Security review of DeepSeek Harness's plugin architecture: supply-chain risk, session audit logging, sandboxing modes, …