dsh-ccs-security
Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.
395 results
Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.
Single-model disable gate: hides denied models from every discovery path, blocks dispatch with an in-protocol error chunk, and exposes a settings-section UI for the denylist
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
Task-to-skill pairing with a laziness ladder and a safe install cellar. Never overpours, never serves untasted. DSH · Claude Code · Codex
Non-intrusive safety belt for DeepSeek Harness: blocks API keys pasted to the agent, blocks secret writes, tracks leak events, and offers a workspace health scan. 非侵入式安全护栏:拦截粘贴给 Agent 的 API 密钥、写入拦截、泄露追踪与工作区安全体检。
DeepSeek Harness 的 Tailscale 远程访问运营面板:健康检查、HTTPS 入口开关、macOS 代理绕过、中继服务器运维、ACL 片段生成。
DSH web 插件:在设置面板中管理侧栏板块的显示与隐藏(纯客户端,localStorage 持久化)。
DeepSeek Harness 插件:为 Agent 增加 code_scan 工具,用 semgrep 扫描代码并输出按文件/行号/严重级别分组的中文报告
Theme picker settings section: switch app themes and manage installed theme plugins through the dsh-market API.
DSH package manager plugin: install dsh-bundle plugins as profile dependencies and hot mount/unmount their bundle patch rows through the official watchUserPatches cordis.patch.yml reload path — no restart, no workspace/.venv second pipeline.
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Login gate + account settings for the DeepSeek Harness web UI. Host persists account/password (scrypt-hashed) to disk; browser adds a login overlay and an account-settings section.
Blue Archive-inspired DSH theme with a Shiroko desktop companion, secure DeepSeek balance lookup, low-balance alerts, Codex-style reply bubbles, and petting effects.
Workspace Only switch for DeepSeek Harness: confine file access of every sandbox mode to the session workspace
Access-password gateway plugin for DeepSeek Harness Web: every request on the gateway port requires authentication (no unauthenticated surface besides the login/setup page), first visit sets the password, and it can be rotated from the dedicated Security settings page.
DSH agent-fleet hygiene audit: credential-file permissions, embedded credentials in git remotes (masked), provider token-prefix literals. Read-only, zero-dependency, deterministic.
Portable DSH WebUI skill security inspection with local rules and optional model review
Diary plugin for DeepSeek Harness: daily markdown journal entries, custom templates, and a web settings section
DeepSeek Harness UI extension plugin providing customizable icons and keyed icon slot for settings sections
Modular search tool for DeepSeek Harness: attach SearXNG, RAG and your own sections to the native web_search.
DSH SSH Forge — secure SSH-backed remote workspaces for DeepSeek Harness
Web compatibility layer for the DeepSeek Harness UI: polyfills crypto.randomUUID on non-secure contexts (plain-http LAN access) so the official conversation UI no longer crashes when attaching images, and surfaces the context status in Settings
Security and connection-stability overlay for DeepSeek Harness SSH workspaces
WikiBridge:DSH 与 Obsidian vault 的知识库桥接 —— 约束工具(wiki_search/read/write)+ 自动词典检索 + 持久化配置