Sicherheit & Berechtigungen
Sicherheit & Berechtigungen-Plugins härten DeepSeek-Harness (dsh) gegen riskante Tool-Aufrufe und bösartige Plugins. Diese Kategorie umfasst richtlinienbasiertes Tool-Gating mit allow/deny/ask-Stufen, Scanner vor der Installation für Plugin-Bundles und npm-Tarballs, Schutz vor Prompt-Injection und Geheimnisabfluss, Telemetrie-Schwärzung und hash-verkettete Audit-Protokolle.
56 Plugins gefunden
dsh-plugins (dsh-secret-redactor)
damonkoy/dsh-plugins
Automatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.
dsh-plugins (dsh-approve-for-me)
damonkoy/dsh-plugins
Automated approval review: auto-approve read-only tools, auto-deny dangerous commands, fail-closed policy engine.
dsh-plugin-sentinel
botonj/dsh-plugin-sentinel
Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.
dsh-auto-reviewer
antarescorn/dsh-auto-reviewer
Codex-style auto-review permission mode: adds an auto-review preset that auto-approves safe sandbox escalations, asks on risky or ambiguous ones, and rejects critical unconfirmed operations.
dsh-permissions
940842546/dsh-permissions
Claude Code-style permission rules engine: hard/deny/ask/allow tiers with a hard tier above full access, workspace-scoped rules, wildcard path protection, and a visual staged editor; rules persist in settings.yaml.
dsh-plugin-gate
863683348/dsh-plugin-gate
Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".
dsh-gov
863683348/dsh-gov
Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.
dsh-lan-pass
x2802490130-prog/dsh-lan-pass
Ein LAN-Passwort-Gate für die Web-UI: Smartphones und Tablets im selben Netzwerk melden sich mit einem gemeinsamen Schlüssel an und sehen dieselben Sitzungen in Echtzeit, mit integriertem randomUUID-Polyfill für reine HTTP-Origins.