dsh-plugin-guard: DeepSeek Harness Plugin Security Checkup

`dsh-plugin-guard` is a plugin security health-check tool for DeepSeek Harness, designed to identify risks in third-party plugins. It performs tiered plugin assessments through static code scanning, dependency review, AI-powered online auditing, and SafeSkill platform scanning. The tool can detect dangerous APIs, credential leaks, permission declaration mismatches, and supply chain risks, and presents results via a green/yellow/red dashboard. Plugins support version monitoring and alerts, helping developers identify potential security threats before introducing a plugin or during regular security inspections.

Read More
DeepSeek Harness Plugin: dsh-plugin-guard (Static Audit and Isolation)

`dsh-plugin-guard` is a static security audit plugin for DeepSeek Harness, designed to address supply chain security risks of third-party plugins. It adopts a “gate” and “clinic” architecture, performing static auditing and hash locking before installation, and enforcing mechanical excision and capability restrictions after installation. Its core features include peer search, mechanical detoxification, and a P0-P2 risk-level-based scoring mechanism that can automatically block high-risk plugins. The tool does not execute target code or perform sanitization; developers must combine it with manual review to ensure security.

Read More