SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18

Sensitive-Data Redaction & Exfiltration Protection

阻止密钥、令牌、凭据和 PII 进入模型上下文、工具Request、日志或遥测,包括发送前替换、Response还原、工具结果掩码、代码库泄露检测和子进程环境传递控制。排除凭据保管和法规合规工作流。

Use keyword search
Source catalog discovery.composite.2026-09-06.v1-0-5.b92b985e31dfCanonical structure · 823 nodes · 14829 plugins

Leaf membership

26 plugins

dsh-security-scanben7am1n/dsh-security-scanCatalog AnalyzedDSH plugin from ben7am1n/dsh-security-scanSecurity & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-shadow-auditorGooDAnDReaDY/dsh-shadow-auditorCatalog AnalyzedBackground security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signalsNo public usage signalsdsh-shell-kitxiayuhkust/dsh-shell-kitCatalog AnalyzedPlugins for DeepSeek Harness (dsh): secret-guard blocks reading secret/PII files, script-exec runs scripts via temp file to avoid Windows quoting pitfalls.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-subprocess-inherit-environmentzhangzujian/dsh-subprocess-inherit-environmentCatalog AnalyzedDSH plugin that forwards the complete Harness environment through ctx.subprocessTools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-telemetry-redactordsh-telemetry-redactorCatalog AnalyzedRedacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-07Public signals3 stars · 677 downloadsdsh-text-maskuckkk/dsh-text-maskCatalog Analyzed文本脱敏:邮箱/手机号/身份证/银行卡/IP/密钥掩码,分享前保护隐私Tools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-tui-secret-guardicyaaaww/dsh-tui-secret-guardCatalog AnalyzedBlocks high-confidence secrets before dsh-TUI sends them to a model, compliant with dsh ecosystem manifest v0.15.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starssecret-guardJohnXu22786/secret-guardCatalog AnalyzedBlocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe sg_* inspection tools that never print raw values.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 stars

Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.