dsh-sast-security
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
165 results
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
Share any DeepSeek Harness session as a self-contained read-only static webpage — timeline, collapsible tool calls & reasoning, default redaction, dual SHA-256 fingerprints, watermark. · 把 DSH 会话一键变成可分享的只读静态网页:单文件 HTML、离线可开、默认脱敏。
Read-only security & compliance toolkit for DeepSeek Harness: prompt-injection detection (rule engine with a pluggable model classifier), Chinese-PII redaction, and a local configuration security audit that emits redacted, reproducible risk reports.
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
并行多角色代码评审小队:/review 一条命令派出安全/正确性/测试/风格四名只读评审员子代理(每人可单独指定模型与思考强度),汇总为按严重度分组的结构化报告。Parallel multi-role code review squad: /review dispatches security/correctness/tests/style reviewer subagents (each on its own model) and aggregates one severity-grouped report.
判定 Java 代码是原创还是演绎作品,给出与上游最长相同表达片段、逐条豁免依据和风险清单。纯本地 AST 分析,依赖烤进 jar,不联网、不调模型。
Audit a DSH profile for capabilities nothing consumes, and record completion claims with the evidence that supports them.
Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin and gates privileged tool calls that follow untrusted content
AI-reviewed auto-approval for DeepSeek Harness: judges each pending approval ask with one auxiliary model call before any human answerer runs, auto-grants the safe ones, and escalates everything else with the review analysis attached
Run an agent unattended for hours and get a morning brief that is an audit, not a summary. Signs a manifest before the work, holds the run to it, and reports the difference.
DeepSeek Harness MCP client bridge with OAuth 2.1, connection/discovery timeouts, environment-indirected secrets, optional indefinite reconnection, and a mcp_status diagnostic tool
Website cloning methodology skill for DeepSeek Harness: a real-source-first decision tree across static / React-Vue-Next / WebGL-Canvas sites, with CDP-driven recon, asset harvesting and pixel-diff audit scripts.
DeepSeek Harness plugin to audit and correct llm-pi-ai model capability declarations by probing the endpoint itself: out-of-range maxTokens, contextWindow, reasoning levels, image input.
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.
Bitwarden/Vaultwarden credentials in every DSH session: vault tools + proactive prompt guidance + a settings card for the master password.
Allowlisted git execution for DeepSeek Harness: a model-facing git tool that runs outside the file sandbox, with a settings page where the user ticks which git subcommands are permitted and, per path, which reads and writes are allowed, prompted or refused
Static trust audit for DeepSeek Harness plugins: capabilities, injected prompts, token cost, provenance, and a reproducible 0-100 trust score
Tolerate redundant sandbox_permissions requests: a tool call asking to escalate to a mode that is not strictly wider than the session's standing mode runs as-is at the standing mode instead of failing with "not strictly wider". Genuine escalations still route through the approval flow.