Introducing the dsh-secret-scan Plugin for DeepSeek Harness

DeepSeek Harness provides the `dsh-secret-scan` plugin for locally scanning codebases for sensitive information. The plugin works offline, is implemented in Node.js, and can recursively identify various credentials, including AWS keys, OpenAI API keys, and private keys. It generates a sanitized report that includes file paths, line numbers, and severity levels. It automatically skips directories such as `node_modules`, although heuristic scanning may produce a small number of false positives. After installation, it must be enabled in a configuration file, and it can be used by calling `secret_scan(root)`. It is recommended to manually verify findings before committing code to help prevent security risks.