DSHCorrectover/dsh-ccs-security ↗★ 0
dsh-ccs-security
DeepSeek Harness 运行时安全防护插件
AI 分析
在运行时拦截命令注入、SSRF、凭证泄露及破坏性操作。适合对智能体执行环境有高安全性要求的用户。
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:DSHCorrectover/dsh-ccs-security说明文档
阅读完整 README ↗Configuration
CCS works with safe defaults. To customise, add to your profile's cordis.patch.yml:
- insert:
id: ccs-guard
name: dsh-ccs-security
config:
commandInjection:
threshold: 8 # raise for fewer false positives (default 6)
ssrf:
allowPrivate: true # allow internal API access (default false)
scanOutput:
enabled: false # disable output scanning for performance
Full configuration reference: examples/cordis.patch.example.yml
Security rule details: docs/SECURITY_RULES.md
5-minute integration guide: docs/INTEGRATION.md