dsh-secure-audit

When building agents on DeepSeek Harness, security and compliance are often the last thing on a developer's mind. Prompt injection from user or external content can silently manipulate agent behavior, tool-call arguments and session context may contain mobile numbers, secrets, or other PII, and local configuration exposure or file permission issues are hard to spot by hand. dsh-secure-audit exists to fill that gap: a read-only, third-party security plugin that never writes, deletes, or executes anything, adding an auditable layer of protection with minimal intrusion.

The plugin ships four core tools and one runtime skill. security_scan_text detects prompt injection using a rule engine (English + Chinese) and an optional model classifier, returning allow/review/block, a risk level, and an input hash for replayable decisions. security_redact_text and security_redact_json mask PII in plain text and structured JSON respectively, covering Chinese mobile numbers, ID cards, bank cards, emails, IPv4, API keys, and URL credentials while preserving JSON structure. security_audit performs a read-only check of config secrets, file permissions, session-file PII, plugin sources, network bindings, and environment variables, producing a deterministic report with a self-checksum (reportSha256). The security-review skill teaches the agent how to use these tools and explain verdicts.

This plugin is for anyone building or operating agents on DeepSeek Harness, especially teams that hand tool-call arguments or session context to third-party models, need audit logs, or must meet compliance requirements. It defaults to fail-open so security checks never become an availability problem, but sensitive flows can be set to fail-closed. With input hashes and report self-checksums, you can replay any decision locally or verify that a report has not been altered. By design there are no write paths, and load-time schema validation plus error sanitization make dsh-secure-audit a quiet, controllable, and verifiable part of your DSH workflow.