dsh-telemetry-redactor

When using DeepSeek Harness, telemetry data often captures sensitive credentials like authorization tokens, passwords, and API keys, which can pose a security risk if sent to backends without protection. dsh-telemetry-redactor addresses this by automatically redacting such information before it leaves the local environment, ensuring privacy is maintained. Its core capability lies in recognizing and replacing a wide range of credential patterns, including Bearer tokens, JWTs, and custom secrets, while preserving the integrity of canonical session logs. It works recursively on nested data and is easy to configure with a simple replacement option. This plugin is ideal for developers or organizations using DeepSeek Harness for telemetry monitoring, especially in security-sensitive deployments like finance, healthcare, or enterprise environments where data protection and compliance are critical.