dsh-secure-audit

Disclaimer. This is an unofficial third-party tool. It is not affiliated with, endorsed by, or sponsored by DeepSeek. "DeepSeek" and "DeepSeek Harness" are trademarks of their respective owners; they are referenced here only to describe what this plugin runs against.

Read-only security and compliance plugin for DeepSeek Harness (DSH).

Compatibility

• Peer dependency: @deepseek-ai/dsh-tools >= 0.1.0-rc.7, provided by the DSH runtime.
• Tested against @deepseek-ai/dsh-tools 0.1.0-rc.7. DSH itself is pre-1.0; pin your DSH version and re-run security_audit after upgrading either side. Release notes state the DSH snapshot each version was tested against.
• No install-time scripts and no build step; the shipped source is the artifact.

Four tools and one skill:

Capability	Tool	What it does
Prompt-injection detection	security_scan_text	Rule engine (English + Chinese) with LRU cache, fail-open timeout (configurable fail-closed), and a pluggable model classifier. Returns allow / review / block, a riskLevel, and an inputSha256 for replayable decisions.
PII redaction	security_redact_text	Masks CN mobile numbers, CN ID cards, CN bank cards, emails, IPv4, API keys, and URL credentials. Output is safe to log or display.
Structured JSON redaction	security_redact_json	Recursively redacts sensitive values inside JSON by key name (api_key, token, secret, password, authorization, ...) plus a PII fallback on other values. The structure is preserved — safe to hand tool-call arguments or session context to a third-party model.
Local security audit	security_audit	Read-only audit of config secrets, file permissions, session-file PII, plugin sources, network bindings, and env vars. Deterministic, redacted report with a self-checksum (reportSha256).
Security review skill	security-review	Registered at runtime via the optional skills service; teaches the agent how to use the tools and explain verdicts.

The plugin never writes, deletes, or executes anything on the audited system. That is a hard constraint of the codebase, not a convention: there are no write paths in lib/.

Install

The plugin has no build step and no install scripts. index.js and lib/ are the shipped artifact; nothing compiles, so there is nothing to run at install time.

# from a tarball (attached to every GitHub release)
dsh plugin add ./dsh-secure-audit-0.1.0.tgz

# from git source (no build runs; pin the commit)
dsh plugin add github:PensiveFei/dsh-secure-audit#<commit>

npm: published — dsh plugin add dsh-secure-audit installs the latest release from the registry. The tarball attached to each GitHub release and the git source form below still work.

Notes for git installs:

…