sashankh/dsh-taintguard

dsh-taintguard

Name: dsh-taintguard
Author: sashankh

BundleWorkflow0 GitHub stars

Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin, gates privileged calls that follow untrusted content, and refuses credentials heading off the machine.

Install

npx @deepseek-ai/dsh plugin --profile <name> add https://github.com/sashankh/dsh-taintguard/releases/download/v0.1.0/dsh-taintguard-0.1.0.tgz

Restart `dsh web` after install. Bundle APIs can change during the developer preview.

README badge

[![DSH Hub](https://dshhub.dev/badge/dsh-taintguard.svg)](https://dshhub.dev/plugins/dsh-taintguard)

Paste this into your README. The star count updates with every catalog sync.

GitHub Install guide

Related plugins

omdsh-dev/dsh-at-file

dsh-at-file

Search files with @ in the composer and attach contents.

BundleWorkflow

20 stars

Moeblack/dsh-message-edit

Message Edit

Edit history, reroll, and a version timeline.

ToolWorkflow

41 stars+16

omdsh-dev/dsh-plugin-check

plugin-check

Read-only scan of plugin manifests and patch conventions.

ToolWorkflow

27 stars+4