dsh-security-guard
DSH 运行时安全防护插件 — 加载器导入限制、HTTP Host 标头验证和沙箱服务拒绝列表（QVD-2026-52631/57410/52644/52646）。AI 辅助补丁。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:ruanhaodong-tt/dsh-security-guard#e540e8788ad5f77b8b1302fa7fcc97bd3fcaf352Security Guard 以 dsh-security-guard 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →AI-assisted production. Vulnerability triage, patch implementation, and plugin code were produced by an AI coding assistant (TraeWork / Trae) under human supervision. / 漏洞定位、补丁代码与插件实现均由 AI 编程助手（TraeWork / Trae）在人工监督下完成。
A runtime security guard plugin for DeepSeek Harness (DSH) that applies defense-in-depth measures at the Cordis plugin layer. It does not modify the original source code — instead, it shadows runtime methods and intercepts HTTP requests to replicate the fixes from the DSH Security Patch.
DSH 运行时安全守卫插件，在 Cordis 插件层施加纵深防御。不修改原始源码——通过运行时方法遮蔽与 HTTP 请求拦截来复制安全补丁的修复语义。
| CVE | Vulnerability / 漏洞类型 | Plugin Coverage / 插件覆盖 | Status / 状态 |
|---|---|---|---|
| QVD-2026-52631 | Config loader arbitrary code execution / 配置加载任意代码执行 | Shadows ctx.loader.import to validate builtins, confine relative imports, and reject path-like bare specifiers | Full / 完整 |
| QVD-2026-57410 | HTTP Host header forgery RCE / Host 头伪造远程代码执行 | prependListener on http.Server rejects forged loopback Host claims from non-loopback peers | Full / 完整 |
| QVD-2026-52644 | VM sandbox exec escape / VM 沙箱 exec 逃逸 | Cannot be covered by a plugin. The execView sanitizer lives in a VM-internal closure. Apply the source patch. | Not covered / 无法覆盖 |
| QVD-2026-52646 | Prompt injection chain sandbox escape / 提示注入链式沙箱逃逸 | Cannot be covered by a plugin. The service deny-list is in the sandbox context factory. Apply the source patch. | Not covered / 无法覆盖 |
The plugin cannot fix QVD-2026-52644 and QVD-2026-52646 because those mitigations are in VM-internal closures and the sandbox context factory — code paths that no Cordis plugin can intercept. You must apply the source patch for full protection.
插件无法修复 QVD-2026-52644 和 QVD-2026-52646，因为这两处修复在 VM 内部闭包和沙箱上下文工厂中——Cordis 插件无法触及这些路径。必须应用源码补丁以获得完整防护。
dsh plugin add ruanhaodong-tt/DSH-Security-Patch
Or add to your profile's cordis.patch.yml:
- insert:
- id: dsh-security-core
name: dsh-security-guard/core
inject: [loader]
- id: dsh-security-web
name: dsh-security-guard/web
inject: [webServer]
The web guard accepts an optional trustedHosts array for non-loopback authorities that should be allowed:
- insert:
- id: dsh-security-web
name: dsh-security-guard/web
inject: [webServer]
config:
trustedHosts: ["harness.internal:3080"]
The plugin logs its activation on startup:
[INFO] dsh-security-core: ctx.loader.import shadowed (QVD-2026-52631)
[INFO] dsh-security-web: HTTP Host guard active (QVD-2026-57410)
You can also verify by sending a forged Host header:
curl -H "Host: localhost:3080" http://<public-ip>:3080/api/ # should return 403
MIT © 2026 一条大咸鱼
This plugin was produced with AI assistance. It is not an official patch from DeepSeek, and has not been audited by the upstream. Use at your own risk.
本插件由 AI 辅助制作，并非 DeepSeek 官方补丁，未经上游审计。请自行评估风险后使用。