dsh-route-fence-linter

Likely

by Vladimir-Kryshchenko · Security & Policy

Static linter for DeepSeek Harness plugin HTTP routes: every webServer route bypasses the /api gateway's trust check and must pin the Host to loopback itself. PASS/WARN/FAIL per route, as a CLI and a dsh tool.

View on GitHub

Likely plugin

Follows the dsh package or skill conventions, but we found no direct runtime dependency.

What we found in the repo

— npm package dsh-route-fence-linter

Installing

Install the package, then register it in your cordis.yml:

npm install dsh-route-fence-linter

# cordis.yml
plugins:
  dsh-route-fence-linter:

Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.

Before you install

A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing

Found malware or an impersonation in this repo? Report this listing

Repository details

Stars: 0
Forks: 0
Open issues: 0
Language: TypeScript
License: MIT
npm package: dsh-route-fence-linter @ 0.1.0
Created: 2026-08-21
Last push: 2026-08-22

Topics

deepseek-harnessdsh-pluginsecurity

More in Security & Policy

TokenLedger

Verified

zh667

Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials

192JavaScriptupdated today

dsh-auto-mode

Verified

NanmiCoder

Safe automatic permissions for DeepSeek Harness.

143TypeScriptupdated today

dsh-reverse-skill

Verified

dhicoc

Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

102PowerShellupdated 5d ago

dsh-permission-rules

Verified

PerryLink

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

92TypeScriptupdated today

dsh-secure-audit

Verified

PensiveFei

Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.

80JavaScriptupdated today

dsh-usage

Verified

Aisland-SJL

🌊 Persistent dock & fully-customizable balance/usage panel for DeepSeek Harness — activity heatmap, dual-channel comparison, local-only & privacy-first

79JavaScriptupdated yesterday