DeepSeek Harness Security Guard Plugin
`dsh-security-guard` is a security plugin for DeepSeek Harness (DSH) that uses static scanning to assess the security of third-party plugins and prevent risks such as token leakage, malicious network connections, and code obfuscation. It includes 28 built-in detection rules covering multiple scenarios, including token handling, data exfiltration, dynamic execution, obfuscation, network listening, supply chain integrity, and persistence. The plugin supports startup self-checks, DSH tool registration, alerting mechanisms (with Webhook support), a local web dashboard, and remote rule updates. To install it, exit DSH Host and use the official loading method. While the plugin is running, we recommend checking the source code and license.
Read Moredsh-security-guard: Static and Runtime Security Plugin for DeepSeek Harness
`dsh-security-guard` is a DeepSeek Harness (DSH) security plugin maintained by `bigclawd`, designed to address potential malicious calls, prompt injection, and token waste within the plugin ecosystem caused by third-party code. The plugin is released under the MIT license; its core mechanism combines static scanning with runtime protection to ensure scanned code is not executed or imported. Its main features include rule-based static analysis of source files, runtime interception prior to dangerous tool calls, prompt steps, and file operations, and the categorization of results as `block`, `warn`, or `clean`, with support for JSON or human-readable report output. Rules use standard JSON format, support overriding by ID, and support Profile management.
Read More