401 results
Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required
Mingleng mcpguard for DeepSeek Harness 鈥?the first security plugin for DSH. Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell and credential leaks.
DeepSeek Harness bundle for the official Wolfram/AgentTools MCP server: kernel discovery, a transparent stdio supervisor that owns only its own Wolfram process tree, and a native DSH permission policy over the Wolfram tools.
DSH 代码安全审查插件：40+ 确定性规则与密钥熵检测，支持 git diff/staged 审查、SARIF 导出、基线接受与 SBOM-lite。
DSH 插件审核器：在新插件加入 profile 前扫描组合兼容性——重复工具注册、entry id 冲突、peer 版本不匹配、记忆插件唯一性、渠道插件凭据，输出风险报告，预防启动崩溃。
LLM auto-review approval answerer for DeepSeek Harness — decides sandbox escalations without a human prompt via a deterministic filter and a clean-context LLM safety review. REQUIRES a patched harness core (see core-patches/)
DSH 插件安全审查：静态扫描 + 当前会话模型语义审查 + 用户确认
Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.
Seam-aligned background command execution for DeepSeek Harness — run_command via ctx.shell under the session sandbox policy, auto-promotion into ctx.jobs
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
Retirement planner for DeepSeek Harness: China's statutory retirement age under the 2025 phased-delay reform, a live countdown, and a projected monthly pension — as a tool, a sidebar panel, and an embedded skill
DeepSeek Harness WSL plugin: pass/age secrets with allowlist; list/exists; secret_to_env without dumping values into chat.
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件（隔离墙 + 人在回路审批 + 执行后验证 + 循环纠正 + 可回滚规则）
NoAtMark text hygiene as a DeepSeek Harness (dsh) plugin — sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.
DeepSeek Harness 自动审批门控 + 设置页
Enhanced DSH workspace directory picker: cross-drive/root browsing, breadcrumb jumps, and risk/permission visual indicators
DeepSeek Harness (DSH) 插件：可逆时间旅行与审计。为工具副作用建立「前状态快照 → 执行 → 补偿」链路，提供 rewindTo(turnId) 按轮次倒序恢复工作区，内置审计规则引擎。
依赖安全审计：扫描项目依赖的已知漏洞（OSV.dev）并检测过期依赖（npm registry），返回漏洞严重级/修复版本与升级幅度
敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查安全
Content-addressed proof that recorded DSH authorization decisions and effects agree
安全加固：威胁建模（STRIDE）+ 三层边界系统，任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills（88k★ MIT）启发。
WCAG 2.2 无障碍审计：POUR 原则、合规等级、自动化+人工验证、修复建议。受 wshobson/agents（38k★ MIT）启发。
密码哈希（PBKDF2/scrypt）
订阅审计