← Decky Extended Plugins

Plugin Audit Log

This page publishes the latest stored audit verdict for each audited release. It lists rule IDs only; private evidence and file contents are never published.

What the tiers mean

BLOCK means a deterministic structural fact such as a malware signature, archive traversal, a setuid bit, or a zip bomb, with no innocent explanation. It is the only tier that can remove a release.

MANUAL_REVIEW means a human should look; it does not mean the plugin is dangerous. Most Decky plugins trip these rules because SteamOS has a read-only root and useful plugins often need sudo, mount, or systemctl.

Passing does not prove a plugin is safe. An automated audit can miss harmful behavior.

Current policy

Current enforcement mode: report-only. No releases are currently excluded from the catalogs because of audit verdicts; BLOCK results are reported only.

Audited releases

BLOCK
Repository
https://github.com/chillibeaver/DeckSMB
Release
1.0.1@388387610
Rule IDs
DESTRUCTIVE_RM_RF PERSIST_LD_PRELOAD PRIVILEGE_MOUNT PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SYSTEMCTL ROOT_ACCESS
Audited
2026-08-04T02:08:57.430596Z
BLOCK
Repository
https://github.com/DeckFilter/DeckyZone
Release
v0.4.0@414302015
Rule IDs
EXEC_SUBPROCESS_RUN OBFUSCATION_LARGE_BASE64 PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_SYSTEMCTL ROOT_ACCESS SHELL_CURL_PIPE
Audited
2026-08-04T02:08:44.850268Z
BLOCK
Repository
https://github.com/hostsrc/decky-prysm
Release
v0.2.0@393251184
Rule IDs
EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN NATIVE_BINARY ROOT_ACCESS SHELL_CURL_PIPE TRIVY_GHSA_82J2_J2CH_GFR8 TRIVY_GHSA_965H_392X_2MH5 TRIVY_GHSA_CQ8V_F236_94QC TRIVY_GHSA_XGP8_3HG3_C2MH ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:07:43.940226Z
BLOCK
Repository
https://github.com/jinzhongjia/decky-music
Release
v0.8.0@450049210
Rule IDs
EXEC_EVAL EXEC_EXEC EXEC_OS_SYSTEM EXEC_SHELL_TRUE EXEC_SUBPROCESS_CALL EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN NATIVE_BINARY OBFUSCATION_LARGE_BASE64 OBFUSCATION_PICKLE PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL SECRET_PASSWORD_LITERAL SECRET_PRIVATE_KEY_HEADER SEMGREP_DECKY_GENERIC_PRIVATE-KEY SEMGREP_DECKY_PYTHON_DYNAMIC-EXECUTION SEMGREP_DECKY_PYTHON_SHELL-COMMAND SENSITIVE_ENV_HARVEST TRIVY_CVE_2026_39892 TRIVY_CVE_2026_40192 TRIVY_CVE_2026_42308 TRIVY_CVE_2026_42309 TRIVY_CVE_2026_42310 TRIVY_CVE_2026_42311 TRIVY_CVE_2026_44431 TRIVY_CVE_2026_44432 TRIVY_CVE_2026_45409 TRIVY_CVE_2026_54058 TRIVY_CVE_2026_54059 TRIVY_CVE_2026_54060 TRIVY_CVE_2026_55379 TRIVY_CVE_2026_55380 TRIVY_CVE_2026_55798 TRIVY_CVE_2026_59197 TRIVY_CVE_2026_59198 TRIVY_CVE_2026_59199 TRIVY_CVE_2026_59200 TRIVY_CVE_2026_59203 TRIVY_CVE_2026_59204 TRIVY_CVE_2026_59205 TRIVY_CVE_2026_69247 TRIVY_CVE_2026_69248 TRIVY_CVE_2026_69249 TRIVY_GHSA_537C_GMF6_5CCF ZIP_ONLY_EXECUTABLE ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:06:36.513797Z
BLOCK
Repository
https://github.com/Kentronix57/Decky-Loader-XGMobile-Manager
Release
v0.2.4@463810366
Rule IDs
DESTRUCTIVE_RM_RF DESTRUCTIVE_RM_RF_SHELL EXEC_SUBPROCESS_RUN PERSIST_KERNEL_MODULE_SHELL PRIVILEGE_MODPROBE PRIVILEGE_MOUNT PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:08:21.590190Z
BLOCK
Repository
https://github.com/mubaraknumann/unifideck
Release
Release-0.7.2@492013050
Rule IDs
EXEC_EVAL EXEC_EXEC EXEC_OS_POPEN EXEC_OS_SYSTEM EXEC_SHELL_TRUE EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN MODIFIED_SOURCE_FILE NATIVE_BINARY NETWORK_DISABLED_TLS OBFUSCATION_LARGE_BASE64 OBFUSCATION_MARSHAL OBFUSCATION_PICKLE PERSIST_LD_PRELOAD PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_PKEXEC PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL SECRET_GENERIC_API_KEY SECRET_PRIVATE_KEY_HEADER SEMGREP_DECKY_GENERIC_PRIVATE-KEY SEMGREP_DECKY_PYTHON_DYNAMIC-EXECUTION SEMGREP_DECKY_PYTHON_SHELL-COMMAND SENSITIVE_ENV_HARVEST SENSITIVE_SSH_KEY SENSITIVE_STEAM_AUTH ZIP_ONLY_EXECUTABLE ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:02:22.502875Z
BLOCK
Repository
https://github.com/PixelAddictUnlocked/allycenter
Release
v1.2.0@338784671
Rule IDs
EXEC_SUBPROCESS_RUN PERSIST_PROFILE_MOD ROOT_ACCESS SHELL_CURL_PIPE ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:08:10.538447Z
BLOCK
Repository
https://github.com/SavageCore/xone-decky-plugin
Release
v0.3.3@489791966
Rule IDs
DESTRUCTIVE_RM_RF DESTRUCTIVE_RM_RF_SHELL EXEC_SUBPROCESS_RUN PERSIST_KERNEL_MODULE_SHELL PERSIST_LD_PRELOAD PRIVILEGE_MODPROBE PRIVILEGE_MOUNT PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SUDO_JS PRIVILEGE_SUDO_SHELL ROOT_ACCESS ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:09:52.942770Z
MANUAL_REVIEW
Repository
https://github.com/0u73r-h34v3n/SDH-PlayTime
Release
v3.3.0@479170499
Rule IDs
EXEC_EXEC PRIVILEGE_MOUNT TRIVY_CVE_2026_31808
Audited
2026-08-04T02:01:47.710422Z
MANUAL_REVIEW
Repository
https://github.com/AG69075/steamOS_plugin_achievements
Release
v1.2.3@492099436
Rule IDs
MODIFIED_SOURCE_FILE PRIVILEGE_MOUNT
Audited
2026-08-04T02:10:31.753172Z
MANUAL_REVIEW
Repository
https://github.com/ayrshirepixels/game-roulette
Release
v1.04@486475667
Rule IDs
MODIFIED_SOURCE_FILE
Audited
2026-08-04T02:07:32.829793Z
MANUAL_REVIEW
Repository
https://github.com/beallio/Decky-Metadata
Release
v0.3.5@489704465
Rule IDs
OBFUSCATION_LARGE_BASE64 PRIVILEGE_MOUNT
Audited
2026-08-04T02:01:31.451255Z
MANUAL_REVIEW
Repository
https://github.com/beallio/Decky-SteamAchievements
Release
v0.2.0@492928948
Rule IDs
ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:10:42.497999Z
MANUAL_REVIEW
Repository
https://github.com/beallio/SDH-Ludusavi
Release
v0.4.3@489230188
Rule IDs
EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN PRIVILEGE_SYSTEMCTL SENSITIVE_ENV_HARVEST
Audited
2026-08-04T02:01:11.144834Z
MANUAL_REVIEW
Repository
https://github.com/BrenticusMaximus/ThemeDeck
Release
v3.0.1@462278361
Rule IDs
EXEC_EXEC EXEC_SUBPROCESS_POPEN NETWORK_DISABLED_TLS PRIVILEGE_MOUNT SENSITIVE_STEAM_AUTH
Audited
2026-08-04T02:07:57.947758Z
MANUAL_REVIEW
Repository
https://github.com/cwtechshiz/nordvpn-decky
Release
v1.1.0@478239619
Rule IDs
PRIVILEGE_SUDO
Audited
2026-08-04T02:12:35.560303Z
MANUAL_REVIEW
Repository
https://github.com/danielcopper/decky-romm-sync
Release
decky-romm-sync-v0.30.0@499861777
Rule IDs
ARCHIVE_DUPLICATE_PATH EXEC_EXEC MODIFIED_SOURCE_FILE NATIVE_BINARY PRIVILEGE_MOUNT SENSITIVE_STEAM_AUTH
Audited
2026-08-04T02:05:24.522207Z
MANUAL_REVIEW
Repository
https://github.com/dawidmpunkt/RumbleDeck
Release
v0.1@300742867
Rule IDs
EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN MODIFIED_SOURCE_FILE NATIVE_BINARY PACKAGE_LIFECYCLE_SCRIPT PERSIST_KERNEL_MODULE_SHELL PRIVILEGE_MODPROBE PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL ROOT_ACCESS ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:09:08.949643Z
MANUAL_REVIEW
Repository
https://github.com/Hooandee/panel-de-control
Release
panel-de-control-v0.32.0@500610102
Rule IDs
EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN NATIVE_BINARY PERSIST_PROFILE_MOD PRIVILEGE_MODPROBE PRIVILEGE_MOUNT PRIVILEGE_SYSTEMCTL ROOT_ACCESS ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:10:18.217341Z
MANUAL_REVIEW
Repository
https://github.com/hydralauncher/decky-hydra-launcher
Release
0.0.3@303392362
Rule IDs
EXEC_SUBPROCESS_RUN NATIVE_BINARY PERSIST_PROFILE_MOD TRIVY_CVE_2026_25541 TRIVY_CVE_2026_33055 TRIVY_CVE_2026_33056 TRIVY_CVE_2026_41676 TRIVY_CVE_2026_41677 TRIVY_CVE_2026_41678 TRIVY_CVE_2026_41681 TRIVY_CVE_2026_41898 TRIVY_CVE_2026_42327 TRIVY_CVE_2026_44662 TRIVY_CVE_2026_45784 TRIVY_GHSA_3PV8_6F4R_FFG2 TRIVY_GHSA_CQ8V_F236_94QC ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:05:54.691670Z
MANUAL_REVIEW
Repository
https://github.com/jjuuzzii/decky-ha-mqtt-plugin
Release
v0.6.1@486295307
Rule IDs
EXEC_EVAL EXEC_OS_SYSTEM EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN NATIVE_BINARY OBFUSCATION_PICKLE PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SUDO_JS PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL
Audited
2026-08-04T02:07:19.156242Z
MANUAL_REVIEW
Repository
https://github.com/kungaa/DS5-Linux-Decky
Release
v0.2.0@450283325
Rule IDs
PRIVILEGE_SUDO_JS PRIVILEGE_SUDO_SHELL
Audited
2026-08-04T02:10:07.108179Z
MANUAL_REVIEW
Repository
https://github.com/lopesleo/DeckTools
Release
v0.6.0@437908781
Rule IDs
EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN PERSIST_LD_PRELOAD PRIVILEGE_MOUNT PRIVILEGE_STEAMOS_READONLY PRIVILEGE_SUDO ROOT_ACCESS SECRET_GENERIC_API_KEY SENSITIVE_STEAM_AUTH
Audited
2026-08-03T23:59:40.088915Z
MANUAL_REVIEW
Repository
https://github.com/mdeguzis/decky-proton-pulse
Release
v1.12.0@476155733
Rule IDs
EXEC_EXEC EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SYSTEMCTL ROOT_ACCESS SENSITIVE_STEAM_AUTH TRIVY_CVE_2026_34993 TRIVY_CVE_2026_45409 TRIVY_CVE_2026_47265 TRIVY_CVE_2026_50269 TRIVY_CVE_2026_54273 TRIVY_CVE_2026_54274 TRIVY_CVE_2026_54275 TRIVY_CVE_2026_54276 TRIVY_CVE_2026_54277 TRIVY_CVE_2026_54278 TRIVY_CVE_2026_54279 TRIVY_CVE_2026_54280 TRIVY_CVE_2026_59881 TRIVY_CVE_2026_69243 TRIVY_CVE_2026_69244
Audited
2026-08-04T02:06:07.192181Z
MANUAL_REVIEW
Repository
https://github.com/mimed95/decky-voxtype
Release
0.2.0@404526544
Rule IDs
MODIFIED_SOURCE_FILE NATIVE_BINARY ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:07:05.259857Z
MANUAL_REVIEW
Repository
https://github.com/MrWaip/vpn-deck
Release
v2.3.0@406725210
Rule IDs
EXEC_SUBPROCESS_RUN NATIVE_BINARY PRIVILEGE_IPTABLES PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:05:42.450356Z
MANUAL_REVIEW
Repository
https://github.com/Necrosiak/Steamcord
Release
v1.21.0@499645254
Rule IDs
EXEC_EXEC EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN NATIVE_BINARY PERSIST_LD_PRELOAD PRIVILEGE_MODPROBE PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL SENSITIVE_STEAM_AUTH ZIP_ONLY_EXECUTABLE ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:06:22.322252Z
MANUAL_REVIEW
Repository
https://github.com/panyiwei-home/Friendeck
Release
0.7.7@366028491
Rule IDs
EXEC_EVAL EXEC_EVAL_JS EXEC_EXEC EXEC_SUBPROCESS_POPEN EXEC_SUBPROCESS_RUN MODIFIED_SOURCE_FILE OBFUSCATION_LARGE_BASE64 PERSIST_LD_PRELOAD PRIVILEGE_IPTABLES PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:03:47.694179Z
MANUAL_REVIEW
Repository
https://github.com/parvagans/achievement-companion
Release
v0.3.2@470196203
Rule IDs
MODIFIED_SOURCE_FILE OBFUSCATION_LARGE_BASE64 PERSIST_PROFILE_MOD
Audited
2026-08-04T02:12:57.401259Z
MANUAL_REVIEW
Repository
https://github.com/piyush-tyagi-13/ally-vibe-control
Release
v1.0.5@452778228
Rule IDs
PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS
Audited
2026-08-04T02:08:33.394181Z
MANUAL_REVIEW
Repository
https://github.com/Rayekkk/DeckyVibranceHDR
Release
1.0.0@493175217
Rule IDs
EXEC_SUBPROCESS_RUN PERSIST_LD_PRELOAD
Audited
2026-08-04T02:12:46.483239Z
MANUAL_REVIEW
Repository
https://github.com/Rayekkk/LeGo-Vibe-Control
Release
1.5.0@489704420
Rule IDs
PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS
Audited
2026-08-04T02:12:13.263158Z
MANUAL_REVIEW
Repository
https://github.com/Rayekkk/LeGo2BrightnessFix
Release
1.0.1@493209825
Rule IDs
EXEC_SUBPROCESS_RUN PERSIST_LD_PRELOAD PRIVILEGE_SYSTEMCTL
Audited
2026-08-04T02:12:24.758723Z
MANUAL_REVIEW
Repository
https://github.com/Rayekkk/LeGoTDP
Release
1.6.0@494141462
Rule IDs
EXEC_SUBPROCESS_POPEN PERSIST_PROFILE_MOD PRIVILEGE_MOUNT PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS
Audited
2026-08-04T02:12:02.335394Z
MANUAL_REVIEW
Repository
https://github.com/rsore/decky-bootnext
Release
v1.0.0@498123941
Rule IDs
PERSIST_LD_PRELOAD PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL ROOT_ACCESS
Audited
2026-08-04T02:10:55.781388Z
MANUAL_REVIEW
Repository
https://github.com/snoein/decky-insignia
Release
v0.1.2@500458887
Rule IDs
NATIVE_BINARY PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL PRIVILEGE_SYSTEMCTL PRIVILEGE_SYSTEMCTL_SHELL SENSITIVE_ENV_HARVEST SENSITIVE_SSH_KEY TRIVY_CVE_2026_25645 ZIP_ONLY_EXECUTABLE ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:11:06.973134Z
MANUAL_REVIEW
Repository
https://github.com/Teppichseite/RetroDECKY
Release
v1.1.0@497686500
Rule IDs
EXEC_EXEC EXEC_FUNCTION_CTOR EXEC_SUBPROCESS_RUN OBFUSCATION_LARGE_BASE64 OBFUSCATION_MARSHAL PACKAGE_LIFECYCLE_SCRIPT PRIVILEGE_MOUNT PRIVILEGE_SUDO PRIVILEGE_SUDO_SHELL TRIVY_CVE_2025_13465 TRIVY_CVE_2026_27606 TRIVY_CVE_2026_2950 TRIVY_CVE_2026_33671 TRIVY_CVE_2026_33672 TRIVY_CVE_2026_4800 ZIP_ONLY_SCRIPT
Audited
2026-08-04T02:11:33.744003Z
MANUAL_REVIEW
Repository
https://github.com/xXJSONDeruloXx/Decky-bionic-fg
Release
v0.1.6@499464645
Rule IDs
NATIVE_BINARY ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:11:22.125041Z
MANUAL_REVIEW
Repository
https://github.com/xXJSONDeruloXx/decky-lsfg-vk
Release
v0.12.8@500401567
Rule IDs
EXEC_SUBPROCESS_RUN NATIVE_BINARY PERSIST_PROFILE_MOD PRIVILEGE_IPTABLES PRIVILEGE_MOUNT ZIP_ONLY_EXECUTABLE
Audited
2026-08-04T02:09:21.136082Z
MANUAL_REVIEW
Repository
https://github.com/zany130/RSM-Decky
Release
v1.0.1@439796152
Rule IDs
EXEC_EXEC EXEC_SUBPROCESS_RUN NETWORK_DISABLED_TLS PERSIST_LD_PRELOAD
Audited
2026-08-04T02:11:51.133160Z
PASS
Repository
https://github.com/SheffeyG/CheatDeck
Release
v1.2.1@381129595
Rule IDs
None recorded
Audited
2026-08-04T02:02:08.519205Z
PASS
Repository
https://github.com/SheffeyG/CheatDeck
Release
v2.0.0@501152302
Rule IDs
None recorded
Audited
2026-08-04T13:58:26.822198Z