okaditya84/dsh-agent-sentinel ↗★ 0
dsh-agent-sentinel
DeepSeek Harness 的安全防护插件，提供敏感信息脱敏、Shell 命令黑名单、间接提示词注入扫描以及文件写入语法验证。
AI 分析
核心用途为 DSH 运行环境提供安全防护。适合对大模型执行代码、命令有高安全要求的用户，可拦截危险命令并防止敏感信息泄露。
安裝
此插件尚未提供可驗證的 bundle，或相容性檢查未通過。請先閱讀倉庫說明。 閱讀完整 README ↗
說明文件
閱讀完整 README ↗Configuration reference
| Option | Type | Default | Description |
|---|---|---|---|
redactSecrets | boolean | true | Redact secrets/credentials found in tool output content blocks. |
customSecretPatterns | { name, pattern }[] | [] | Additional secret regex patterns. |
blockDangerousCommands | boolean | true | Veto shell calls matching the built-in destructive-command denylist. |
customCommandRules | { id, pattern, reason, severity? }[] | [] | Additional shell command denylist rules. |
detectPromptInjections | boolean | true | Scan file-read/fetch output for prompt-injection patterns. |
verifyCodeSyntax | boolean | true | Verify syntax of file writes/edits (JS, TS, JSON, Python). |
auditLogPath | string | .sentinel-audit.jsonl | Path for the append-only JSONL audit log. |
strictMode | boolean | false | Block (rather than just log) a write that introduces a syntax error. |
maxAuditHistory | number | 500 | In-memory audit ring-buffer size (independent of the on-disk log, which is never truncated by this plugin). |