dsh-guard
Security and hardening bundle for DeepSeek Harness providing file auditing, rollback, and model-based automated approvals.
Install
$ dsh plugin --profile <profile-name> add <tarball-path>Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Pre- and post-state file capture with persistent audit logs
- In-session file recovery with diff preview and CLI round-based rollback
- Optional shadow Git snapshotting at round and step boundaries
- Automated tool approval routing using dedicated secondary reviewer models
- Fallback to manual review for rejections, timeouts, or high-risk directory operations
- In-memory directory authorization caching for approved medium-risk actions
Useful For
- Safeguarding local files against unintended agent modifications during multi-step coding sessions
- Rolling back unintended filesystem edits generated by tool executions
- Automating routine sandbox approval decisions with a secondary LLM while retaining human oversight on high-risk operations
Who It Fits
- DeepSeek Harness developers seeking safety guardrails against unintended file overwrites
- Operators needing audit trails and rollback capabilities for autonomous coding workflows
- Users configuring automated approval pipelines with custom review models
Documented Limitations
- Default capture only tracks explicit tool file targets, omitting shell commands, third-party plugins, and manual edits
- Cannot run concurrently with dsh-experimental-auto-review or dsh-codex-connect.enableAutoReview
- Directory authorization memory is stored only in-memory and resets across plugin reloads
- Audit snapshot stores lack automated log rotation or garbage collection
- Each automated review incurs an extra model inference request
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 12 development, 0 peer, and 0 optional dependencies.
GitHub did not report an SPDX license for this repository snapshot.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- KouzakiUmi/dsh-guard
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- 464a40e · 2026-10-22
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-22
- Last release
- 2026-10-12
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →LLM-supervised persistent memory and graph-based recall integration bundle for DeepSeek Harness.
View plugin →Lingshu long-term auditable memory system and cognitive graph for DeepSeek Harness.
View plugin →