Install
$ dsh plugin --profile web add dsh-airbagPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Synchronous client-side paste interception for 45+ credential patterns (OpenAI, DeepSeek, Anthropic, AWS, GitHub PATs, JWT, PEM, cloud access keys) with block, redact, or warn actions
- Pre-execution tool write interception for write, edit, bash, and run_code commands carrying sensitive tokens
- Passive approval fatigue analytics tracking blind approvals under 2 seconds and high-frequency confirmation bursts
- Read-only workspace security scans across environment files, credentials, and git remote URLs
- Interactive Web UI panel and corner notification center with customizable notification levels (L0 to L3) and alert aggregation
- Privacy-first credential masking storing only truncated masked values and SHA-256 prefixes locally
Useful For
- Preventing inadvertent transmission of production secrets, private keys, and API tokens to DeepSeek LLMs
- Restricting agent tools from writing unmasked credentials directly into project source code or configuration files
- Auditing project workspaces for exposed .env files and hardcoded API tokens before starting an agent session
Who It Fits
- Developers working with sensitive credentials and API keys in DeepSeek Harness
- Teams seeking automated safeguards against accidental LLM secret leakage
- Security-conscious practitioners requiring audit logging of secret-related tool invocations
Documented Limitations
- Configured specifically for the DSH web profile and requires restarting DSH Web upon installation
- Does not redact outbound agent read outputs (read-direction sanitization is treated as a separate responsibility)
- Write snapshots and rollback mechanisms are currently not supported
- Installing directly from GitHub source on pnpm 10 or newer requires explicit allowBuilds configuration in pnpm-workspace.yaml
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 8 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- uwu9039/dsh-airbag
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- ceab796 · 2026-10-19
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-19
- Last release
- 2026-08-15
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Import and resume conversation histories from 25+ AI coding agents directly into DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →Skill manager UI for DeepSeek Harness to discover, toggle, import, and update agent skills.
View plugin →