<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>开源安全 on GPT资讯  --  知识铺</title>
    <link>https://index.zshipu.com/gpt/tags/%E5%BC%80%E6%BA%90%E5%AE%89%E5%85%A8/</link>
    <description>Recent content in 开源安全 on GPT资讯  --  知识铺</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-CN</language>
    <lastBuildDate>Wed, 02 Sep 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://index.zshipu.com/gpt/tags/%E5%BC%80%E6%BA%90%E5%AE%89%E5%85%A8/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>拆解1.1万DeepSeek Harness插件后发现官方零治理</title>
      <link>https://index.zshipu.com/gpt/post/20260902/%E6%8B%86%E8%A7%A31.1%E4%B8%87DeepSeek-Harness%E6%8F%92%E4%BB%B6%E5%90%8E%E5%8F%91%E7%8E%B0%E5%AE%98%E6%96%B9%E9%9B%B6%E6%B2%BB%E7%90%86/</link>
      <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
      <guid>https://index.zshipu.com/gpt/post/20260902/%E6%8B%86%E8%A7%A31.1%E4%B8%87DeepSeek-Harness%E6%8F%92%E4%BB%B6%E5%90%8E%E5%8F%91%E7%8E%B0%E5%AE%98%E6%96%B9%E9%9B%B6%E6%B2%BB%E7%90%86/</guid>
      <description>1.1 万插件拆解暴露官方零治理事实 研究者实际拆解了超过1.1万个DeepSeek Harness插件，结果显示官方几乎没有建立任何插件治理机制。这意味着平台既未对插件代码进行系统性安全审查，也未设置插件上架前的准入流程，更没有针对已发布插件的持续监控和下架机制。 具体证据来自对这些插件的</description>
    </item>
  </channel>
</rss>
