Plugins

Deterministic code security review: 40+ rules, secret entropy detection, staged-diff review, SARIF export, baseline acceptance, SBOM-lite dependency inventory and health self-check. A step-by-step first-run guide (4 steps) now opens inside its settings panel.

你的产物里到底有谁，清单说了算

Durable task-decomposition plans for DeepSeek Harness: the model submits a staged plan with acceptance criteria, every work item then runs on a real department subagent, and the progress panel draws done/running/blocked subtasks as a ring, a stacked bar and per-stage steps. Ships a public security self-assessment structured on ISO/IEC 15408:2026 (Common Criteria) — security target, vulnerability analysis, SBOM and a security policy — with an explicit "no certificate claimed" line, plus a published self-correction record of where v1.8.0 documentation overstated the code (fixed in 1.8.1). Every claim is checkable by the reader instead of taken on trust. One command to install, zero runtime dependencies.

Decides whether Python code is original or a derivative work: reports the longest identical expression span against an upstream tree, an exemption rationale per finding, and a risk list. Pure stdlib `ast` analysis — offline, no model calls.