DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-mask

PII masking middleware for DeepSeek Harness to anonymize personal data before reaching the model.

UI & ProductivityTerminal & TUIDeveloper ToolsBrowser & WebSecurity & PolicySkills & Workflows
8GitHub Stars0ForksUpdated2026-09-19

Install

$ dsh plugin --profile web add "github:PerryLink/dsh-mask#main"

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-mask is a privacy and PII masking middleware for DeepSeek Harness that intercepts user messages at the model boundary (agent/pre-step) and tool execution results. It replaces sensitive data—such as phone numbers, emails, ID cards, bank cards, API keys, and IP addresses—with placeholder tokens before messages reach the LLM or session logs. The plugin maintains an in-memory and storage-domain restore mapping table, exposes the /mask command and mask_test verification tool, and ensures plaintext PII never leaks into logs.

Key Capabilities

  • Model boundary masking intercepting agent/pre-step messages and tool-result text
  • Detection and replacement of phones, emails, ID cards, bank cards, keys, and IP addresses with placeholders
  • Isolated restore table persisted to memory or controlled dsh_mask storage domain
  • Interactive /mask command for status checks, runtime toggling, and manual placeholder restoration
  • mask_test tool for testing detection snippet results without logging plaintext originals

Useful For

  • Preventing accidental transmission of personal identifiable information (PII) to LLM providers
  • Enforcing privacy compliance and data leakage prevention in enterprise Harness sessions
  • Sanitizing sensitive logs and tool outputs before saving into session histories

Who It Fits

  • DeepSeek Harness users handling sensitive customer or personal data
  • Enterprise security teams enforcing PII minimization policies
  • Developers needing privacy-safe LLM prompt and tool pipelines

Documented Limitations

  • Relies on regex detection out of the box; entity recognition for names and physical addresses (NER) requires external models not bundled
  • Client-side UI un-masking requires a browser component; automatic reveal is host-side / explicit command driven
  • Custom session event audit logging is constrained on DSH 0.1.1-rc.2 until ignorable event support lands

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

No automated security signals have been published yet.

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
PerryLink/dsh-mask
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
419ca4c · 2026-09-20

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
8GitHub stars
Forks
0
Open issues
0
Last commit
2026-09-19
Last release
2026-09-19
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app