DSHCorrectover/dsh-ccs-security ↗★ 0

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

Agent 协作integrations

包名: dsh-ccs-security
版本: 1.0.1
许可证: Apache-2.0
最近更新: 2026年8月22日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:DSHCorrectover/dsh-ccs-security

说明文档

阅读完整 README ↗

Configuration

CCS works with safe defaults. To customise, add to your profile's cordis.patch.yml:

- insert:
    id: ccs-guard
    name: dsh-ccs-security
    config:
      commandInjection:
        threshold: 8          # raise for fewer false positives (default 6)
      ssrf:
        allowPrivate: true    # allow internal API access (default false)
      scanOutput:
        enabled: false        # disable output scanning for performance

Full configuration reference: examples/cordis.patch.example.yml Security rule details: docs/SECURITY_RULES.md 5-minute integration guide: docs/INTEGRATION.md