artemiroshnichenko/dsh-plugins--packages-dsh-guard0

dsh-guard

Security guard for DeepSeek Harness: monotonic deny on secret paths and approval gates for destructive shell commands

包名
dsh-guard
版本
0.1.0
许可证
MIT
最近更新
2026年9月9日

安装

此插件尚未提供可验证的 bundle,或兼容性检查未通过。请先阅读仓库说明。 阅读完整 README ↗

Configuration

Add the plugin to your ~/.dsh/cordis.patch.yml:

- insert:
    - id: guard
      name: dsh-guard
      config:
        # Additional path patterns to restrict
        denyPaths:
          - "~/company-secrets/**"
          - "**/.vault-token"

        # Additional commands requiring user confirmation
        askCommands:
          - id: terraform-apply
            re: "\\bterraform\\s+apply\\b"
            reason: "infrastructure deployment via terraform apply"

        # Output warnings on intercepted actions
        logDecisions: true