dsh-plugin-code-review
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
177 results
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
Security and connection-stability overlay for DeepSeek Harness SSH workspaces
A runtime prompt-injection shield for DeepSeek Harness tool results.
VulnClaw + DeepSec 桥接插件:AI 安全 CLI(授权渗透测试 / Shield 代码审计)→ dsh 工具 + 设置页安全工具台 UI
Maestro Guard — waterfall tools/pre-execute approval + blocklist stub (Phase A scaffold)
Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
全局提示注入 / 上下文病毒(context virus)防御插件:tools/pre-execute 扫工具参数、tools/post-execute 扫工具结果、agent/pre-step 扫进入模型前的消息并注入金丝雀守卫、llm/stream 出站消毒;支持 block / quarantine / monitor 三模式、磁盘化可演进病毒库(学习/导入/导出)与审计日志。纯 JS 无原生依赖,profile 层挂载,对所有预设与子代理全局生效。
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
DSH 插件安全审查:静态扫描 + 当前会话模型语义审查 + 用户确认
Static and runtime security guard for the DeepSeek Harness: scans plugins and workspaces for malicious code, context injection and token waste (block/warn/clean), intercepts dangerous runtime tool calls and prompt steps, and exposes /scan, plugin_scan, the scan web panel and a user-managed allowlist. Fully static analysis — never executes scanned code.
Native Auto Review for DeepSeek Harness with automatic host compatibility selection
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件(隔离墙 + 临时借出 + 触碰审计 + 紧急熔断)
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
密码工具:生成强随机密码、检测密码强度与信息熵
Offline-first static admission scanner for DeepSeek Harness plugins.
Natural-language driven dynamic assembler for DeepSeek Harness (dsh): discovers plugins at runtime (official-first, third-party optional), generates assembly plans, and loads them via Cordis — with built-in security audit gates for unofficial plugins.
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
Read-only, offline-first security scanner plugin for DeepSeek Harness plugins.
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
dsh web 认证插件:登录保护、空闲自动登出、认证有效期、设置界面、`dsh web p` 重置密码