dsh-guard-sensitive-paths
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
300 results
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
Offline content-addressed proof for supplied vulnerability-remediation closure
DSH plugin: anonymize workspace-external file paths before model requests with user confirmation
DeepSeek Harness plugin: a citable append-only JSONL of filesystem touches — path, op, sha256 before and after — carrying no file contents
Harness 事件流审计面板:观察事件类型、分发模式、计数与最近事件,帮助插件作者理解 harness 内部发生了什么
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
Press Enter to approve the sandbox permission-escalation prompt in the DeepSeek Harness WebUI instead of clicking the Allow once button.
Login wall and public gateway for DeepSeek Harness cloud deploys.
Cloud-backed cross-session memory for DeepSeek Harness: structured entries + vector retrieval persisted to S3-compatible object storage (AWS S3 / MinIO / R2 / OSS), with local cache projection, approval-gated writes and auditable trails
Agent harness 配置系统:agents/skills/hooks/rules 四层分工、instincts 持续学习(自动学模式、聚簇成技能)、AgentShield 安全审计(secrets/权限/hook 注入/MCP 风险)、Unified Memory Vault 跨 harness 共享、GateGuard 破坏性命令门卫。受 affaan-m/ECC(185k★ MIT)启发。
Self-evolving memory for DeepSeek Harness (DSH): earned experiences, diary/fact semantic memory, concern tracking, and an append-only audit ledger.
Content-addressed proof for body-free DSH tool-result custody stages
One install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.
北极星 (Polaris):通用能力聚合与择优进化层——异构嗅探、双轨竞技场、SLSA 出处、不可变索引与语义调度。
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
文本脱敏:把文本中的邮箱/手机号/身份证/银行卡/IP/密钥等敏感信息替换为掩码,分享前保护隐私
Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings
DSH (DeepSeek Harness) plugin that bundles the battle-tested 'safe plugin installation' skill: audit candidates, install one at a time, verify through five levels, and uninstall cleanly. Built from a real beginner's painful install journey.
🛡️ DeepSeek Harness 高级安全认证网关:支持 Argon2id 密码、CSRF 保护、账户锁定、IP 访问控制、审计日志、会话管理、TOTP 两步验证及 WebAuthn/通行密钥预备。零配置启动,即装即用。
Agent 专用的 DSH 插件检索、审计、安装与验证工具桥;不提供可视化市场界面。
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
DSH 权限预设 workspace-write++:工作区内写文件,可在设置里配置放行 Git Bash / PowerShell 等进程沙箱(修复 Windows ACL 下 MSYS 内存映射错误)。