / DeepSec
DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.
Why it placed here
Akimiya-z / codex-guard
Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.
Why it placed here