PensiveFei/dsh-secure-audit

README excerpt

dsh-secure-audit Disclaimer. This is an unofficial third-party tool . It is not affiliated with, endorsed by, or sponsored by DeepSeek. "DeepSeek" and "DeepSeek Harness" are trademarks of their respective owners; they are referenced here only to describe what this plugin runs against. Read-only security and compliance plugin for DeepSeek Harness (DSH). Compatibility - Peer dependency: @deepseek-ai/dsh-tools = 0.1.0-rc.7 , provided by the DSH runtime. - Tested against @deepseek-ai/dsh-tools 0.1.0-rc.7. DSH itself is pre-1.0; pin your DSH version and re-run security audit after upgrading either side. Release notes state the DSH snapshot each version was tested against. - No install-time scripts and no build step; the shipped source is the artifact. Three tools and one skill: Capability Tool What it does Prompt-injection detection security scan text Rule engine (English + Chinese) with LRU cache, fail-open timeout, and a pluggable model classifier. Returns allow / review / block with per-rule reasons. PII redaction security redact text Masks CN mobile numbers, CN ID cards, CN bank cards, emails, IPv4, API keys, and URL credentials. Output is safe to log or display. Local security audi…

Category