Skip to content

dsh-data-masking

Verified

@liuhange/dsh-data-masking · v3.0.5 · MIT

数据脱敏插件 — 敏感字段识别+分级脱敏(部分脱敏/完全脱敏/哈希脱敏)

Install

dsh plugin add @liuhange/dsh-data-masking

Confirm the layer applied with dsh --profile default --dump-config — see the install guide.

Source

Published to npm without a public repository. Inspect the package contents before installing.

Tags

Readme

@liuhange/dsh-data-masking

Data masking plugin for DeepSeek Harness. Identifies and masks sensitive fields (ID card, phone, bank card, email).

安装

dsh plugin --profile web add @liuhange/dsh-data-masking

Tool: mask_sensitive_data

  • Parameters: filePath (required), strategy (optional: FULL | PARTIAL | GENERALIZE, default PARTIAL)
  • Output: Masking report with field counts and output file path
  • Output file: {originalName}_masked.{ext}

Business Rules

All sensitive field patterns and masking levels are read from config/business-rules.json. No business logic is hardcoded.

Known Limitations and Deferred Work

  • Regex patterns are compiled at runtime from config strings
  • Large file streaming masking not yet implemented