dsh-security-scan

Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.

AI 分析

核心用途是防止 AI 代理在操作项目时意外泄露敏感凭证。适合在开源或公共仓库中进行代码开发、注重安全合规的团队与个人。

other

パッケージ: dsh-security-scan
バージョン: 0.1.0
最終更新: 2026/08/13

インストール

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ben7am1n/dsh-security-scan

ドキュメント

README 全文を読む ↗

Configuration

All keys live under the dsh-security-scan row's config:

Key	Type	Default	Meaning
`paths`	string[]	`['.']`	Directories to scan (relative to harness cwd).
`ignored`	string[]	`['node_modules','.git','dist','build']`	Directory basenames skipped during traversal.
`maxFileSizeBytes`	number	`1048576`	Files larger than this are skipped.
`maxMatchesPerFile`	number	`10`	Max findings reported per file.