dsh-api-relay-audit
DeepSeek Harness bundle for running API Relay Audit locally
32 results
DeepSeek Harness bundle for running API Relay Audit locally
Local-first, self-hosted AI agent runtime with Claude Managed Agents-style APIs, sandboxed sessions, memory, tools, audit, replay, and a local Console.
Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness — a capability seam (ctx.memory service + local SQLite provider + memory tool + frozen snapshot injection), not another memory warehouse
Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.
🐳 The Everything-Plugin Quant OS — AI-native & DSH-native: 46 tools, 6 pluggable domains (data/alpha/ML/risk/execution), one end-to-end PDAT→PET pipeline. Methods open, secrets internal.
Project-scoped one-shot users for DSH: project/user dual workspaces with symlink isolation, cwd session bucketing, soft guard, and a built-in admin UI. Best-effort isolation (honnet gens) — not a hard security boundary.
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
Sprites remote development environments for DeepSeek Harness through Cordis and MCP.
Tensorlake sandbox execution providers for DeepSeek Harness
DSH 社区插件生态指南 + 两个审计工具:注册「dsh-community-plugins」skill,让每个会话都知道如何发现、评估、安装社区插件;注册离线工具 dsh_plugin_audit,把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建;注册联网工具 dsh_plugin_inspect,在安装前下载 tarball、校验 integrity、在临时目录里审计后删除,不安装、不执行 lifecycle 脚本。只提供方法与事实,不推荐任何第三方插件或市场。全面适配 DSH 桌面版,安装与判定默认跟随正在运行的 profile;离线审计另报告「已安装但未生效(需重启)」的激活状态,并按安装来源分级 lifecycle 脚本。轻量:纯 JavaScript、单一依赖、无构建步骤。
CDS 模式(Chen's DS)——把「标准模式 + 创造模式 + 自救模式(省钱)」合并成一个多智能体开发模式,装成 DSH agent 预设。你和唯一的主人格「晨」对话,它带着 56 个人格分头干活、互相直接交接,最后把结果交回你手上。含 A/B/C/D/E 五组 21 个人格、C-WEB 网络安全附属工作流(八组 35 个人格,含不可绕过的策略门与隐私一票否决)、两条闭环工作流、生成式提问机制与提示词缓存约束。零外部依赖,语料随包自带。
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
Observe-only hash-chained evidence receipts for DeepSeek Harness
DeepSeek Companion Enterprise — DeepSeek Harness 企业级伴侣插件:安全审计与 DLP、团队协作与知识管理、任务编排、多模型竞技场、执行轨迹分析、Prompt 工程工作台、API 成本治理。
DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.
Durable batch review and commit safety for DeepSeek Harness tool side effects
Model-facing typed tools wrapping the frozen, reviewed underseal adapter for the DeepSeek Harness
DeepSeek Harness 插件:在 Web GUI 里点选文件或目录,屏蔽 agent 对它们的读取、搜索、写入与编辑,使机密内容与敏感词不进入对话(含敏感词导致请求 400 的场景)。Blocks an agent from reading, searching, writing, or editing chosen files and directories, keeping their contents out of the conversation.
NeevSandbox execution providers for DeepSeek Harness
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.
Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1