DSHarness
All plugins

dsh-secret-paste

Verified

by zhujiaqi · Security & Policy

DeepSeek Harness plugin: detect pasted secrets, store them in the credentials seam, and send [secret:REF] placeholders to the model.

View on GitHub

Verified plugin

Depends on the Cordis runtime or ships a cordis.yml, so it loads as a real dsh plugin.

What we found in the repo

  • — depends on @deepseek-ai/cordis
  • — depends on @deepseek-ai/dsh-credentials
  • — npm package dsh-secret-paste

Installing

Install the package, then register it in your cordis.yml:

npm install dsh-secret-paste
# cordis.yml
plugins:
  dsh-secret-paste:

Plugin keys and config options vary — check the repo's README before copying this in. dsh is in developer preview and its loader format is still changing.

Before you install

A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing

Found malware or an impersonation in this repo? Report this listing

Repository details

Stars
1
Forks
0
Open issues
0
Language
JavaScript
License
MIT
npm package
dsh-secret-paste @ 0.2.0
Created
2026-08-19
Last push
2026-08-20

Topics

credentialdeepseekdeepseek-harnessdsh-pluginsecret

More in Security & Policy

TokenLedger

Verified

zh667

Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials

116JavaScriptupdated 2d ago

dsh-auto-mode

Verified

NanmiCoder

Safe automatic permissions for DeepSeek Harness.

113TypeScriptupdated 2d ago

dsh-reverse-skill

Verified

dhicoc

Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

45PowerShellupdated 3d ago

dsh-permission-rules

Verified

PerryLink

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

23TypeScriptupdated today

dsh-passwords

Verified

slywalker2006

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

15TypeScriptupdated today

dsh-security-audit

Verified

omdsh-dev

DSH 本机安全审计插件：配置/插件来源/会话/网络暴露面，只读脱敏风险报告

12TypeScriptupdated today