dsh-security-scan

DeepSeek Harness 的密钥与危险模式扫描器：提供 security_scan 工具，可发现泄露的 API 密钥、Token、私钥及凭证文件并进行脱敏。

AI 分析

核心用途是防止 AI 代理在操作项目时意外泄露敏感凭证。适合在开源或公共仓库中进行代码开发、注重安全合规的团队与个人。

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ben7am1n/dsh-security-scan

All keys live under the dsh-security-scan row's config:

Key	Type	Default	Meaning
`paths`	string[]	`['.']`	Directories to scan (relative to harness cwd).
`ignored`	string[]	`['node_modules','.git','dist','build']`	Directory basenames skipped during traversal.
`maxFileSizeBytes`	number	`1048576`	Files larger than this are skipped.
`maxMatchesPerFile`	number	`10`	Max findings reported per file.