zoahdev/dsh-poison-guard

插件 ⭐ 0 MIT securitytools

DeepSeek Harness 插件预装供应链投毒扫描器:AST(JS-X-Ray)+ 反混淆 + 正则。捕捉混淆的数据外泄、eval、隐藏的 shell 命令。

catalog 简介:Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST (JS-X-Ray) + deobfuscation + regex. Catches obfuscated exfiltration, eval, hidden shell commands.

安装

# human-readable verdict
dsh-poison-guard scan ./some-plugin

# machine-readable (for CI gates)
dsh-poison-guard scan ./some-plugin --json

# install into a profile (then the agent gains a `plugin_scan` tool)
dsh plugin --profile web add dsh-poison-guard

# or as a global CLI
npm install -g dsh-poison-guard

zoahdev/dsh-poison-guard 加入你的 DSH 配置(web profile)即可启用。

README

展开完整 README 收起

README 内容为空。