SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
Sensitive-Data Redaction & Exfiltration Protection
阻止密钥、令牌、凭据和 PII 进入模型上下文、工具Request、日志或遥测，包括发送前替换、Response还原、工具结果掩码、代码库泄露检测和子进程环境传递控制。排除凭据保管和法规合规工作流。
Leaf membership
29 plugins
dsh-secret-scanuckkk/dsh-secret-scanCatalog Analyzed@{name=dsh-secret-scan; version=0.1.0; description=敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查Security; type=module; main=lib/index.js; exports=; files=System.Object[]; dsh=; keywords=System.Object[]; author=istone <ad571@qq.com>; license=MIT; peerDependencies=}.descriptionCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-secret-scrubjwilson411/dsh-secret-scrubCatalog AnalyzedDeepSeek Harness plugin: redact known secret shapes before the model sees them; JSONL incidents never store the preimageCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-secret-scrubdsh-secret-scrubCatalog AnalyzedIrreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-23Public signals1 stars · 243 downloadsdsh-security-scanben7am1n/dsh-security-scanCatalog AnalyzedDSH plugin from ben7am1n/dsh-security-scanCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-shadow-auditor@goodandready/dsh-shadow-auditorCatalog AnalyzedBackground security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.15Evidence updated2026-09-26Public signals0 stars · 1805 downloadsdsh-shell-kitxiayuhkust/dsh-shell-kitCatalog AnalyzedPlugins for DeepSeek Harness (dsh): secret-guard blocks reading secret/PII files, script-exec runs scripts via temp file to avoid Windows quoting pitfalls.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-subprocess-inherit-environmentzhangzujian/dsh-subprocess-inherit-environmentCatalog AnalyzedDSH plugin that forwards the complete Harness environment through ctx.subprocessCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals2 starsdsh-telemetry-redactordsh-telemetry-redactorCatalog AnalyzedRedacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-22Public signals2 stars · 756 downloadsdsh-text-maskuckkk/dsh-text-maskCatalog Analyzed文本脱敏：邮箱/手机号/身份证/银行卡/IP/密钥掩码，分享前保护隐私CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-tui-secret-guardicyaaaww/dsh-tui-secret-guardCatalog AnalyzedBlocks high-confidence secrets before dsh-TUI sends them to a model, compliant with dsh ecosystem manifest v0.15.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starssecret-guardJohnXu22786/secret-guardCatalog AnalyzedBlocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe sg_* inspection tools that never print raw values.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.