dsh-guardian: Adding dangerous operation strategies and output desensitization to DeepSeek Harness
dsh-guardian is an MIT licensed plugin for DeepSeek Harness (DSH) designed to enhance the security of agent invocations through pre-execution policies, post-execution sanitization, and read-only security reviews. Instead of executing operations, it checks tool names, parameters, and outputs, allowing it to reject dangerous calls or request approval. Its core capabilities include: 1. **Pre-execution Policy:** Offers Standard, Strict, and Relaxed modes. Built-in rules prohibit dangerous operations such as recursive deletion of the root directory and writing to system directories, while also supporting custom regex rules based on the principle that the strictest rule wins. 2. **Post-execution Sanitization:** Automatically removes sensitive credentials like AWS Keys and GitHub Tokens from JSON results and rendered text to prevent leakage. 3. **Security Review:** Provides the /security-review read-only skill. The plugin is suitable for...
Read Moredsh-guardian: DSH Task Protection Plugin
dsh-guardian is a task protection plugin for DeepSeek Harness (DSH), designed to address issues such as incomplete plugin declarations, task loops, excessive recursion, and session interruption upon restart. The core strategy of this plugin is "detection and guidance"; it never directly terminates a task but guides the Agent to adjust its direction by injecting user/message prompts and logs events. Its main functions include: 1. **Plugin pre-check:** Performs static code analysis to verify the consistency between service declarations and usage, offering fix recommendations. 2. **Loop detection:** Monitors the frequency of repeated calls to the same tool, triggering a prompt if the limit is exceeded. 3. **Recursion protection:** Limits the nesting depth of child agents to prevent infinite recursion. 4. **Interrupt awareness:** Provides a status interface that returns the running status, nesting depth, and a safe restart flag (safeToRestart), assisting in determining whether to restart when interrupted.
Read More