dsh-egress-guard
Verifiedby LKRCharon · Security & Policy
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
Verified plugin
Depends on the Cordis runtime or ships a cordis.yml, so it loads as a real dsh plugin.
What we found in the repo
- — depends on @deepseek-ai/cordis
- — depends on @deepseek-ai/dsh-llm
- — npm package dsh-egress-guard
Installing
Install the package, then register it in your cordis.yml:
npm install dsh-egress-guard# cordis.yml
plugins:
dsh-egress-guard:
Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.
Repository details
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Language
- JavaScript
- License
- MIT
- npm package
dsh-egress-guard@ 0.1.0- Created
- 2026-08-14
- Last push
- 2026-08-14
Topics
More in Security & Policy
dsh-security-audit
Verifiedomdsh-dev
DSH 本机安全审计插件：配置/插件来源/会话/网络暴露面，只读脱敏风险报告
dsh-web-billing
Verifiedbpc-oss
RMB/USD token-billing plugin for DeepSeek Harness (dsh web): official-policy auto pricing with peak/off-peak hours, per-message ledger, account balance, locale-driven currency display. 人民币/美元 token 计费插件
dsh-plugin-audit
Verifiedjkrandom-sudo
Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计：静态权限画像（附文件/行号证据）+ 运行时哨兵，触及凭证或向未知主机外发数据时先请你批准
dsh-telemetry-redactor
Verified030611
Fail-closed export-copy redaction for DeepSeek Harness session telemetry
dsh-permission-rules
VerifiedPerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
dsh-security-scan
Verifiedben7am1n
No description provided.