bigclawd/dsh-security-guard

DeepSeek Harness(dsh)安全守卫:恶意代码、提示词注入及令牌浪费的静态扫描,运行时拦截,/scan、plugin_scan、Web 面板与白名单 | DeepSeek Harness 安全守卫插件:恶意代码/提示词注入静态扫描、运行时拦截、/scan、plugin_scan、Web 面板与白名单

catalog 简介:Security guard for DeepSeek Harness (dsh): static scan for malicious code, prompt injection and token waste, runtime interception, /scan, plugin_scan, web panel and allowlist | DeepSeek Harness 安全守卫插件:恶意代码/提示词注入静态扫描、运行时拦截、/scan、plugin_scan、Web 面板与白名单

安装

Matcher kinds: `ast-call` (calls/`new`), `ast-member` (dotted access),
`ast-computed` (computed access on globals — obfuscation signal),
`ast-import` (imports/requires), `regex` (scoped to `all`/`string`/`comment`),
`phrase`, `url`, `file`. Beyond the classic malicious patterns, the bundled
rules harden against obfuscation: hex/base64 `Buffer.from`/`toString`
encodings, long hex-only string payloads, and computed member access on
`globalThis`/`global`/`process` are all flagged. The full schema lives in
`src/rules.ts`.

## 🚀 Usage

### Install

bigclawd/dsh-security-guard 加入你的 DSH 配置(web profile)即可启用。

README

展开完整 README 收起

README 内容为空。