dsh-egress-guard
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
185 results
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
Local, deterministic release risk checks for DeepSeek Harness.
Browser-automation tools for DeepSeek Harness (dsh): Chromium via playwright-core behind a security-first navigation policy re-checked on every action
Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.
密码工具:生成强随机密码、检测密码强度与信息熵
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
Zero-interruption audit + fuse blocking for DeepSeek Harness. / 零打扰 Agent 审计与保险丝拦截插件。
Access lock for DeepSeek Harness web profile (password, passkey, IP lists, Nginx)
DeepSeek Harness 插件安全体检官 —— 静态扫描 + 运行时副作用追踪,为 4300+ 插件建立安装前必看体检报告
Read-only, offline-first security scanner plugin for DeepSeek Harness plugins.
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces
Natural-language driven dynamic assembler for DeepSeek Harness (dsh): discovers plugins at runtime (official-first, third-party optional), generates assembly plans, and loads them via Cordis — with built-in security audit gates for unofficial plugins.
DSH plugin health scorecard: quality & security audit, rankings, search, score history and open-data export across the dsh-plugin ecosystem, with a workspace-persisted incrementally-synced catalog. 插件体检评分卡:质量/安全审计、榜单、搜索、历史评分曲线与开放数据导出(目录增量同步)。
Local tool-call failsafe and DWGR-8 personal governance proxy gate for DSH: blocks high-risk shell patterns, credential leaks, and enforces declarative param-level boundaries with hash-linked JSONL audit logs and optional Gateway.
DeepSeek Harness (dsh) plugin: real AST-based scan of installed plugins for malicious-intent patterns, with an optional periodic schedule and auto-quarantine on critical findings. Advisory-by-default, not an antivirus signature database.
Static linter: every plugin HTTP route must carry a browser-trust fence (loopback Host pin before Origin / sec-fetch-site).
Offline content-addressed evidence that an approved Windows control-plane change settled across required surfaces
Offline content-addressed proof of pseudonymous authority binding across DSH execution surfaces
装插件全流程自动化:四重安全检查(版本/patch/工具名/供应链)+ 自动安装 + 自动重启 DSH | Safe one-shot DSH plugin installs: four checks + auto install + auto restart