dsh-security-audit
Read-only local security audit plugin for DeepSeek Harness inspecting configs, credentials, plugin origins, and network exposure.
Install
$ DSH 0.1.5-rc.1（npm）下，插件通过 dsh plugin --profile <profile> add <source> 安装，source 支持 GitHub 仓库或 npm pack tarball。Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Scan DSH configuration, profile files, and environment credential metadata without revealing raw secrets
- Audit installed plugin provenance, bundle patches, install scripts, and static capability risks
- Inspect session directory permissions, symlink escapes, and zstd frame safety budgets
- Analyze listening configurations, URL classifications, and plain HTTP proxy routing without active network probing
- Generate reproducible summary audit reports with risk and coverage verdict metrics
Useful For
- Auditing local DeepSeek Harness installations for accidental credential leakage or permissive file permissions
- Checking installed third-party DSH plugins for unverified provenance or dangerous static capabilities
- Verifying DSH environment security and network exposure before executing automated headless workflows
Who It Fits
- DeepSeek Harness developers and administrators
- Security engineers auditing local AI agent execution environments
- DSH plugin authors verifying local bundle boundaries and permissions
Documented Limitations
- Strictly read-only and does not perform automatic remediation or file modifications
- Does not probe live remote network endpoints; network assessments are based purely on configuration inference
- Static source capability scanning does not execute plugin code and may produce advisory false positives
- Enforces strict execution and resource budgets (e.g., file counts, timeout limits, and canonical output limits)
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 6 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- omdsh-dev/dsh-security-audit
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- e22bd19 · 2026-09-21
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 14GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-10
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.
View plugin →Multi-engine search and evidence verification plugin bundle for AI agents in DeepSeek Harness.
View plugin →Free and multi-engine web search provider for DeepSeek Harness with automatic fallback and web settings UI.
View plugin →Cybersecurity red-team evaluation dock and local policy management plugin for DeepSeek Harness.
View plugin →