Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-16 · high
The list warns tool approval doesn't sandbox plugin code, and no lockfile or signing system exists yet.
Why now: The radar repo's August 16 snapshot is the freshest count of this plugin ecosystem so far.
AdamPlatin123's radar repo confirmed 2,560 of 2,855 candidate DSH plugins in 72 hours, according to its GitHub page. Anyone who installs one runs the plugin's code with full permissions. Only 860 of the 1,305 plugins tested so far pass as safe to run, and 394 are flagged outright incompatible.
That gap between confirmed and tested matters: some plugins sit indexed and unverified while people install them anyway, trusting the confirmed count alone.
The repo scans GitHub every six hours and dynamically tests each plugin on a Kubernetes cluster. Most of the 2,855 indexed candidates are still waiting on that test to run.
The curated companion list, which has 4,049 stars, opens with a direct warning: tool approval doesn't sandbox plugin code.
Package management solved this problem before, with lockfiles, signatures, and scanning built in. None of that exists three days into this one.
The GitHub page doesn't say who runs the test cluster or what it checks beyond runtime compatibility. A plugin can pass that test and still misuse the access it's granted. The repo's own numbers don't rule that out.
Each link below shares sources, entities, or timing with this story.
OpenSandbox uses Kubernetes / Shared entity: GitHub / Same source domain / Earlier coverage
Linked by a graph relationship (OpenSandbox uses Kubernetes); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OpenSandbox uses Kubernetes); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OpenSandbox uses Kubernetes); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OpenSandbox uses Kubernetes); both cover GitHub; reported by the same outlet (github.com).
NVIDIA supports Kubernetes / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (NVIDIA supports Kubernetes); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (NVIDIA supports Kubernetes); both cover GitHub; reported by the same outlet (github.com).
Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage / Tension
Both cover GitHub; reported by the same outlet (github.com); overlapping topics (august, code, plugin).
Both cover GitHub; reported by the same outlet (github.com); overlapping topics (against, august, code).