dsh-defend
Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness with pattern detection, interception, and audit logging.
Install
$ dsh plugin --profile web add github:PerryLink/dsh-defendPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Destructive deletion guard refusing recursive shell deletions outside workspace boundaries
- Aho-Corasick pattern detection for prompt injection payloads, jailbreak signatures, and secret keys
- Three interception points across agent/pre-step, tools/pre-execute, and tools/post-execute
- Configurable allow, ask (approval seam), or block actions per threat family
- Sanitized in-memory audit logs accessible via the defend_report tool and /defend command
Useful For
- Hardening DeepSeek Harness agent sessions against malicious prompt injections and jailbreaks
- Preventing accidental API keys and secret leakage in inbound messages and tool outputs
- Blocking risky or destructive shell commands during autonomous code-agent execution
Who It Fits
- Security-conscious developers running DeepSeek Harness agents on untrusted inputs
- Teams requiring deterministic LLM guardrails and secret detection in terminal sessions
Documented Limitations
- Maintenance status is frozen as of October 2026, receiving only critical breakage fixes
- Deterministic rule-based scanning cannot evaluate semantic intent or novel phrasing without rule updates
- Message rejections on agent/pre-step cannot convey rejection reasons back to the model
- Session log audit disabled on host versions that drop the ignorable event marker to prevent unresumable sessions
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 2 runtime, 16 development, 7 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as Apache-2.0.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- PerryLink/dsh-defend
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 6d90d0d · 2026-10-09
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 23GitHub stars
- Forks
- 1
- Open issues
- 4
- Last commit
- 2026-10-09
- Last release
- 2026-10-05
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed fallback and session audit logging.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Compatibility bridge running unmodified Pi ecosystem extensions natively on DeepSeek Harness.
View plugin →