dsh-mask
PII masking middleware for DeepSeek Harness that redacts sensitive personal data before model inference and manages host-side reversible mapping.
Install
$ dsh plugin --profile web add "github:PerryLink/dsh-mask#main"Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Automatic pre-step prompt and tool-result regex masking for phones, emails, ID cards, bank cards, and secret keys
- Host-side reversible restore mapping maintained in memory and controlled dsh_mask storage domain
- Registration of the /mask command for status checks, runtime toggling, and placeholder restoration
- Provision of the mask_test diagnostic tool to test PII detection and masking on text snippets
- Sanitization preventing plaintext PII from leaking into session logs and telemetry
Useful For
- Anonymizing enterprise and personal data before sending prompts to external or local LLMs
- Complying with privacy standards by preventing PII from persisting in DSH session logs
- Sanitizing sensitive tool execution outputs before feeding them back into conversational context
- Testing and debugging PII redaction rules safely using the mask_test tool
Who It Fits
- Security and privacy engineers configuring compliant DeepSeek Harness profiles
- Developers working with sensitive customer data, credentials, and financial information in DSH
- Organizations requiring data anonymization boundaries on LLM requests
Documented Limitations
- Regex detection only; person name and physical address recognition requiring NER is not bundled and fails loud if configured
- Phone and ID-card regex detectors match mainland China formats exclusively
- Automatic UI display-layer unmasking requires a separate browser client extension not included in this pure-host package
- Session log audit event appending (mask/*) is skipped on DSH 0.1.7-rc.2 due to core session envelope constraints
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 16 development, 8 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as Apache-2.0.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- PerryLink/dsh-mask
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 7b22b8b · 2026-10-04
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 13GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-24
- Last release
- 2026-09-25
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Compatibility bridge running unmodified Pi ecosystem extensions natively on DeepSeek Harness.
View plugin →An ontology-first agent preset and epistemic loop platform for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed fallback and session audit logging.
View plugin →