Encrypted credential vault for DeepSeek Harness
Ox0400/dsh-vault · skills
Encrypted credential vault for DeepSeek Harness — AES-256-GCM + TOTP, model tools + Settings UI.
★ 11GitHub stars
0Forks
2026-09-08Last updated
TypeScriptLanguage
MITLicense
Key features
- Zero external crypto dependencies: everything is built on Node's built-in node:crypto (AES-256-GCM authenticated encryption, scrypt key derivation, RFC 6238 TOTP).
- Typical workflowsstore an SSH credential (kind: ssh + host/port/username/password or privateKey) and have the model vault_search for the host then vault_get the connection details
- dsh.bundle.patch → cordis.patch.yml (the layer applied automatically when a profile lists this bundle)
- awesome-dsh-plugin — official curated directory (Security & Safety section)
- Master passwordevery entry is encrypted with a 256-bit key derived via scrypt(master password, salt) and AES-256-GCM.
Requirements
- Vault strength is bounded by master-password strength
- use ≥ 16 characters of high entropy.
Install command
dsh plugin --profile web add github:Ox0400/dsh-vault