security 81

Four-mode file-permission fence for DeepSeek Harness (workspace read/write x outside read/write), enforced at the tool layer, with a read-only composer mode indicator and a locale-aware UI.

Host-only command safety gate for DeepSeek Harness: blocks recognized dangerous operations and requests DSH approval when a command cannot be inspected.

DSH plugin for background security audits, secret leakage detection, and command safety

Budgeted DSH preflight and one-shot escalation with conversation-following or independent reviewers.

Plugin security inspector for the DeepSeek Harness web GUI: statically audits installed plugins (dangerous API patterns + dependency review), layers an AI (default-model) online audit, and renders a green/yellow/red report panel.

Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.

Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles: peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry dependencies, and installed-vs-declared drift. Complements dsh-poison-guard (ma

依赖安全审计：扫描项目依赖的已知漏洞（OSV.dev）并检测过期依赖（npm registry），返回漏洞严重级/修复版本与升级幅度

Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log

One install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.

Feishu (Lark) OAuth login gate for the DeepSeek Harness web GUI.

Agent governance suite for DeepSeek Harness (enterprise companion): policy-based tool gating (allow/deny/ask), structured JSONL audit trail, and per-agent token quotas against the host token meter — state under $DSH_HOME/gov

DSH 装插件安全守卫：装前 5 问提醒 + 直查 npm 官方户口本体检 + 归属核对 + 风险台账。只读，不拦截，中文人话报告。

此为 DSH 生态插件。Dolphin - 主动巡检型安全防御插件，支持本地扫描与远程 SSH 巡逻。将渗透测试方法论（信息收集→漏洞探测→利用验证→报告）转化为主动防御巡检流程：基于 Semgrep 的扫描层与基于 SSH 的执行层相融合，可对本地目录做静态扫描，也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。

Enterprise compliance for DeepSeek Harness — SOC2/GDPR automated checks, sensitive-info redaction, and a redacted tool audit trail. · DSH 企业级合规插件：SOC2/GDPR 自动化合规自检、敏感信息拦截与脱敏、操作日志审计追溯。

Guard DeepSeek Harness npm installs with vulnerability, license, bundle-size, and package-health audits.

Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.

Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.

Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff

DSH plugin: strong password / diceware passphrase generator (password_generate).

密码工具：生成强随机密码、检测密码强度与信息熵

Structured code review skill for DeepSeek Harness -- bugs, security, performance, style

Time-Machine-backed autonomous agent permission gate for DeepSeek Harness (dsh). Safe defaults on install (protect cwd, deny network/system, block sensitive reads). Configure protectedPaths/extraAllowTools to unlock subagent/workflow/web — see README.

Zero-interruption audit + fuse blocking for DeepSeek Harness. / 零打扰 Agent 审计与保险丝拦截插件。

Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces

装插件全流程自动化:四重安全检查(版本/patch/工具名/供应链)+ 自动安装 + 自动重启 DSH | Safe one-shot DSH plugin installs: four checks + auto install + auto restart

SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness

面向 DeepSeek Harness（DSH）的危险命令 + 密钥泄漏拦截插件。挂载到 `tools/pre-execute` waterfall，在工具解析前短路拒绝，被拦截的副作用不会发生。

敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查安全

DSH 自制技能全家桶：dsh-verifier(产物自验证) + autotelic-evolution(进化引擎+DeLM教训) + dsh-injection-guard(注入防护) + dsh-team-orchestra(队长制协作) + dsh-grilling(对齐访谈) + dsh-context-language(领域语言) + dsh-delegation(委派) + viking-memory-guide(记忆)。安装后 8 个技能自动出现在 DSH 会话技能目录。

Feishu (Lark) OAuth login gate for the DeepSeek Harness web GUI.