dsh-api-relay-audit
DeepSeek Harness bundle for running API Relay Audit locally
33 results
DeepSeek Harness bundle for running API Relay Audit locally
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
A read-only mirror for installed DeepSeek Harness plugins: capability inventory with evidence, cross-plugin conflicts, a diff of what changed since the last scan, and an upgrade preflight that tells you which profiles still boot on a newer DSH
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
Health checks for DeepSeek Harness: manifest/patch/entry/build/pack/install verification, model-callable plugin_check, profile host-shadowing + manifest-BOM detection, environment diagnostics, supply-chain poison preflight, and broken tool-call-sequence detection (#2334).
DSH 社区插件生态指南 + 两个审计工具:注册「dsh-community-plugins」skill,让每个会话都知道如何发现、评估、安装社区插件;注册离线工具 dsh_plugin_audit,把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建;注册联网工具 dsh_plugin_inspect,在安装前下载 tarball、校验 integrity、在临时目录里审计后删除,不安装、不执行 lifecycle 脚本。只提供方法与事实,不推荐任何第三方插件或市场。轻量:纯 JavaScript、单一依赖、无构建步骤。
Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
Content-addressed receipts for skills actually loaded by DeepSeek Harness
Observe-only hash-chained evidence receipts for DeepSeek Harness
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.
Native memory for DeepSeek Harness — auditable facts with evidence chains, powered by StateCore
Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, plus the minimal-win collective-thinking preset (we/let's reasoning chain).
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
A safe external-skill discovery and adoption bundle for DeepSeek Harness
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.
What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
dsh plugins ported from eco-agent: permission gate, audit chain, memory tree
Read-only, offline-first security scanner plugin for DeepSeek Harness plugins.
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.