dsh-secret-scan
敏感信息扫描:递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码,输出去敏感化的位置与严重级,提交前自查安全
46 results
敏感信息扫描:递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码,输出去敏感化的位置与严重级,提交前自查安全
DeepSeek Harness 密钥保险库插件:密钥自动脱敏、自动收纳、密码本设置页、跨重启持久(官方 profile bundle)
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
Agent harness 配置系统:agents/skills/hooks/rules 四层分工、instincts 持续学习(自动学模式、聚簇成技能)、AgentShield 安全审计(secrets/权限/hook 注入/MCP 风险)、Unified Memory Vault 跨 harness 共享、GateGuard 破坏性命令门卫。受 affaan-m/ECC(185k★ MIT)启发。
Record and compare project development environments without storing secret values.
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
DSH bundle: re-inject KEY/PASSWORD/SECRET/TOKEN variables from the launching environment into dsh bash subprocesses under their original names
DSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)
Fail-closed secret-like payload guard for DeepSeek Harness tool calls.
Blocks high-confidence secrets before dsh-TUI sends them to a model.
DeepSeek Harness MCP client bridge with OAuth 2.1, connection/discovery timeouts, environment-indirected secrets, optional indefinite reconnection, and a mcp_status diagnostic tool
DSH plugin for background security audits, secret leakage detection, and command safety
DeepSeek Harness plugin: redacts known secret shapes in tool arguments and results behind stable placeholders, and appends preimage-free JSONL incidents
GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.
Managed secret store for DSH Desktop. Operator-owned keys, injected into the assistant's shell as $DSH_* variables, with a settings-page panel and three operator-controlled access modes.
Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
Say the secret handshake: DSH subagents start on the Minimal two-tool condition to unlock DeepSeek's full RL-trained strength, then get the whole toolbox.
Project secret management for the DeepSeek Harness: discover every .env file across a monorepo (root and workspace packages), edit keys safely in a Settings page, and hand the model a DSH_ENV_FILE / DSH_ENV_FILES pointer so shell commands can source the right environment.
Bitwarden/Vaultwarden credentials in every DSH session: vault tools + proactive prompt guidance + a settings card for the master password.
Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.