dsh-warden
Adversary review gate for DeepSeek Harness that inspects destructive tool executions using regex patterns and an independent model.
Install
$ dsh plugin --profile <你的 profile> add dsh-wardenPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Hooks into DSH tools/pre-execute lifecycle to intercept tool invocations prior to execution
- Two-tier risk screening using fast local regex matching followed by model-assisted policy review
- Web GUI review dashboard displaying real-time counters, latency, and the latest 60 execution verdicts
- Customizable adversarial rules via $DSH_HOME/adversary.md with automatic hot-reloading
- Structured audit trail persisted to $DSH_HOME/warden-audit.jsonl for escalated evaluations
- Fail-open safety design where review errors, cancellations, or downstream outages default to allow
Useful For
- Preventing autonomous agent accidents like accidental file deletion, database dropping, or git force-pushes
- Auditing and reviewing sensitive credential and environment file writes during autonomous coding tasks
- Replacing disruptive manual confirmation popups with automated, low-overhead model oversight
Who It Fits
- Developers executing autonomous DeepSeek Harness agents with file and shell access
- Engineers desiring passive safety boundaries without interrupting workflow flow
Documented Limitations
- Does not act as a secure sandbox against malicious code running within the same host process
- Relies on tool names and argument patterns rather than internal agent registration semantics
- Fail-open policy prioritizes workflow continuity over strict blocking during review failures
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 1 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- dingchenhui0618-arch/dsh-warden
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- e4fe30c · 2026-10-21
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-21
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →Vision routing and pixel-level tools for text-only DeepSeek Harness agents with built-in free fallback.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →