dsh-shield: Security and Trust Layer for DeepSeek Harness
dsh-shield is the security firewall for DeepSeek Harness (DSH), designed to address risks before plugin installation and during runtime. It adopts a two-layer architecture: a pre-check scanner uses AST to analyze source code and block malicious behavior, while runtime guardrails control tool calls and data egress based on policies. Core features include pre-installation scanning, runtime interception, operational auditing, MCP security management, and Prompt Injection detection, with support for multi-level policy management. Rather than relying on code execution, it establishes a practical security boundary for DSH through a closed loop of “scan—classify—intercept—audit.”
Read Moredsh-shield: DSH Hands-off Mode Safety Net
`dsh-shield` is a security plugin for DeepSeek Harness (DSH) that addresses the irreversibility of agent deletion operations. It intercepts and rewrites deletion commands, redirecting deleted directories to the Recycle Bin while handling Glob patterns and symbolic links, thereby ensuring zero approvals, zero pop-ups, and no impact on the agent experience. The plugin supports restoration from the Recycle Bin, automatic cleanup, and system compatibility, effectively reducing the risk of accidental deletions in automation scripts.
Read More