All plugins

dsh-token-vault

Likely

by YYfather · Security & Policy

Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from 设置 → 凭证库 / 市场 → 已安装.

Likely plugin

Follows the dsh package or skill conventions, but we found no direct runtime dependency.

What we found in the repo

  • — npm package @yyfather/dsh-token-vault

Installing

Install the package, then register it in your cordis.yml:

npm install @yyfather/dsh-token-vault
# cordis.yml
plugins:
  dsh-token-vault:

Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.

Before you install

A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing

Found malware or an impersonation in this repo? Report this listing

Repository details

Stars
0
Forks
0
Open issues
0
Language
JavaScript
License
MIT
npm package
@yyfather/dsh-token-vault @ 1.0.3
Created
2026-08-23
Last push
2026-08-23

Topics

credentialsdeepseek-harnessdsh-pluginsecurity

More in Security & Policy