Preface

DeepSeek Harness (DSH) adopts a plugin-based architecture, allowing developers to extend its functionality. dsh-search-citation-auditor (Search Citation Auditor) is designed to address the issue of uncontrolled citation sources in AI responses. It extracts URLs from responses, scores and ranks them by threat level, and outputs detailed reports to help users identify potential phishing links or hidden instructions.

Core Features

Citation Source Audit

The plugin scores and ranks citation sources in AI responses.
* Whitelist Mode: Uses binary judgment. A matching whitelisted source gets a score of 0; otherwise, it gets a score of 100 (marked in red). Suitable for scenarios that trust only fixed sources.
* Simple Mode: Based on domain age. Compares the domain registration time with a boundary year (default 2023). If registration is earlier than the boundary year, it is considered reliable; otherwise, it is marked red.
* Standard Mode: Composite scoring. Combines suffix risk, number of hyphens/digits, domain length, registration age, and link structure (such as direct IP access, @ obfuscation, short links, etc.) for weighted scoring.

Blocklist Management

The plugin provides blocklist functionality.
* Domains added to the list will be directly blocked if the model tries to access them again (default behavior).
* It can also be set to “ask me first” or “mark red only in the report”.
* Blocklists are independently enabled for each mode and do not affect one another.
* Domains are normalized (for example, en.wikipedia.org is normalized to wikipedia.org).

Content Injection Detection

The plugin detects and alerts on prompt injection instructions in the main content of responses. The original content is not modified; only an alert is added.

Installation and Enabling

  1. Download dsh-citation-auditor-0.4.1.tgz from the Release page.
  2. Open the desktop client and go to Settings → Plugin Management.
  3. Install the downloaded .tgz file.
  4. Restart the desktop client to activate the plugin.

Typical Usage

Switch Audit Mode

On the plugin card in the desktop client’s settings page, you can directly switch among the three modes (Whitelist, Simple, Standard). Changes take effect immediately without a restart.

Manage Blocklist

In the floating window or audit report, click a domain marked red to add it to the blocklist. The blocklist management policy (block/warn) can be switched on the settings page, in the floating window, or via the command citation_manage policy.

Check Hidden Instructions

A floating button is provided in the bottom-right corner. Click it to view the audit result of the latest response. If the web content includes hidden instructions, a prompt will be added before the content.

Notes

  • Bare Domain Recognition: The plugin cannot recognize bare domains without http:// (such as “see example.com/about”), to avoid false positives on regular statements. Links fetched by tools usually include the protocol and are not affected.
  • Fetch Scope: It only checks the main page content fetched by web_fetch, and ignores the summary results from web_search.
  • False Positive Risk: Common instruction strings in security articles (such as “ignore all previous instructions”) may be falsely reported.
  • Evasion Capability: Regular expressions cannot detect all evasion methods. The plugin aims to increase the cost of attacks rather than provide absolute defense.
  • Environment Requirements:
    • Host dsh >= 0.2.0-rc.2 is required.
    • Node >= 22 is required.
  • Data Storage: The blocklist, settings, and cache are all stored in JSON files under the ~/.citation-auditor/ directory and can be edited manually.

Summary

dsh-search-citation-auditor is a tool for auditing AI citation sources. Through scoring, ranking, and blocklist mechanisms, it helps developers control the security of data access in the DSH environment.

  • Directory page: https://www.skillhub.cn/plugins/AndKinoko/DSH-Search-Citation-Auditor
  • GitHub: https://github.com/AndKinoko/DSH-Search-Citation-Auditor