dsh-shadow-auditor
DeepSeek Harness 的后台安全审计器：扫描 Agent 输出中的秘密泄漏，在执行前检查命令安全性，并将发现记录到持久化审计日志中。
Background security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.
怎么安装
dsh plugin add @goodandready/dsh-shadow-auditor 简介
📦 @goodandready/dsh-shadow-auditor --- ⚡ Overview **dsh-shadow-auditor** provides real-time, non-intrusive background security auditing and command safety protection for **DeepSeek Harness** agents. When autonomous agents write code, stage files, or run shell scripts, there is a constant risk of accidental API key/secret leakage into git diffs or unintentional execution of destructive terminal commands (rm -rf /, dangerous database wipes, credential exports). dsh-shadow-auditor operates as an in-process security firewall, scanning code diffs for private tokens and verifying terminal commands …
推荐参考
信息
- 协议
- MIT
- 语言
- JavaScript
- GitHub 星标
- 0
- 月下载
- 1.1K
- 最近更新
- 2026-09-06
- 创建于
- 2026-09-02
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- audit, deepseek-harness, dsh, dsh-plugin, security
同类推荐
dsh-secure-audit
PensiveFei/dsh-secure-audit
DSH 只读安全合规插件：提示注入检测、中文 PII 脱敏、本机配置安全审计，输出脱敏且可复现的报告。
dsh-auto-approve
Jiao-XXX/dsh-auto-approve
在 workspace-write 与 danger-full-access 之间增加 `auto` 权限档：分类器一次性放行例行沙箱升级，危险或不确定的操作仍转人工审批。
dsh-plugin-vet
wulun811/dsh-plugin-vet
DSH 插件信任流水线：确定性静态扫描判定、可选运行时守卫与蜜罐诱饵、agent 审查协议技能与浏览器盾牌状态灯，只报警不执法。
dsh-agent-approval
MoonlitDropOfBlood/dsh-agent-approval
由独立审批子代理裁决每次沙箱提权，可配置审批模型并带审计记录。