dsh-release-guardian
Local, deterministic release risk checks for DeepSeek Harness.
179 results
Local, deterministic release risk checks for DeepSeek Harness.
Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.
密码工具:生成强随机密码、检测密码强度与信息熵
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
Zero-interruption audit + fuse blocking for DeepSeek Harness. / 零打扰 Agent 审计与保险丝拦截插件。
Access lock for DeepSeek Harness web profile (password, passkey, IP lists, Nginx)
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces
Natural-language driven dynamic assembler for DeepSeek Harness (dsh): discovers plugins at runtime (official-first, third-party optional), generates assembly plans, and loads them via Cordis — with built-in security audit gates for unofficial plugins.
DeepSeek Harness (dsh) plugin: real AST-based scan of installed plugins for malicious-intent patterns, with an optional periodic schedule and auto-quarantine on critical findings. Advisory-by-default, not an antivirus signature database.
Static linter: every plugin HTTP route must carry a browser-trust fence (loopback Host pin before Origin / sec-fetch-site).
Offline content-addressed evidence that an approved Windows control-plane change settled across required surfaces
Offline content-addressed proof of pseudonymous authority binding across DSH execution surfaces
装插件全流程自动化:四重安全检查(版本/patch/工具名/供应链)+ 自动安装 + 自动重启 DSH | Safe one-shot DSH plugin installs: four checks + auto install + auto restart
Blocks high-confidence secrets before dsh-TUI sends them to a model.
Static trust audit for DeepSeek Harness plugins: capabilities, injected prompts, token cost, provenance, and a reproducible 0-100 trust score
Offline DSSE/in-toto attestation evidence for DeepSeek Harness releases
此为 DSH 生态插件。Dolphin - 主动巡检型安全防御插件,支持本地扫描与远程 SSH 巡逻。将渗透测试方法论(信息收集→漏洞探测→利用验证→报告)转化为主动防御巡检流程:基于 Semgrep 的扫描层与基于 SSH 的执行层相融合,可对本地目录做静态扫描,也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。
DeepSeek Harness bundle for the BurpSuite MCP Bridge
Enforce recycle-bin-only deletion on Windows: block del/rm/Remove-Item and other disk-erase commands, forbid automatically emptying the recycle bin, and stop + ask the user when the recycle bin or disk is full.
DSH plugin for background security audits, secret leakage detection, and command safety
Feishu (Lark) OAuth login gate for the DeepSeek Harness web GUI.