dsh-provenance
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
305 results
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
X-ray for your DeepSeek Harness — diagnostics for what's actually loaded, why, and what it costs: per-plugin context-tax attribution, per-request token ledger, skill catalog pricing, dependency cascades.
Named user credentials for DeepSeek Harness: model-facing credential tools, secrets behind the ctx.credentials seam, DSH_CM_* shell variables, and a Settings → Credentials page
Turn DeepSeek Harness sessions into redacted, README-ready animated demos — as a local CLI or DSH plugin.
Security and connection-stability overlay for DeepSeek Harness SSH workspaces
Scan installed DeepSeek Harness plugins and grade stability risk (hook surface, startup work, preflight health, packaging, dependencies). 扫描已安装插件的稳定性风险(钩子面/启动任务/预检/打包/依赖)。
DSH 插件安全审查:静态扫描 + 当前会话模型语义审查 + 用户确认
Persistent credential vault for DeepSeek Harness (DSH): manage API tokens, server logins, and site credentials in one settings panel. Secrets live in the DSH credential store and are consumed by the model via vault_status / vault_get tools.
GitHub App tools for WSL dsh: hint (env file existence) + repo PR/Actions status; never dumps secrets.
DSH Full access 一次性开关:新工作区/新对话默认 full access,不再逐个确认(可安装 bundle + 补丁工具)
One-click health check & score for your DeepSeek Harness plugins. Scan → Score → Fix → Share. PerfScope for dsh.
Safe Git credential hints: GCM path, HTTPS vs SSH origin (never returns secrets).
Don't hand over the whole machine, just the decision blocking it: unattended DeepSeek Harness approvals and ask_user_question prompts reach your phone as Feishu cards, desktop first, outbound only.
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件(隔离墙 + 人在回路审批 + 执行后验证 + 循环纠正 + 可回滚规则)
DeepSeek Harness 隐私保护插件:监控本地 Privacy Gateway (:8317) 与 Qwen2.5-0.5B 小模型,管理凭据脱敏、豁免白名单与加密密钥,并提供带凭据保护的模型入口与部署按钮
DeepSeek Harness (dsh) plugin for context-mode: in-process ctx_* tools (sandboxed code execution, FTS5 knowledge base) plus context-window routing guidance.
Provider request metadata minimization extension for DeepSeek Harness
Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.
Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
敏感信息扫描:递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码,输出去敏感化的位置与严重级,提交前自查安全
Content-addressed proof that recorded DSH authorization decisions and effects agree
安全加固:威胁建模(STRIDE)+ 三层边界系统,任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills(88k★ MIT)启发。