SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
Sensitive-Data Redaction & Exfiltration Protection
阻止密钥、令牌、凭据和 PII 进入模型上下文、工具Request、日志或遥测，包括发送前替换、Response还原、工具结果掩码、代码库泄露检测和子进程环境传递控制。排除凭据保管和法规合规工作流。
Leaf membership
29 plugins
@lixiangzhong/dsh-shell-secrets@lixiangzhong/dsh-shell-secretsCatalog AnalyzedDSH bundle: re-inject KEY/PASSWORD/SECRET/TOKEN variables from the launching environment into dsh bash subprocesses under their original namesCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-26Public signals0 downloadsdsh-agent-sentinelokaditya84/dsh-agent-sentinelCatalog AnalyzedSecurity guard plugin for DeepSeek Harness: secret redaction, a shell command denylist, prompt-injection scanning, and syntax verification.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-airbaguwu9039/dsh-airbagCatalog Analyzed呱来点人口牙...再也不会误把api key粘贴喂给ai了!!!可自定义的Security等级与Security措施，解决容易泄漏api key的底层问题。同时有报告记录可查!!!CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals2 starsdsh-cloakzhangmiao03/dsh-cloakCatalog AnalyzedMOVED → github.com/zhangmiao03/cloakpack (packages/dsh-cloak). One product, one vault, two gates.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-dlpdsh-dlpCatalog AnalyzedData-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redactionCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.10.0Evidence updated2026-09-25Public signals2452 downloadsdsh-egress-guardLKRCharon/dsh-egress-guardCatalog AnalyzedLocal, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-llmaskingyolorouter/dsh-llmaskingCatalog AnalyzedTransport-layer data masking for deepseek-harness (dsh): the model sees placeholders, you see real values restored live in the stream.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-maskdsh-maskCatalog AnalyzedPII masking for DeepSeek Harness — anonymizes names, phones, emails, ids, and keys before requests and restores them at the display layer, keeping plaintext out of session logs.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.12Evidence updated2026-09-20Public signals8 stars · 2250 downloadsdsh-model-redactorzerodegress/dsh-model-redactorCatalog AnalyzedDSH plugin from zerodegress/dsh-model-redactorCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-path-anonymizeryzhangjy/dsh-path-anonymizerCatalog AnalyzedDSH plugin: anonymize workspace-external file paths before model requests, with user confirmationCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-plugins#dsh-secret-redactorDamonKoy/dsh-pluginsCatalog AnalyzedAutomatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-privacy-gatenmsl1234/dsh-privacy-gateCatalog Analyzeddsh-pluginCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-redactdingge001/dsh-redactCatalog AnalyzedDSH / DeepSeek Harness plugin: runtime secret & PII redaction with mask, reversible vault and execution-time substitutionCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-redaction#dsh-plugin-content-policydsh-plugin-content-policyCatalog AnalyzedPreventive content policy for tool results: rewrites matched text, and drops or truncates whole fields by path before a result is normalised, rendered or persisted, so an unreviewed payload never enters it. Ships inert with no built-in category or domain blocklist.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.1Evidence updated2026-09-25Public signals0 stars · 319 downloadsdsh-redaction#dsh-plugin-redactdsh-plugin-redactCatalog AnalyzedIn-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-26Public signals0 stars · 326 downloadsdsh-riskproofdsh-riskproofCatalog AnalyzedLive security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0Evidence updated2026-09-20Public signals7 stars · 859 downloadsdsh-secret-guardMkaliezZ/dsh-secret-guardCatalog AnalyzedFail-closed secret-like payload guard for DSH tool calls: inspects model tool arguments at tools/pre-execute.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-secret-pastezhujiaqi/dsh-secret-pasteCatalog AnalyzedDeepSeek Harness plugin: detect pasted secrets, store them in the credentials seam, and send [secret:REF] placeholders to the model.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals2 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.