xiayuhkust/dsh-shell-kit--packages-secret-guard ↗★ 0

dsh-plugin-secret-guard

Blocks model-facing tools from reading secret and PII files (.env, keys, credentials) in DeepSeek Harness. Deny with reason via the tools/pre-execute waterfall.

AI Analysis

核心用途是保护本地隐私与安全，防止AI工具意外读取敏感配置文件。适合对本地数据安全有高要求的DSH用户。

Agents

Package: dsh-plugin-secret-guard
Version: 0.1.0
License: MIT
Last updated: Aug 15, 2026

Install

This plugin has no verified bundle, or compatibility checks failed. Read the repository notes first. Read the full README ↗

README

Read the full README ↗

配置(可选)

- insert:
    - id: secret-guard
      name: dsh-plugin-secret-guard
      config:
        extraPatterns: ['server.txt', '*.token']   # 在默认规则上追加
        # patterns: [...]                          # 整体替换默认规则

默认规则见 src/index.mjs 的 DEFAULT_PATTERNS(.env / 私钥 / credentials / *.token 等)。匹配按文件名通配(*),大小写不敏感。