dsh-shadow-auditor
Real-time background security auditing, secret leakage scanner, and destructive shell command firewall for DeepSeek Harness.
Install
$ dsh plugin --profile web add @goodandready/dsh-shadow-auditorPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Pre-flight secret scanning across code diffs with high-entropy token and credential detection
- Destructive command firewall analyzing shell AST/tokens to block dangerous executions like unbounded recursive deletions and disk wipes
- Critical directory and system path protection (such as ~/.dsh, ~/.ssh, and /etc)
- Workspace boundary and exfiltration protection blocking unsafe redirects and credential transmission
- Lightweight SAST and prompt-injection heuristic scanning on file diffs
- Agent tools for diff scanning (shadow_auditor_scan_diff) and command safety validation (shadow_auditor_check_command)
- Audit telemetry with persistent event recording, /audit slash command, and Web UI security badge
Useful For
- Preventing autonomous DSH agents from accidentally committing or transmitting API keys and secrets
- Safeguarding local filesystems and operating systems against catastrophic shell commands executed by agents
- Auditing and scoring security risk across agent tool calls and session interactions
Who It Fits
- Developers running autonomous DSH coding agents on sensitive local environments
- Teams requiring strict security policies, secret scanning, and destructive command prevention in DSH
- System administrators monitoring agent activities with structured audit logs
Documented Limitations
- Uses bounded heuristic command analysis rather than an exhaustive multi-shell AST parser
- Requires proper configuration for custom security policy strictness and dry-run pass-throughs
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 1 development, 5 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- GooDAnDReaDY/dsh-shadow-auditor
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 4217ad7 · 2026-10-27
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-14
- Last release
- 2026-10-14
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Free frontier LLM provider plugin for DeepSeek Harness with upstream probing and local OpenAI-compatible gateway.
View plugin →