dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

AI 分析

在运行时拦截命令注入、SSRF、凭证泄露及破坏性操作。适合对智能体执行环境有高安全性要求的用户。

パッケージ

dsh-ccs-security

バージョン

1.0.1

ライセンス

Apache-2.0

最終更新

2026/08/22

Configuration

CCS works with safe defaults. To customise, add to your profile's cordis.patch.yml:

- insert:
    id: ccs-guard
    name: dsh-ccs-security
    config:
      commandInjection:
        threshold: 8          # raise for fewer false positives (default 6)
      ssrf:
        allowPrivate: true    # allow internal API access (default false)
      scanOutput:
        enabled: false        # disable output scanning for performance

Full configuration reference: examples/cordis.patch.example.yml Security rule details: docs/SECURITY_RULES.md 5-minute integration guide: docs/INTEGRATION.md

dsh-ccs-security

AI 分析

インストール

ドキュメント

Configuration