DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Secret Guard — DSH Plugin for DeepSeek Harness
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in
← Plugins
S

@mkaliezz/dsh-secret-guard

Secret Guard

Fail-closed secret-like payload guard for DeepSeek Harness tool calls.

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add github:MkaliezZ/dsh-secret-guard#c8cc6bd90e876610a855a1f4013f98ed7b06a4e8
READMECompatibilityVersions

Compatibility and provenance

Secret Guard is published as @mkaliezz/dsh-secret-guard and currently resolves to version 0.2.1. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
any
Release source
github
Registry updated
8/24/2026

Versions

0.2.1stable
8/24/2026

Related plugins

Loading related plugins…

Latest
0.2.1
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
Unavailable
Files
Unavailable
Surface
any
License
MIT
Source
github
GitHub
★ 0
Weekly downloads
0
Last push
8/29/2026
View source ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue

Related plugins

More verified plugins in security-access.

Doctor@linxin666/dsh-doctorTransactional rescue mode for DSH profiles with a supervised launcher, isolated recovery capsule, deterministic repairs, health monitoring, and a local Web recovery consolePocketdsh-pocketPut DeepSeek Harness in your pocket: one package, one settings page, and scan a QR code on your phone to access DSH on your computer in sync (LAN + public network, real-time screen mirroring).DSCODE@toddzheng024/dscode-bundleA complete DeepSeek coding agent with persistent shell, Ultra collaboration and automatic permission review.Auto Reviewdsh-auto-reviewSecond-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.

README

dsh-secret-guard

A fail-closed secret-like payload guard for DeepSeek Harness (DSH) tool calls.

The plugin inspects model-supplied tool arguments at tools/pre-execute and returns allow, ask, or deny before the tool body runs. v0.1 deliberately does not rewrite/redact arguments: DSH freezes execution identity and arguments before policy, so mutating them inside a guard would violate the runtime contract.

v0.1

  • detects common private-key/token/key patterns;
  • detects obvious sensitive field names;
  • bounds serialized payload size and fails closed above the configured limit;
  • optional tool-name scope (protectedTools); empty means inspect every tool;
  • actionOnFinding: block|ask;
  • no raw secret values in the denial reason.

Non-claims

  • heuristic secret detection, not complete DLP;
  • no guarantee every credential format is detected;
  • no argument redaction in v0.1;
  • not a sandbox or malware detector;
  • should be composed with a policy boundary such as AgentFuse when broader action authorization is required.

Development

npm test

License

MIT