securstack-dsh-plugin
Run the following command in DeepSeek Harness:
dsh plugin install securstack/securstack-dsh-plugin
Paste the following prompt into your AI chat to install this plugin:
In DeepSeek Harness, install this plugin using the command 'dsh plugin install securstack/securstack-dsh-plugin', with the full source code available at https://github.com/securstack/securstack-dsh-plugin.
About this plugin
In modern software development, security checks are vital for code quality, but integrating complex tools can be time-consuming. The SecurStack DSH plugin acts as a lightweight adapter for DeepSeek Harness, enabling developers to directly invoke SecurStack security scans within AI-agent workflows without re-implementing underlying logic.
Its core capabilities center on automating security validation: executing repository scans (like SAST, SCA, secrets detection) via the SecurStack CLI and returning structured JSON results; providing policy gates for CI/CD-style pass/fail decisions; and integrating diagnostic tools to ensure correct setup. The adapter-only design avoids destructive operations or redundant implementations, streamlining security integration.
This plugin is ideal for teams seeking to seamlessly embed security checks into AI-augmented development—particularly security engineers, DevOps practitioners, and developers building automated workflows with DeepSeek Harness. It offers an efficient, reliable solution for projects that need rapid security feedback without maintaining complex scanning infrastructure.
Screenshots
Use Cases
- Automate security scans and policy checks within CI/CD pipelines.
- Obtain security risk reports and configuration issues for a codebase via an AI agent.
- Diagnose SecurStack toolchain installation and credential setup in a local dev environment.
Best For
- Security engineers needing to seamlessly integrate scanning into AI workflows.
- DevOps or platform teams seeking to automate security checks and policy enforcement.
- AI developers using DeepSeek Harness who want to enhance its security capabilities.
Related Plugins
A network security red-team benchmark plugin for DeepSeek-V4.1/Flash featuring dual-layer kernel injection and zero-tool architecture for controlled model safety assessment.
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.