dsh-security-scan

Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.

AI Analysis

核心用途是防止 AI 代理在操作项目时意外泄露敏感凭证。适合在开源或公共仓库中进行代码开发、注重安全合规的团队与个人。

other

Package: dsh-security-scan
Version: 0.1.0
Last updated: Aug 13, 2026

Install

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ben7am1n/dsh-security-scan

README

Read the full README ↗

Configuration

All keys live under the dsh-security-scan row's config:

Key	Type	Default	Meaning
`paths`	string[]	`['.']`	Directories to scan (relative to harness cwd).
`ignored`	string[]	`['node_modules','.git','dist','build']`	Directory basenames skipped during traversal.
`maxFileSizeBytes`	number	`1048576`	Files larger than this are skipped.
`maxMatchesPerFile`	number	`10`	Max findings reported per file.