dsh-risk-guard
零打扰审计与保险丝拦截：静默记录每次工具调用并做纯规则风险评分（含累积加分、风险等级分布、归档保留期清理），只拦不可逆灾难（受保护路径删除、磁盘擦除、force push 到受保护分支/引用、凭据外发），/risk-guard 输出脱敏操作账单并支持 --since 时间过滤。
Zero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.
怎么安装
dsh plugin add dsh-risk-guard 简介
dsh-risk-guard Zero-interruption audit + fuse blocking for DeepSeek Harness (dsh). Features **Silent audit** — records every tool call (tool name, redacted arguments, success/failure, risk tags, explainable score) into local JSONL files. No dialogs, no permission changes, no sandbox changes. **Deterministic risk scoring** — zero LLM calls, zero extra cost. Covers destructive deletes, credential reads, network egress, writes outside the workspace, dependency installs and heavy builds; rapid repeats and consecutive high-risk calls accumulate bonus score. **Insurance fuse** — blocks only irrevers…
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 0
- 月下载
- 0
- 最近更新
- 2026-08-17
- 创建于
- 2026-08-17
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- deepseek-harness, dsh-plugin, security
同类推荐
dsh-plugin-vetting
truelove-dreamer/dsh-plugin-vetting
为了您的电脑安全，装插件前先体检：静态扫描恶意模式（外传/凭据/混淆/持久化）与高权限误用，覆盖传递依赖与官方包哈希基线（防供应链篡改），可选插件工具调用闸。
dsh-approval-llm
Letter2025/dsh-approval-llm
基于模型的权限审批：由独立审查模型自动应答 approval 权限请求。
dsh-auto-review
PerryLink/dsh-auto-review
审批链上的第二模型自动审查：只读审查子代理返回带理由的 allow/deny 结构化裁决，默认 fail-closed。
dsh-auto-classifier
PAKIKNOWLEDGE/dsh-auto-classifier
auto（自主模式）权限分类器：工具作用域的放行/拒绝规则、LLM 语义裁判与 git 快照，面向无人值守会话。