SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Prompt-Injection & Context Defense
检测、隔离或诱捕消息、工具输出、配置和 Skill 中的提示注入、越狱、隐形字符及上下文病毒，跟踪不可信上下文并阻断指令劫持或金丝雀外泄。排除仅提供综合审计报告的工具。
Leaf membership
12 plugins
dsh-airlockdsh-airlockCatalog AnalyzedProvenance-gated tool use for DeepSeek Harness (dsh) — labels every input, propagates the labels, and denies capabilities over labels instead of argument stringsCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-08Public signals202 downloadsdsh-canaryjwilson411/dsh-canaryCatalog AnalyzedDeepSeek Harness plugin: plant a canary and deny tool args/URLs that echo it (CANARY_TRIP).CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-defenddsh-defendCatalog AnalyzedDetects prompt-injection, jailbreak, and secret-leak patterns on the agent/pre-step, tools/pre-execute, and tools/post-execute seams with allow/ask/block tiers, sanitized defend/detection audit events, a defend_report tool, and a destructive-delete command guard.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.3.4Evidence updated2026-09-07Public signals6 stars · 1431 downloadsdsh-injection-guardloeanxi/dsh-injection-guardCatalog AnalyzedSource-aware prompt injection guard for DSH: tracks untrusted turn context, detects injection signals, scores sensitive sinks, and blocks high-risk tool calls with explainable audit logs.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals3 starsdsh-llm-injection-filterXiaoYuOvO/dsh-llm-injection-filterCatalog AnalyzedDSH LLM response-stream injection filter: hard-block rare Unicode scripts (Track A) + score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall. Install: dsh plugin --profile web add github:XiaoYuOvO/dsh-llm-injection-filterCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-mcpguardChenLaoshiYF/dsh-mcpguardCatalog AnalyzedScans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell, and credential leaks.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-prompt-antivirusQinpanWan/dsh-prompt-antivirusCatalog AnalyzedGlobal prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments, tool results, pre-model messages and the outbound stream; quarantine/block/monitor modes, canary trap, and an evolvable on-disk signature library with learn/import/export.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-prompt-shielda1swg1159-pixel/dsh-prompt-shieldCatalog AnalyzedRuntime prompt-injection detection and quarantine for DeepSeek Harness tool results.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-taintguardsashankh/dsh-taintguardCatalog AnalyzedTaints the agent when tool results carry untrusted content, gates the privileged calls that follow, and refuses credentials passed to network-capable tools in every mode.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsnoatmark-dsh-pluginylwl1997/noatmark-dsh-pluginCatalog AnalyzedText hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starspromptwallChhlafiu4312/promptwallCatalog AnalyzedLocal prompt-injection and secret-exfiltration firewall for DeepSeek Harness.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals3 starssofagent#cordis-plugin-sofagent-auditKongFangXun/sofagentCatalog AnalyzedCommit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 79 tools. Installable via dsh plugin add.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals42 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.