SecurStack DSH Plugin: Invoking SecurStack Scanning, Policies, and Diagnostics in DeepSeek Harness
The SecurStack DSH plugin is an adapter for DeepSeek Harness, designed to enable agent workflows to directly invoke the existing `securstack` CLI without the need to re-implement security tools. The plugin primarily provides four core functions: executing repository security scans via CLI, performing policy threshold checks, running local diagnostics, and returning structured JSON results when the CLI supports it. It reuses existing SecurStack authentication methods (such as API Key or command-line login) and strictly adheres to conservative boundaries; version 1 does not include low-level logic such as scanning engines, encryption, or Shielding operations. Ensure the environment is Node.js 20 or higher before installation and enable it via the `dsh plugin` command. The plugin is suitable for...
Read MoreEligahyu/dsh-sentinel-scanner: Read-Only Security Scanning for DSH Plugins
Eligahyu/dsh-sentinel-scanner is a read-only static security scanning tool for DeepSeek Harness (DSH) plugins, designed to perform supply chain and security risk assessment before code execution. The tool detects risks such as command execution, credential access, data exfiltration, and obfuscation through 51 AST-based heuristic rules, outputting a risk score from 0 to 100 along with a security verdict, but never executes the scanned code. It offers multiple integration methods: as a DSH Agent Tool plugin, a standalone CLI (`dsh-sentinel`), a GitHub Action, or a JavaScript API. Core features include three scanning modes—source code, package artifacts, and profiles—with support for pre-publishing npm packages.
Read More