社区目录预览DeepSeek Harness 仍处于开发者预览阶段
DD

dsh-defend

插件已确认插件社区发布

PerryLink/dsh-defend · 今天更新

安装方式

dsh plugin --profile web add "github:PerryLink/dsh-defend#main"
dsh plugin --profile web add dsh-defend
dsh plugin --profile web add ./dsh-defend-
dsh plugin --profile web add github:PerryLink/dsh-defend

仓库内包含的插件

  • dsh-defendv0.3.6✓

    Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets, gating user messages on agent/pre-step, tool arguments on tools/pre-execute, and tool results on tools/post-execute, with sanitized defend/* session audit events, a defend_report tool, and a /defend command.

    package.json
    package.json
    dsh.bundle.patch
    cordis.patch.yml
    官方核心包 (7)
    • @deepseek-ai/cordis^4.0.2共享
    • @deepseek-ai/dsh-agent>=0.1.2-rc.1 <0.2.0共享
    • @deepseek-ai/dsh-commands>=0.1.2-rc.1 <0.2.0共享
    • @deepseek-ai/dsh-llm>=0.1.2-rc.1 <0.2.0共享
    • @deepseek-ai/dsh-session>=0.1.2-rc.1 <0.2.0共享
    • @deepseek-ai/dsh-tools>=0.1.2-rc.1 <0.2.0共享
    • @deepseek-ai/schemastery^3.18.2共享

路径固定于提交 806c0591538b

概览

Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanitized audit events

仓库检查结果

结果绑定到所列 commit,仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度,不是兼容性百分比,也不构成安全保证。

仓库静态检查

高风险
检查 Commit
806c0591538b
证据分
84/100
静态风险
高风险
扫描文件
3
检查发现
3

证据分项

来源溯源25/25
安装文档25/25
维护状况17/20
兼容性证据14/20
安全信号3/10

兼容性置信度: 有限

安装期脚本 (1)
  • preparenode scripts/prepare.mjs
检查发现 (3)
  • 高install.script
    package.jsoninstall-time
    "prepare": "node scripts/prepare.mjs"
  • 中obfuscation.child-process
    scripts/prepare.mjs:6obfuscation
    import { spawnSync } from 'node:child_process'
  • 中obfuscation.child-process
    scripts/prepare.mjs:22obfuscation
    const result = spawnSync(process.execPath, [bin, ...args], { stdio: 'inherit' })
未执行的检查
  • 依赖漏洞数据库扫描
  • 实际安装测试
  • 运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0