dsh-sentinel
DeepSeek Harness 插件安全体检官 —— 静态扫描 + 运行时副作用追踪,为 4300+ 插件建立安装前必看体检报告
178 results
DeepSeek Harness 插件安全体检官 —— 静态扫描 + 运行时副作用追踪,为 4300+ 插件建立安装前必看体检报告
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
Access lock for DeepSeek Harness web profile (password, passkey, IP lists, Nginx)
Read-only, offline-first security scanner plugin for DeepSeek Harness plugins.
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces
Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff), structured reports (gate_report), 12 destructive-command patterns and workspace-boundary checks.
Guard DeepSeek Harness npm installs with vulnerability, license, bundle-size, and package-health audits.
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
Local tool-call failsafe and DWGR-8 personal governance proxy gate for DSH: blocks high-risk shell patterns, credential leaks, and enforces declarative param-level boundaries with hash-linked JSONL audit logs and optional Gateway.