dsh-secure-audit
A read-only DeepSeek Harness security and compliance plugin for injection scanning, PII redaction, and local configuration audits.
Install
No clear install command was found in the current repository evidence.
Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Scans English and Chinese text for prompt-injection patterns with allow, review, or block decisions.
- Optionally consults a configurable model classifier for ambiguous review cases.
- Redacts supported PII types, including Chinese mobile numbers, Chinese ID and bank cards, email addresses, IPv4 addresses, API keys, and URL credentials.
- Recursively redacts sensitive values in JSON while preserving its structure.
- Audits local configuration, permissions, session files, plugin sources, network bindings, and environment variables without modifying the audited system.
- Generates redacted audit evidence and SHA-256 checksums for scan inputs and audit reports.
- Registers a security-review skill when the optional DSH skills service is available.
Useful For
- Screen user or tool text for likely prompt-injection attempts before downstream handling.
- Redact supported sensitive data before displaying logs or sending tool arguments and session context to third-party models.
- Review local DeepSeek Harness configuration and related files for a limited set of security-posture checks.
- Produce normalized, redacted audit reports that can be compared or shared.
Who It Fits
- DeepSeek Harness users operating local agents or profiles.
- Developers integrating security checks around DSH tool and model workflows.
- Teams needing local, read-only redaction and configuration-audit utilities.
Documented Limitations
- Prompt-injection detection is heuristic and can produce false positives or miss novel or obfuscated attacks.
- The default timeout policy is fail-open (`allow`); timeout and truncation warnings mean the input was not fully scanned.
- Redaction covers only listed PII and secret patterns; names, addresses, and other contextual PII are not covered.
- The audit uses nine fixed checks and is a posture snapshot, not proof that a machine is secure.
- Permission checks use POSIX mode bits and do not inspect Windows ACLs.
- Session-file PII checks sample up to 10 files by default unless `sampleLimit` is increased.
- Tested against `@deepseek-ai/dsh-tools` 0.1.0-rc.7; DSH is pre-1.0 and the README advises verification after upgrades.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 2 development, 1 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- PensiveFei/dsh-secure-audit
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- e12c2a2 · 2026-09-30
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 85GitHub stars
- Forks
- 4
- Open issues
- 0
- Last commit
- 2026-09-30
- Last release
- 2026-09-30
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Multimodal vision router and deep pixel tools for text-only DeepSeek Harness agents with free fallback chains.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed verdicts and audit logging.
View plugin →Agent skill for generating interactive, verifiable architecture and workflow diagrams as self-contained HTML.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →