zoahdev/dsh-poison-guard

Plugin ⭐ 0 MIT securitytools

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST (JS-X-Ray) + deobfuscation + regex. Catches obfuscated exfiltration, eval, hidden shell commands.

Install

# human-readable verdict
dsh-poison-guard scan ./some-plugin

# machine-readable (for CI gates)
dsh-poison-guard scan ./some-plugin --json

# install into a profile (then the agent gains a `plugin_scan` tool)
dsh plugin --profile web add dsh-poison-guard

# or as a global CLI
npm install -g dsh-poison-guard

Add zoahdev/dsh-poison-guard to your DSH config (web profile) to enable.

README

Expand full README Collapse

README is empty.