dsh-guardwall

In the DeepSeek Harness ecosystem, installing a plugin is the same as granting it a set of permissions. A malicious or buggy plugin can silently read your ~/.ssh directory, launch an SSRF request against a cloud metadata endpoint, or even execute a destructive delete command you never saw coming. Most existing security plugins stop at static scanning and are essentially blind to dynamically constructed runtime commands. dsh-guardwall closes exactly that gap: it interrogates a plugin's permissions before installation, intercepts dangerous tool calls at runtime, and produces a tamper-evident audit trail.

The plugin operates as two layers of defense. The first is pre-install vetting: npm artifacts are installed with --ignore-scripts into an isolated directory; the source is statically analyzed for accessed file paths, executed commands, and connected domains; the dependency tree is scanned for eval, dynamic execution, obfuscated payloads, and other red flags; and a five-dimension trust score from A to D is produced, with D-level plugins rejected outright. The second layer is a runtime guardrail: on the input side (tools/execute) it blocks destructive deletes, credential theft, SSRF, reverse shells, command-chain injection, and privilege escalation; on the output side (tools/result) it audits for leaked keys, internal-network IP exposure, and password-bearing database connection strings. Audit logs use HMAC chained hashing with a tail checkpoint, so any content modification or log truncation is detected by verify(). Custom rules and thresholds are hot-loaded—save the file and changes take effect instantly without restarting the host.

dsh-guardwall is built for developers and teams who manage multiple third-party plugins in DeepSeek Harness, especially those running in production environments with strict supply-chain security requirements. It has zero third-party runtime dependencies, using only Node.js built-in modules to keep the supply-chain attack surface as small as possible. If you need to vet plugin security at scale, worry about an Agent being tricked into executing destructive commands, or require an immutably auditable security log, dsh-guardwall is the gate between your Agent and the real system.