DSHCorrectover/dsh-ccs-security0

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

AI 분석

在运行时拦截命令注入、SSRF、凭证泄露及破坏性操作。适合对智能体执行环境有高安全性要求的用户。

패키지
dsh-ccs-security
버전
1.0.1
라이선스
Apache-2.0
최근 업데이트
2026. 8. 22.

설치

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:DSHCorrectover/dsh-ccs-security

Configuration

CCS works with safe defaults. To customise, add to your profile's cordis.patch.yml:

- insert:
    id: ccs-guard
    name: dsh-ccs-security
    config:
      commandInjection:
        threshold: 8          # raise for fewer false positives (default 6)
      ssrf:
        allowPrivate: true    # allow internal API access (default false)
      scanOutput:
        enabled: false        # disable output scanning for performance

Full configuration reference: examples/cordis.patch.example.yml Security rule details: docs/SECURITY_RULES.md 5-minute integration guide: docs/INTEGRATION.md