Plugins

Live security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.

Redacts PII in tool-result text before it is logged (error-result metadata is not rewritten), denies read_image and binary/document reads outside allowPaths, provides local privacy_extract, privacy_ocr, privacy_scan and privacy_rehydrate tools (PDF/OCR needs a separately installed local extractor configured through extractCli), and enforces a fail-closed llm/stream egress guard before DSH dispatches any model request.

Agent 行为守护桌宠：跨 agent 监控可疑外传（加密打包直传对象存储 / DNS 外泄线索 / 敏感密钥被读），发现即告警，明确确认后按「一次一个」终止目标 agent；事件写入只追加 guard-events.jsonl，并通过 DSH host 工具 + MCP(stdio) 供其它 agent 查询

Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction