bigclawd/dsh-security-guard

Install

Matcher kinds: `ast-call` (calls/`new`), `ast-member` (dotted access),
`ast-computed` (computed access on globals — obfuscation signal),
`ast-import` (imports/requires), `regex` (scoped to `all`/`string`/`comment`),
`phrase`, `url`, `file`. Beyond the classic malicious patterns, the bundled
rules harden against obfuscation: hex/base64 `Buffer.from`/`toString`
encodings, long hex-only string payloads, and computed member access on
`globalThis`/`global`/`process` are all flagged. The full schema lives in
`src/rules.ts`.

## 🚀 Usage

### Install

Add bigclawd/dsh-security-guard to your DSH config (web profile) to enable.