deepseekplugins

DeepSeek Harness plugin

dsh-secret-guard

Fail-closed secret-like payload guard for DeepSeek Harness tool calls.

Tools & Capabilities
Jump to install

Source facts

Repository
MkaliezZ/dsh-secret-guard
Latest update
Aug 19, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/MkaliezZ/dsh-secret-guard
Plugin: dsh-secret-guard
Author: MkaliezZ

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-secret-guard

A fail-closed secret-like payload guard for DeepSeek Harness (DSH) tool calls.

The plugin inspects model-supplied tool arguments at tools/pre-execute and returns allow, ask, or deny before the tool body runs. v0.1 deliberately does not rewrite/redact arguments: DSH freezes execution identity and arguments before policy, so mutating them inside a guard would violate the runtime contract.

v0.1

  • detects common private-key/token/key patterns;
  • detects obvious sensitive field names;
  • bounds serialized payload size and fails closed above the configured limit;
  • optional tool-name scope (protectedTools); empty means inspect every tool;
  • actionOnFinding: block|ask;
  • no raw secret values in the denial reason.

Non-claims

  • heuristic secret detection, not complete DLP;
  • no guarantee every credential format is detected;
  • no argument redaction in v0.1;
  • not a sandbox or malware detector;
  • should be composed with a policy boundary such as AgentFuse when broader action authorization is required.

Development

npm test

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category