Skip to content
dsh.fish

Browse

171 results

Bundle

dsh-fleet-audit

DSH agent-fleet hygiene audit: credential-file permissions, embedded credentials in git remotes (masked), provider token-prefix literals. Read-only, zero-dependency, deterministic.

LeslieWylie2
Skill

skill-security-guard

Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.

rrrrrredy2
Bundle

dsh-skillx

A safe external-skill discovery and adoption bundle for DeepSeek Harness

drowned-fish12
Skill

reverse-workbench-skill

Cybersecurity and reverse-engineering skill router for coding agents (pi / DSH / Codex CLI / Claude Code). Explicitly invoke when reverse-engineering, security analysis, CTF, or pentesting workflow is required.

Asaiuta2
Bundle

dsh-guardian

Dangerous-operation policy, canonical output redaction, and security review for DeepSeek Harness.

lonelymoon872
Bundle

dsh-credential-handoff

Conversation-local credential handoff that writes through the DSH credential service without returning the secret to model context.

xiaohj2332
Bundle

dsh-plugin-guard

DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.

taxueseek2
Bundle

skill-bartender

Task-to-skill pairing with a laziness ladder and a safe install cellar. Never overpours, never serves untasted. DSH · Claude Code · Codex

MJorgin2
Bundle

dsh-rule-engine

DSH 规则执行引擎 v3:容器解析 AGENTS.md + 理解器 + 匹配机 + 执行框架

jilian-dsh2
Bundle

dsh-code-security

DSH AI 代码安全审查插件:secure_scan/secure_diff/secure_fix_verify/secure_report/secure_export/secure_baseline/secure_deps/secure_policy_show/secure_policy_set 九工具,40+ 确定性规则、密钥熵检测、git diff/staged 审查、SARIF 导出、基线接受与 SBOM-lite,零运行时依赖。

STARDUSTLC6662
Bundle

dsh-poison-guard

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.

zoahdev2
Bundle

dsh-insight

Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)

8636833482
Bundle

dsh-guardwall

Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.

iiiweiii2
Bundle

dsh-auto-review

LLM auto-review approval answerer for DeepSeek Harness — decides sandbox escalations without a human prompt via a deterministic filter and a clean-context LLM safety review. REQUIRES a patched harness core (see core-patches/)

accpowered2
Bundle

@jypjypjypjyp/dsh-guardrail

工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板

jypjypjypjyp2
Agent preset

dsh-hawkeye-scan

Hawkeye Scan Workbench - AI-driven source-code security scanning for DeepSeek Harness (DSH): 5 model tools + /hawkeye web UI + JSON/Markdown/HTML vuln reports. Zero-dependency Cordis plugin.

liuqingman2
Bundle

dsh-workspace-only-plugin

Workspace Only switch for DeepSeek Harness: confine file access of every sandbox mode to the session workspace

CsBpRd1
Bundle

dsh-safeguard

DSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)

ZhijiangTang1
Bundle

dsh-agent-observe

Agent observability plugin for DSH — behavior audit, cost tracking, anomaly detection

dsh-plugin-evaluation1
Bundle

dsh-prompt-shield

A runtime prompt-injection shield for DeepSeek Harness tool results.

a1swg1159-pixel1
Bundle

dsh-plugin-sentinel

DSH 插件安检机 — install-time static security auditor for DeepSeek Harness plugin bundles. Zero dependencies, zero install scripts, zero build step.

BotonJ1
Bundle

dsh-llmasking

Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.

yolorouter1
Bundle

dsh-plugin-gate

Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources for malicious install scripts, credential theft, obfuscation, persistence and network callbacks before 'dsh plugin add', plus 12 destructive-command patterns and workspace-boundary checks against accidental deletion. | 安装安全闸门与数据保护闸:60 条静态签名规则(31 高危/24 中危/5 低危)扫描插件恶意行为、持久化与外传,12 种危险命令模式与边界检查拦截误删。

8636833481