Community directory previewDeepSeek Harness is in developer preview
DC

dsh-credentials-vault

PluginConfirmed pluginCommunity

tancheng33/dsh-credentials-vault · updated 16 days ago

Installation

dsh plugin --profile <name> add dsh-credentials-vault
dsh plugin --profile web add github:tancheng33/dsh-credentials-vault

Plugins in this repository

  • dsh-credentials-vaultv0.1.0

    HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host

    package.json
    package.json
    dsh.bundle.patch
    cordis.patch.yml
    Official core packages (3)
    • @deepseek-ai/cordis>=4.0.0 <5shared
    • @deepseek-ai/dsh-credentials>=0.1.0-rc.5 <0.2.0shared
    • @deepseek-ai/schemastery>=3.18.0 <4shared

Paths are pinned to commit 5aba0e645699

Overview

HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

High risk
Checked commit
5aba0e645699
Evidence Score
76/100
Static risk
High risk
Files scanned
3
Findings
3

Evidence breakdown

Source provenance25/25
Install documentation25/25
Maintenance12/20
Compatibility evidence5/20
Security signals3/10

Compatibility confidence: Limited

Install-time scripts (1)
  • preparenode scripts/prepare.js
Findings (3)
  • Highinstall.script
    package.jsoninstall-time
    "prepare": "node scripts/prepare.js"
  • Mediumobfuscation.child-process
    scripts/prepare.js:11obfuscation
    import { spawnSync } from 'node:child_process'
  • Mediumobfuscation.child-process
    scripts/prepare.js:32obfuscation
    const result = spawnSync(process.execPath, [compiler, '-p', join(packageRoot, 'tsconfig.build.json')], {
Not run
  • Dependency advisory database scan
  • Installation execution test
  • Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0