dsh-taintguard

Verified

Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin, gates privileged calls that follow untrusted content, and refuses credentials heading off the machine.

View on GitHub

Verified plugin

Depends on the Cordis runtime or ships a cordis.yml, so it loads as a real dsh plugin.

What we found in the repo

— depends on @deepseek-ai/cordis
— depends on @deepseek-ai/dsh-llm
— npm package dsh-taintguard

Installing

Install the package, then register it in your cordis.yml:

npm install dsh-taintguard

# cordis.yml
plugins:
  dsh-taintguard:

Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.

Before you install

A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing

Found malware or an impersonation in this repo? Report this listing

Repository details

Stars: 0
Forks: 0
Open issues: 0
Language: TypeScript
License: MIT
npm package: dsh-taintguard @ 0.1.0
Created: 2026-08-16
Last push: 2026-08-16

Topics

agent-securityai-securitydeepseek-harnessdshdsh-pluginguardrailsprompt-injection

More in Security & Policy

TokenLedger

Verified

zh667

Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials

91JavaScriptupdated today

dsh-auto-mode

Verified

NanmiCoder

Safe automatic permissions for DeepSeek Harness.

89TypeScriptupdated yesterday

dsh-reverse-skill

Verified

dhicoc

Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

30PowerShellupdated yesterday

dsh-security-audit

Verified

omdsh-dev

DSH 本机安全审计插件：配置/插件来源/会话/网络暴露面，只读脱敏风险报告

12TypeScriptupdated today

dsh-passwords

Verified

slywalker2006

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

11TypeScriptupdated today

dsh-web-billing

Verified

bpc-oss

RMB/USD token-billing plugin for DeepSeek Harness (dsh web): official-policy auto pricing with peak/off-peak hours, per-message ledger, account balance, locale-driven currency display. 人民币/美元 token 计费插件

10JavaScriptupdated today