SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Sensitive-Data Redaction & Exfiltration Protection
阻止密钥、令牌、凭据和 PII 进入模型上下文、工具Request、日志或遥测，包括发送前替换、Response还原、工具结果掩码、代码库泄露检测和子进程环境传递控制。排除凭据保管和法规合规工作流。
Leaf membership
26 plugins
dsh-agent-sentinelokaditya84/dsh-agent-sentinelCatalog AnalyzedSecurity guard plugin for DeepSeek Harness: secret redaction, a shell command denylist, prompt-injection scanning, and syntax verification.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-airbaguwu9039/dsh-airbagCatalog Analyzed呱来点人口牙...再也不会误把api key粘贴喂给ai了!!!可自定义的Security等级与Security措施，解决容易泄漏api key的底层问题。同时有报告记录可查!!!CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-cloakzhangmiao03/dsh-cloakCatalog AnalyzedContext firewall for DeepSeek Harness: credentials in tool results become opaque placeholders before they reach the model — the secret never enters context.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-dlpdsh-dlpCatalog AnalyzedData-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redactionCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.10.0Evidence updated2026-09-08Public signalsNo public usage signalsdsh-egress-guardLKRCharon/dsh-egress-guardCatalog AnalyzedLocal, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-llmaskingyolorouter/dsh-llmaskingCatalog AnalyzedTransport-layer data masking for deepseek-harness (dsh): the model sees placeholders, you see real values restored live in the stream.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-maskdsh-maskCatalog AnalyzedPII masking for DeepSeek Harness — anonymizes names, phones, emails, ids, and keys before requests and restores them at the display layer, keeping plaintext out of session logs.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.3Evidence updated2026-09-07Public signals5 stars · 994 downloadsdsh-model-redactorzerodegress/dsh-model-redactorCatalog AnalyzedDSH plugin from zerodegress/dsh-model-redactorCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-path-anonymizeryzhangjy/dsh-path-anonymizerCatalog AnalyzedDSH plugin: anonymize workspace-external file paths before model requests, with user confirmationCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-plugins#dsh-secret-redactorDamonKoy/dsh-pluginsCatalog AnalyzedAutomatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-privacy-gatenmsl1234/dsh-privacy-gateCatalog Analyzeddsh-pluginCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-redactdingge001/dsh-redactCatalog AnalyzedDSH / DeepSeek Harness plugin: runtime secret & PII redaction with mask, reversible vault and execution-time substitutionCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-riskproofdsh-riskproofCatalog AnalyzedProvenance-aware execution security that tracks sensitive data across DSH tool calls and blocks risky exfiltration before execution.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.1Evidence updated2026-09-07Public signals2 stars · 561 downloadsdsh-secret-guardMkaliezZ/dsh-secret-guardCatalog AnalyzedFail-closed secret-like payload guard for DSH tool calls: inspects model tool arguments at tools/pre-execute.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-secret-pastezhujiaqi/dsh-secret-pasteCatalog AnalyzedDeepSeek Harness plugin: detect pasted secrets, store them in the credentials seam, and send [secret:REF] placeholders to the model.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-secret-scanuckkk/dsh-secret-scanCatalog Analyzed@{name=dsh-secret-scan; version=0.1.0; description=敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查Security; type=module; main=lib/index.js; exports=; files=System.Object[]; dsh=; keywords=System.Object[]; author=istone <ad571@qq.com>; license=MIT; peerDependencies=}.descriptionCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-secret-scrubjwilson411/dsh-secret-scrubCatalog AnalyzedDeepSeek Harness plugin: redact known secret shapes before the model sees them; JSONL incidents never store the preimageCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-secret-scrubdsh-secret-scrubCatalog AnalyzedIrreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-08Public signals1 stars · 0 downloads
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.