Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.
Author: tancheng33 · Security & Permissions · Catalog snapshot: 2026-09-04Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.
Imported third-party catalog description; not a Registry verification conclusion.1 stars · — downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-04No exact-version test is available.
No Registry security conclusion is available.
No functional smoke evidence is available.
Plugin permissions have not been resolved.
Version and integrity have not been resolved.
Describe your task in a DSH conversation and mention dsh-egress-guard. The plugin manager can find this candidate through Registry, then inspect its actual source and version locally.
github:tancheng33/dsh-egress-guardExact version not resolved