72 results
Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.
Privacy-minimal provenance receipts for DeepSeek Harness workspace instructions
Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required
NeevSandbox execution providers for DeepSeek Harness
DSH 插件安检机 — install-time static security auditor for DeepSeek Harness plugin bundles. Zero dependencies, zero install scripts, zero build step.
Ask DeepSeek to falsify a file or gate a PR. Receipt: PASS / PASS_WITH_DEBT / BLOCK. Adjudicator, not a second opinion. Green lint is not a ship.
Mingleng mcpguard for DeepSeek Harness 鈥?the first security plugin for DSH. Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell and credential leaks.
Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.
DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
Read-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships it
A fail-closed, auditable approval policy plugin for DeepSeek Harness
Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.
Deterministic DeepSeek Harness Web client plugin that explains the Windows-sandbox `spawn EPERM` failure as a distinct Conversation Node.
Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)
Structured, machine-readable CI output for DeepSeek Harness (dsh): session event capture with JSON/NDJSON reports, JUnit XML, semantic exit codes, artifact collection and privacy redaction. Ships as a dsh profile bundle and a standalone CLI.
Multi-root Workspace for DeepSeek Harness: adds N additional roots to the workspace sandbox scope as an out-of-tree bundle
Evidence-backed application-security assurance for DeepSeek Harness
Localize leftover DSH UI chrome to Chinese (command palette descriptions, permission presets, reasoning effort) at the display layer, and detect when the official build adapts them
Authentication and security hardening plugin for DeepSeek Harness
Provider request metadata minimization extension for DeepSeek Harness