@mkaliezz/dsh-plugin-firewall
Offline-first static admission scanner for DeepSeek Harness plugins.
141 results
Offline-first static admission scanner for DeepSeek Harness plugins.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Agent observability plugin for DSH — behavior audit, cost tracking, anomaly detection
Offline content-addressed proof for supplied license-obligation delivery closure
Offline content-addressed proof for supplied vulnerability-remediation closure
DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".
Self-evolving memory for DeepSeek Harness (DSH): earned experiences, diary/fact semantic memory, concern tracking, and an append-only audit ledger.
One install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.
Fail-closed secret-like payload guard for DeepSeek Harness tool calls.
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
Plugin value auditor for DeepSeek Harness: judge a plugin before install and audit installed ones — heuristic scan + LLM judge, with model-switch re-audit reminders. · DSH 插件价值裁判:装前判断值不值得装,装后审计是否还该留,模型切换时提醒复核。
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
Self-healing DeepSeek-Harness plugin: keeps confined pwsh/bash console windows invisible (SW_HIDE) on Windows — no black console flash on every sandboxed command.
Codex-style auto reviewer (approve for me) permission mode for DSH
DSH (DeepSeek Harness) plugin that bundles the battle-tested 'safe plugin installation' skill: audit candidates, install one at a time, verify through five levels, and uninstall cleanly. Built from a real beginner's painful install journey.
Record and compare project development environments without storing secret values.
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
A DeepSeek Harness Web plugin for inspecting redacted LLM HTTP request and response traces.
Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.
End-to-end encrypted remote access to DeepSeek Harness and experimental Codex workspaces from desktop, web, and Android, with dsh-TUI Host support.
Plan 模式心智映射:read-only 权限显示为 "Plan",审批策略 never(拒绝即最终,不准申请权限),文件只读 + 网络搜索可用。
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
Docker-container (WSL2 backend) shell executor for the DeepSeek Harness bash capability seam on Windows: every bash tool call runs in a disposable Linux container with the workspace bind-mounted.
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces