dsh-guardwall
Likelyby iiiweiii · Security & Policy
Runtime security guardrail for DeepSeek Harness: blocks dangerous tool inputs (destructive cmds, credentials, SSRF, reverse shells), audits output leaks, tamper-proof HMAC chained audit logs. Zero deps.
Likely plugin
Follows the dsh package or skill conventions, but we found no direct runtime dependency.
What we found in the repo
- — ships SKILL.md
- — npm package dsh-guardwall
Installing
Install the package, then register it in your cordis.yml:
npm install dsh-guardwall# cordis.yml
plugins:
dsh-guardwall:
Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.
Before you install
A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing
Found malware or an impersonation in this repo? Report this listing
Repository details
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Language
- JavaScript
- License
- MIT
- npm package
dsh-guardwall@ 0.2.0- Created
- 2026-08-21
- Last push
- 2026-08-21
Topics
More in Security & Policy
TokenLedger
Verifiedzh667
Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials
dsh-auto-mode
VerifiedNanmiCoder
Safe automatic permissions for DeepSeek Harness.
dsh-reverse-skill
Verifieddhicoc
Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
dsh-remote
Verifiedxgone
Remote access for DeepSeek Harness: account/password auth + MFA (TOTP) login gate, signed session cookies, role-based access, in-browser directory picker, and a Settings page for account management.
dsh-permission-rules
VerifiedPerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
dsh-passwords
Verifiedslywalker2006
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.