dsh-adversarial-review

Adversarial review for code, MCP configs and system prompts — every finding carries a repro path and confidence; unreproducible ones are marked suspected, never confirmed.

What & why

Not a scanner: it reviews code/config/prompts YOU provide, it does not attack third-party services. adversarial_review probes named surfaces (injection, trust boundaries, secret handling, side effects, idempotency, swallowed errors) — each finding with a repro path and high/medium/low confidence, and anything it cannot reproduce is downgraded to suspected, not presented as confirmed (the same honesty contract as our tables' arithmetic self-check). mcp_config_audit checks agent/MCP configs for over-broad grants, embedded secrets, unannotated destructive tools. red_team_prompt attacks your own system prompt and hands back hardening. Pass model to run on a flagship (Claude/Kimi K3/GPT via AllRouter).

Start with what_can_you_do — describe your task in any language, get the exact tool and a ready-to-run call.

Install

dsh plugin --profile <your-profile> add github:mario03690/dsh-adversarial-review

Thin config layer only (one @deepseek-ai/dsh-mcp-client row, shipped as cordis.patch.yml) — no tool code on your machine. Built against the dsh v0.1 developer preview's MCP client config shape (2026-08-13); if a later preview changes it, open an issue for a same-day fix.

Cost, quota, privacy

First heavy call is free (anonymous, no signup); afterwards billed at real upstream cost, reported in every response; failed calls are not charged. Bring an AllRouter key to run any tool on a flagship model at direct rates. The config URL carries ?s=dsh-dsh-adversarial-review — a channel tag identifying the install path, not you.

Disclosure: built and run by the team behind ainetcafe.com. Full bundle: dsh-netcafe. MIT.

Compatibility & permissions (at a glance)

| Signal | This plugin | | --- | --- | | Runtime | dsh v0.1 developer preview (2026-08-13, Cordis v4). Touches only the MCP client config shape — the narrowest surface available. Verified against a live endpoint on 2026-08-17. | | What runs locally | Nothing. Ships one cordis.patch.yml row; there is no tool code, no build step and no lifecycle script in this package. | | Filesystem access | None. | | Shell / process access | None. | | Network access | Outbound HTTPS to ainetcafe.com only, from the MCP client that dsh already ships. | | Credentials | None required. No signup, no API key for the free tier. An optional AllRouter key, if you supply one, is sent by dsh as a request header and is never stored by us. | | Data retention | Documents and prompts are processed in memory and not retained. | | Dependencies | One peer dependency: @deepseek-ai/dsh-mcp-client (ships with dsh). | | License | MIT (see LICENSE). | | Publisher | The team that runs ainetcafe.com — our own hosted service, free tier plus paid usage. Issues get a same-day reply. |

A directory listing is not a security review. Read cordis.patch.yml — it is short enough to read in full in under a minute.