@dsh-so/dsh-code-security
DeepSeek Harness 安全套件：使用 harness 自有模型自动审计新安装的插件（设置面板 + 批处理工具），并附带包含 OpenAI Codex Security 工作流技能和 dsh_security_* 扫描工具的 Security-Audit-Mode agent 预设。一个包，一条 `dsh plugin add`。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @dsh-so/dsh-code-security@0.2.1
Code Security 以 @dsh-so/dsh-code-security 发布，当前版本为 0.2.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
Audit what enters your profile; arm the sessions that scan your code.
Two independent layers, one package:
- Gate (process-level, always-on): every newly installed plugin is automatically static-audited with the harness's own model — zero external credentials. Findings land in a bilingual settings panel and on-disk reports before you ever launch a session with them.
- Security Audit Mode (session-level, opt-in): a selectable agent preset that arms conversations with the 13 OpenAI Codex Security workflow skills plus 5 native
dsh_security_*scan tools.Honest boundary: the gate audits plugins entering your profile; it does not police your own source code at runtime. The preset only adds capabilities when you pick it for a session. Neither layer blocks or rewrites anything by itself.
Wraps OpenAI codex-security (Apache-2.0) into DeepSeek
Harness (DSH). Not an official OpenAI product and not affiliated with OpenAI (Codex /
Codex Security are OpenAI trademarks; this project uses neutral naming).
One package, two layers living at different levels of the harness:
dsh-code-security architecture: one package feeding a process-level always-on gate layer and an opt-in session-level Security Audit Mode preset~/.dsh/.agent-presets/) — currently the
only placement point DSH exposes for presets, hence the manual copy.Two steps — step 2 is optional: whether you want the in-session security scanning capability is up to you.
Process-level protection takes effect immediately: auto static audit of newly installed plugins, the "Settings → Security Audit" panel, audit reports.
# From a local checkout (current stage; run inside the project directory)
dsh plugin --profile web add .
Once the npm package is published, use the package name instead (no clone needed):
dsh plugin --profile web add @dsh-so/dsh-code-security
Requires
pnpm. Activate chain: pnpm install → the manifest recordsdsh.profile.bundles→ next boot composes the bundle layer and mounts the plugin (row iddsh-security-gate).
Adds a selectable session capability for new sessions: 13 Codex Security workflow skills +
5 dsh_security_* session tools. The gate keeps every feature without it — add whenever needed.
Place preset/ into the user preset root (source matches your install method):
# Windows — source A: local checkout
Copy-Item -Recurse .\preset "$env:USERPROFILE\.dsh\.agent-presets\dsh-security"
# source B: in-package copy after npm install
Copy-Item -Recurse "$env:USERPROFILE\.dsh\profiles\web\node_modules\@dsh-so\dsh-code-security\preset" "$env:USERPROFILE\.dsh\.agent-presets\dsh-security"
# macOS / Linux — source A
cp -R preset ~/.dsh/.agent-presets/dsh-security
# source B
cp -R ~/.dsh/profiles/web/node_modules/@dsh-so/dsh-code-security/preset ~/.dsh/.agent-presets/dsh-security
Pick the preset in a new session, then ask for whole-repo scans, diff scans, finding triage,
threat models, hardening proposals… The 5 dsh_security_* tools execute the
@openai/codex-security CLI behind strict rails (literal argument quoting, workdir confinement,
sub-command whitelist, timeouts).
The gate row ships with sensible defaults and needs no config to work. To tune
it, append an id-targeted override to ~/.dsh/profiles/web/cordis.patch.yml
(whole-row replacement; takes effect after a DSH restart):
# ~/.dsh/profiles/web/cordis.patch.yml
- id: dsh-security-gate
config:
autoScan: true # process-level auto audit (default true)
intervalMs: 60000 # re-audit sweep interval
progressLogMs: 15000 # console scan heartbeat; 0 = silent (default)
progressLogMs controls the console heartbeat printed while an LLM scan is
streaming ([dsh-security-gate] scan <key> in progress: 45s, …). It is off by
default so a busy console stays readable; set it to a millisecond value (e.g.
15000) to log a liveness line roughly that often. Scan start / completion /
failure lines are always printed regardless. Full option table:
docs/gate.en.md.
llm service (same session model routing);
no external API keys. Optional engine: 'cli' delegates to the official scanner (its own auth).file:// and remote URLs rejected; absolute-path exposure off by default
(dsh_security_resources returns a path-free virtual listing).cliCommand character
whitelist, sub-command whitelist, 5-minute foreground timeout cap.Full analysis: docs/gate.en.md.
Two reverse commands:
# Windows
dsh plugin --profile web remove @dsh-so/dsh-code-security
Remove-Item -Recurse -Force "$env:USERPROFILE\.dsh\.agent-presets\dsh-security"
# macOS / Linux
dsh plugin --profile web remove @dsh-so/dsh-code-security
rm -rf ~/.dsh/.agent-presets/dsh-security
Legacy leftovers (two-package / script installs):
dsh plugin --profile web remove dsh-security-gate dsh-security-tools; old state dir<DSH_HOME>/dsh-securityand old cache<DSH_HOME>/cache/dsh-code-securitycan be deleted manually.
dsh-code-security/
├── index.js # gate host plugin (zero-dep cordis plugin, row id: dsh-security-gate)
├── client.js # Settings "Security Audit" panel (bilingual)
├── audit-baseline.json # triage memory across audit rounds
├── cordis.patch.yml # bundle patch (auto-mounted by dsh plugin add)
├── preset/ # the Security-Audit-Mode preset tree
│ ├── agent.cordis.yml # preset composition (standard + dsh-security-tools row)
│ ├── preset.yml # preset metadata
│ ├── skills/dsh-security/ # DSH adapter entry skill
│ ├── bundled/ # upstream payload copy (skills/references/schemas/scripts/mcp)
│ └── plugins/dsh-security/index.js # 5 dsh_security_* tools
├── docs/ # gate.en/zh.md detailed gate docs
├── assets/ # README images
└── README.md / README.zh.md
Single npm package since 0.2.0 (Apache-2.0): one artifact carries the gate host plugin, the
settings panel, the Security-Audit-Mode preset and the full bundled payload (107 files; the
in-package integrity check keeps passing). package.json declares dsh.bundle.patch, so
dsh plugin add appends it to the profile bundles layer stack automatically; the preset still
goes into ~/.dsh/.agent-presets/ per platform convention (see step 2 above).
Legacy packages dsh-security-gate / dsh-security-tools are retired; installs migrate by
removing them and adding this package.
preset/bundled/ content copyright OpenAI, Apache-2.0, from
openai/codex-security.