← DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-airbag

Non-intrusive safety guard for DeepSeek Harness that blocks pasted API keys, intercepts secret writes, and audits workspaces.

UI & ProductivityDeveloper ToolsSecurity & Policy
1GitHub Stars0ForksUpdated2026-10-19

Install

$ dsh plugin --profile web add dsh-airbag

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-airbag is a non-intrusive security guard plugin for DeepSeek Harness (Web profile). It protects users from accidentally exposing credentials by performing client-side paste interception across 45+ secret formats, enforcing write-guard checks on agent tool invocations (such as write, edit, and bash), tracking approval fatigue, and running read-only workspace credential audits.

Key Capabilities

  • Synchronous client-side paste interception for 45+ credential patterns (OpenAI, DeepSeek, Anthropic, AWS, GitHub PATs, JWT, PEM, cloud access keys) with block, redact, or warn actions
  • Pre-execution tool write interception for write, edit, bash, and run_code commands carrying sensitive tokens
  • Passive approval fatigue analytics tracking blind approvals under 2 seconds and high-frequency confirmation bursts
  • Read-only workspace security scans across environment files, credentials, and git remote URLs
  • Interactive Web UI panel and corner notification center with customizable notification levels (L0 to L3) and alert aggregation
  • Privacy-first credential masking storing only truncated masked values and SHA-256 prefixes locally

Useful For

  • Preventing inadvertent transmission of production secrets, private keys, and API tokens to DeepSeek LLMs
  • Restricting agent tools from writing unmasked credentials directly into project source code or configuration files
  • Auditing project workspaces for exposed .env files and hardcoded API tokens before starting an agent session

Who It Fits

  • Developers working with sensitive credentials and API keys in DeepSeek Harness
  • Teams seeking automated safeguards against accidental LLM secret leakage
  • Security-conscious practitioners requiring audit logging of secret-related tool invocations

Documented Limitations

  • Configured specifically for the DSH web profile and requires restarting DSH Web upon installation
  • Does not redact outbound agent read outputs (read-direction sanitization is treated as a separate responsibility)
  • Write snapshots and rollback mechanisms are currently not supported
  • Installing directly from GitHub source on pnpm 10 or newer requires explicit allowBuilds configuration in pnpm-workspace.yaml

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 1 runtime, 8 development, 2 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as MIT.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Prepare Script Detected

package.json declares a prepare lifecycle script that may run during relevant package installation workflows.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
uwu9039/dsh-airbag
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
ceab796 · 2026-10-19

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
1GitHub stars
Forks
0
Open issues
0
Last commit
2026-10-19
Last release
2026-08-15
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app