Bundle
dsh-safe-web-fetch
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
MostlyHarmlessxyz
3 results
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
Static linter: every plugin HTTP route must carry a browser-trust fence (loopback Host pin before Origin / sec-fetch-site).