178 results
Read-only security & compliance toolkit for DeepSeek Harness: prompt-injection detection (rule engine with a pluggable model classifier), Chinese-PII redaction, and a local configuration security audit that emits redacted, reproducible risk reports.
依赖安全审计：扫描项目依赖的已知漏洞（OSV.dev）并检测过期依赖（npm registry），返回漏洞严重级/修复版本与升级幅度
敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查安全
Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin and gates privileged tool calls that follow untrusted content
安全加固：威胁建模（STRIDE）+ 三层边界系统，任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills（88k★ MIT）启发。
SQL 优化模式：EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents（38k★ MIT）启发。
SQL 优化模式：EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents（38k★ MIT）启发。
密码哈希（PBKDF2/scrypt）
Offline-first static admission scanner for DeepSeek Harness plugins.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Agent observability plugin for DSH — behavior audit, cost tracking, anomaly detection
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
Governed platform access for DeepSeek Harness — no credential on the machine
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
DSH plugin: anonymize workspace-external file paths before model requests with user confirmation
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".
dsh web 认证插件：登录保护、空闲自动登出、认证有效期、设置界面、`dsh web p` 重置密码
Login wall and public gateway for DeepSeek Harness cloud deploys.
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
One install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.