DeepSeek Harness PluginManifest Valid

dsh-secure-audit

A read-only DeepSeek Harness security and compliance plugin for injection scanning, PII redaction, and local configuration audits.

UI & ProductivityDeveloper ToolsSecurity & PolicySkills & WorkflowsRemote Execution

16GitHub Stars1ForksUpdated2026-08-23

Source

Install

No clear install command was found in the current repository evidence.

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded

dsh-secure-audit installs into DeepSeek Harness and registers four security tools plus an optional security-review skill. It detects prompt-injection patterns, redacts selected Chinese PII and sensitive JSON values, and produces redacted, reproducible local audit reports.

Key Capabilities

Scans English and Chinese text for prompt-injection patterns with allow, review, or block decisions.
Optionally consults a configurable model classifier for ambiguous review cases.
Redacts supported PII types, including Chinese mobile numbers, Chinese ID and bank cards, email addresses, IPv4 addresses, API keys, and URL credentials.
Recursively redacts sensitive values in JSON while preserving its structure.
Audits local configuration, permissions, session files, plugin sources, network bindings, and environment variables without modifying the audited system.
Generates redacted audit evidence and SHA-256 checksums for scan inputs and audit reports.
Registers a security-review skill when the optional DSH skills service is available.

Useful For

Screen user or tool text for likely prompt-injection attempts before downstream handling.
Redact supported sensitive data before displaying logs or sending tool arguments and session context to third-party models.
Review local DeepSeek Harness configuration and related files for a limited set of security-posture checks.
Produce normalized, redacted audit reports that can be compared or shared.

Who It Fits

DeepSeek Harness users operating local agents or profiles.
Developers integrating security checks around DSH tool and model workflows.
Teams needing local, read-only redaction and configuration-audit utilities.

Documented Limitations

Prompt-injection detection is heuristic and can produce false positives or miss novel or obfuscated attacks.
The default timeout policy is fail-open (`allow`); timeout and truncation warnings mean the input was not fully scanned.
Redaction covers only listed PII and secret patterns; names, addresses, and other contextual PII are not covered.
The audit uses nine fixed checks and is a posture snapshot, not proof that a machine is secure.
Permission checks use POSIX mode bits and do not inspect Windows ACLs.
Session-file PII checks sample up to 10 files by default unless `sampleLimit` is increased.
Tested against `@deepseek-ai/dsh-tools` 0.1.0-rc.7; DSH is pre-1.0 and the README advises verification after upgrades.

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 0 runtime, 1 development, 1 peer, and 0 optional dependencies.

info

Dsh Bundle Declared

package.json declares DSH bundle metadata.

info

License Declared

GitHub reports the repository license as MIT.

info

Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info

Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository: PensiveFei/dsh-secure-audit
Registry source: GitHub · dsh-plugin topic
Registry classification: Plugin
Source checked: 3d7a48c · 2026-08-23

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.