中文

← Back to list

dsh-guardwall

DeepSeek Harness Other Low risk

Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.

在安装前体检本地、npm 与 GitHub 插件源码，运行时拦截命中配置阈值的高风险工具调用，审计输出中的密钥模式，并写入 HMAC 链式本地审计日志。

How to install

DeepSeek Harness dsh plugin add github:iiiweiii/dsh-guardwall

About

dsh-guardwall DeepSeek Harness 的安全插件：**安装前体检 + 运行时护栏**，装前把关、装后看门、全程留痕。 **安装前体检**：权限清单 · 静态风险扫描 · A–D 信任评分 · 安装门禁（D 级拒绝） **运行时拦截**：危险工具调用直接拦截（破坏性命令、凭据、SSRF、反向 shell） **输出审计**：密钥/内网 IP/数据库串泄露检测 **篡改检测审计**：HMAC 链式哈希 + 尾部 checkpoint，内容修改与日志截断可检测 **热加载**：自定义规则与阈值改完秒级生效，不用重启 **零第三方运行时依赖**：仅使用 Node 内置模块，减少依赖供应链攻击面 安装 bash dsh plugin --profile web add dsh-guardwall 验证挂载： bash dsh --profile web --dump-config | grep -A2 'id: guardwall' npm 尚未发布时可用 GitHub 通道：dsh plugin --profile web add "github:iiiweiii/dsh-guardwall#main" 第一层 · 安装前体检 **"装这个插件 = 给了它什么权限？"** —— 装之前先回答： bash npx guardwall check <spec> # 体检…

GitHub ↗

Recommendation signals

47 Tool quality · Based on stars, downloads, maintenance, security and docs
– User interest · Adjusted by in-site views, install copies and download clicks
47 Overall
0views
0unique visitors
0install copies
0download clicks
0outbound clicks

Meta

License
MIT
Language
JavaScript
GitHub stars
1
mo. downloads
–
Last push
2026-08-23
Created
2026-08-21

Links

GitHub ↗ Report issue ↗

Basic safety check

Findings
curated 收录但无 npm 包/安装命令
Sources
curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
Topics
audit, deepseek-harness, dsh-plugin, guardrail, secret-detection, security, ssrf

Related plugins

DeepSeek Harness New
Score65

dsh-auth-gateway

xbzbing/dsh-auth-gateway

Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.

☆ 5 ↓ 957 Other ↗
DeepSeek Harness
Score64

dsh-auth

hxy91819/dsh-auth

Caddy forward_auth administrator login for DeepSeek Harness Web, with Argon2id passwords, revocable sessions, bilingual UI, and a native sidebar sign-out action.

☆ 2 ↓ 2.1K Other ↗
DeepSeek Harness New
Score63

dsh-auto-review

PerryLink/dsh-auto-review

Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.

☆ 95 ↓ 1.1K Other ↗
DeepSeek Harness New
Score62

dsh-yolo-mode

SeverusZh/dsh-yolo-mode

LLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.

☆ 3 ↓ 300 Other ↗