dsh-secret-guard
Secret Guard
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
The plugin will be installed here. Keep web if you are unsure.
npx -y @deepseek-ai/dsh plugin --profile web add github:JohnXu22786/secret-guard#5de729ae61617a466e8beedb15ab0ebb1f0c67b5Compatibility and provenance
Secret Guard is published as dsh-secret-guard and currently resolves to version 0.1.0. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.
- DSH compatibility
- *
- Runtime surfaces
- any
- Release source
- github
- Registry updated
Versions
0.1.0stable