dsh-ocsf-forwarder
Ships DeepSeek Harness session activity to SIEMs as OCSF 1.9.0 records with tamper-evident chaining.
Install
$ dsh plugin --profile <name> add @deepseek-ai/[email protected]Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Normalizes session lifecycle and tool execution events into OCSF 1.9.0 schema using the ai_operation profile
- Appends tamper-evident SHA-256 hash chains across spooled records using the OCSF record_integrity profile
- Provides a CLI tool (dsh-ocsf-verify) to verify spool integrity and detect missing or reordered records
- Ships event spools to Splunk HTTP Event Collector (HEC) or OTLP/HTTP collectors with cursor tracking
- Calculates approval decision latencies and classifies tool calls across process, filesystem, HTTP, and authorization schemas
- Maintains a default privacy posture by digesting command-line arguments and sensitive raw values
Useful For
- Streaming real-time DeepSeek Harness agent audit trails into corporate SIEM systems like Splunk or OpenTelemetry collectors
- Auditing and monitoring autonomous agent tool executions, sandbox changes, and approval response times
- Verifying log chain integrity to detect unauthorized modifications or gaps in agent activity logs
Who It Fits
- Security operations (SOC) analysts and SIEM engineers
- DevOps and platform engineers managing enterprise DeepSeek Harness deployments
- Compliance and security auditors overseeing AI agent governance
Documented Limitations
- Does not act as a containment boundary; runs in the agent's process space and permissions
- Read-side only; cannot modify or block session events, tool calls, or approval decisions
- Does not include built-in alerting rules, threat detection logic, or secret scanners
- Requires Node.js ^22.19.0 or >=24
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 11 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- CharlotteN7/dsh-ocsf-forwarder
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- dcbedb0 · 2026-10-11
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-29
- Last release
- 2026-09-04
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Local cross-agent memory and session history recall integration for DeepSeek Harness.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →