@ddtcorex/dsh-maestro-guard
Maestro Guard — waterfall tools/pre-execute approval + blocklist stub (Phase A scaffold)
44 results
Maestro Guard — waterfall tools/pre-execute approval + blocklist stub (Phase A scaffold)
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
Capybara secretary for DeepSeek Harness: desktop pet notifications, alert inbox API, session-aware alerts (turn done / approval needed), and daily plugin recommendations. · DSH 水豚秘书:桌面宠物通知、告警收件箱 API、会话智能提醒(任务完成/需要确认)与每日插件推荐。
GitHub App tools for WSL dsh: hint (env file existence) + repo PR/Actions status; never dumps secrets.
Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams
Safe Git credential hints: GCM path, HTTPS vs SSH origin (never returns secrets).
Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests
敏感信息扫描:递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码,输出去敏感化的位置与严重级,提交前自查安全
Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile
Hardened multi-account SSH manager for DSH: profile-isolated storage, host-key pinning, Windows DPAPI secrets, pooled exec/SFTP, isolated tunnels, web terminal, cluster operations, and official agent tools.
Agent harness 配置系统:agents/skills/hooks/rules 四层分工、instincts 持续学习(自动学模式、聚簇成技能)、AgentShield 安全审计(secrets/权限/hook 注入/MCP 风险)、Unified Memory Vault 跨 harness 共享、GateGuard 破坏性命令门卫。受 affaan-m/ECC(185k★ MIT)启发。
Fail-closed secret-like payload guard for DeepSeek Harness tool calls.
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
Record and compare project development environments without storing secret values.
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
Visual web settings panel for the official @tencent-connect/dsh-qqbot plugin: manage the QQ Bot AppID/AppSecret, c2c & group access modes/allowlists, cwd and requireMention directly in the DSH web settings page (reads/writes the qqbot profile's cordis.patch.yml).
Durable agent-to-agent mailbox for DeepSeek Harness: any MCP client or DSH session can address any other. Threads, receipts, search, broadcast, edit/withdraw, reactions. Local-only, zero dependencies, secrets redacted on ingest.
DSH plugin for background security audits, secret leakage detection, and command safety