dsh-plugin-audit
Verifiedby jkrandom-sudo · Security & Policy
Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计：静态权限画像（附文件/行号证据）+ 运行时哨兵，触及凭证或向未知主机外发数据时先请你批准
Verified plugin
Depends on the Cordis runtime or ships a cordis.yml, so it loads as a real dsh plugin.
What we found in the repo
- — depends on cordis
- — npm package dsh-plugin-audit
Installing
Install the package, then register it in your cordis.yml:
npm install dsh-plugin-audit# cordis.yml
plugins:
dsh-plugin-audit:
Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.
Repository details
- Stars
- 2
- Forks
- 0
- Open issues
- 0
- Language
- TypeScript
- License
- MIT
- npm package
dsh-plugin-audit@ 0.1.2- Created
- 2026-08-14
- Last push
- 2026-08-14
Topics
More in Security & Policy
dsh-security-audit
Verifiedomdsh-dev
DSH 本机安全审计插件：配置/插件来源/会话/网络暴露面，只读脱敏风险报告
dsh-web-billing
Verifiedbpc-oss
RMB/USD token-billing plugin for DeepSeek Harness (dsh web): official-policy auto pricing with peak/off-peak hours, per-message ledger, account balance, locale-driven currency display. 人民币/美元 token 计费插件
dsh-telemetry-redactor
Verified030611
Fail-closed export-copy redaction for DeepSeek Harness session telemetry
dsh-permission-rules
VerifiedPerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
dsh-security-scan
Verifiedben7am1n
No description provided.
dsh-repro
VerifiedEvilIrving
Minimal, secret-scrubbed, replayable problem bundles for DeepSeek Harness sessions (/repro).