deepseekplugins

DeepSeek Harness 插件

securstack-dsh-plugin

DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.（英文原文）

安全与权限
跳到安装方式

来源信息

GitHub 仓库
securstack/securstack-dsh-plugin
最近更新
2026年8月19日
分类
安全与权限
GitHub stars
3
载体类型
plugin
目录证据
上游声明已找到 dsh.bundle
证据路径
package.json#dsh.bundle
核对版本
0.1.0-rc.8
上游核对日期
2026-08-20

该证据由上游目录提供。本站没有安装、运行或安全审核这个插件。

安装

默认先复制一段 Prompt，让 Agent 读 GitHub 仓库和源码；需要自己装时再切到命令。

复制这段 Prompt，发给 DSH、Codex 或其他 Agent，让它先读 GitHub 仓库和源码。

请先不要安装或执行任何命令。阅读这个插件的 GitHub 仓库、README 和关键源码，然后用清楚、直接的方式回答以下问题，帮助我判断它是否适合我的需求：

1. 这个插件是什么，解决什么问题；
2. 适合哪些用户和典型使用场景；
3. 安装后如何使用，并给出一个最小使用示例；
4. 有哪些已知限制，以及隐私、安全、兼容性或维护风险；
5. 给出“推荐 / 有条件推荐 / 不推荐”的明确建议和理由。

请区分仓库明确说明、根据源码推断和未知信息。证据不足时请明确说明，不要猜测或照抄 README。

GitHub：https://github.com/securstack/securstack-dsh-plugin
插件名：securstack-dsh-plugin
作者：securstack

检查来源文件

安装前先看这个插件目录里的 README 和其他文件。

文件资源管理器3 个文件
README.md来源说明 · 只读预览

<p align="center"> <img src="https://repository-images.githubusercontent.com/1333500201/8b9a7555-20b6-4863-acc9-0d7c6de1c1ed" alt="SecurStack DeepSeek Harness Plugin" width="100%"> </p>

SecurStack DeepSeek Harness Plugin

<p align="center"> <a href="https://github.com/topics/sast"><img src="https://img.shields.io/badge/SAST-static%20analysis-35D8FF?style=flat-square" alt="SAST"></a> <a href="https://github.com/topics/sca"><img src="https://img.shields.io/badge/SCA-dependencies-7CFF9B?style=flat-square" alt="SCA"></a> <a href="https://github.com/topics/dast"><img src="https://img.shields.io/badge/DAST-dynamic%20testing-FFD166?style=flat-square" alt="DAST"></a> <a href="https://github.com/topics/secrets"><img src="https://img.shields.io/badge/Secrets-detection-FF7468?style=flat-square" alt="Secrets detection"></a> <a href="https://github.com/topics/iac"><img src="https://img.shields.io/badge/IaC-security-1AA7FF?style=flat-square" alt="IaC security"></a> <a href="https://github.com/topics/policy-as-code"><img src="https://img.shields.io/badge/Policy-as--code-15C778?style=flat-square" alt="Policy as code"></a> </p>

DeepSeek Harness plugin for running SecurStack security checks directly from an AI-agent workflow.

The plugin registers safe, non-destructive Harness tools that call the official securstack CLI to scan repositories, return structured JSON results, run environment diagnostics, and evaluate scan output against repository policy gates. It lets DeepSeek Harness ask SecurStack what is risky, what is misconfigured, and whether a codebase passes policy without reimplementing SecurStack product logic inside the plugin.

This package is intentionally a thin adapter. It does not implement scan engines, encryption, upload logic, API contracts, or Shielding operations. Those responsibilities stay in @securstack/cli and the SecurStack SaaS.

Capabilities

  • Repository security scans via securstack scan --format json.
  • Policy gates for CI-like pass/fail decisions with securstack policy check.
  • Local setup and credential diagnostics through securstack doctor.
  • Harness-friendly tool responses with parsed JSON where the CLI promises JSON output.
  • Existing SecurStack authentication through securstack login, SECURSTACK_API_KEY, and SECURSTACK_API_URL.
  • Adapter-only design that avoids destructive hooks, Shielding writes, or duplicated product contracts in v1.

Security Coverage

SecurStack coverage is represented through the CLI contract exposed to Harness, including SAST-style code analysis, SCA dependency checks, secrets detection, IaC/security configuration review, policy-as-code gates, and CLI diagnostics. DAST-oriented workflows can be surfaced through SecurStack scan output and policy checks when supported by the configured SecurStack project.

Requirements

  • Node.js 20 or newer.
  • DeepSeek Harness developer preview.
  • SecurStack credentials configured with either:

- securstack login --api-key <key> - SECURSTACK_API_KEY and optional SECURSTACK_API_URL

The plugin reuses SECURSTACK_CLI_PATH or a securstack executable already available in PATH. On a clean machine it downloads the compatible standalone CLI, verifies its SHA-256 digest, and stores it under ~/.securstack/bin/<version>/. The downloaded CLI itself does not require Node.js. SECURSTACK_CLI_VERSION and SECURSTACK_CLI_MANIFEST_URL can be used to pin or test another release.

Install

dsh plugin --profile securstack add @securstack/dsh-plugin
dsh --profile securstack

Tools

  • securstack_scan: runs securstack scan --format json for a repository path.
  • securstack_doctor: runs securstack doctor.
  • securstack_policy_check: runs securstack policy check --input <scan.json> with optional risk and severity limits.

Examples

Ask DeepSeek Harness:

Run a SecurStack scan on this repository and summarize critical findings.
Check whether the last SecurStack scan passes the repository policy.
Run SecurStack doctor and tell me what is misconfigured.

Development

npm install
npm run build
npm test
npm pack --dry-run

Release and publishing operations are documented in [docs/release.md](docs/release.md). Releases must be authenticated as the securstack account on both npm and GitHub; personal accounts must not publish or push the public release.

For local Harness testing:

npm pack
dsh plugin --profile demo add ./securstack-dsh-plugin-0.1.1.tgz
dsh --profile demo --dump-config
返回搜索打开 GitHub 仓库

更多相关插件

查看分类