dsh-plugin-audit
Run the following command in DeepSeek Harness:
dsh plugin install jkrandom-sudo/dsh-plugin-audit
Paste the following prompt into your AI chat to install this plugin:
In DeepSeek Harness, install the plugin using the command 'dsh plugin install jkrandom-sudo/dsh-plugin-audit' with the full source address at https://github.com/jkrandom-sudo/dsh-plugin-audit.
About this plugin
In the DeepSeek Harness ecosystem, third-party plugins can introduce security risks like unauthorized credential access or data transfers to unknown hosts. dsh-plugin-audit addresses this by statically profiling plugin code to generate a permission card that reveals involved files, processes, and network targets, complete with evidence. It also provides a runtime sentinel that monitors tool calls and prompts for approval when risky actions are detected, such as accessing credential paths or moving data outside allowed hosts. This dual approach empowers users to make informed security decisions. It is ideal for developers, system administrators, and security teams who need to audit plugin safety in DSH environments.
Use Cases
- Audit third-party plugin code to detect potential security risks.
- Monitor tool calls to prevent credential leaks or data transfers to unknown hosts.
- Request user approval when plugins perform risky operations to ensure safety.
Best For
- Developers who need to audit plugin security.
- System administrators managing DSH platform access control.
- Security teams concerned with network safety and compliance.
Related Plugins
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.
Dockyard DSH is a native DeepSeek Harness plugin that unifies official OAuth/client sessions for Codex, Antigravity, Grok, Claude, and Cursor, providing account pool, model catalog, and quota status.