secure audit · DSH plug-in development tool
PensiveFei/dsh-secure-audit · skills
Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.
★ 87GitHub stars
1Forks
2026-08-23Last updated
JavaScriptLanguage
MITLicense
Key features
- Audit checks are stat/readdir/readFile/env/os reads only.
- Tools not showing up after install?
- Redaction is on every output path: scan snippets, audit evidence, log lines, and structured JSON.
- lib/logger.js masks PII in any field named text/content/evidence/snippet/value
- security_redact_json scrubs sensitive key values by name
Requirements
- Peer dependency@deepseek-ai/dsh-tools = 0.1.0-rc.7, provided by the DSH runtime.
- pin your DSH version and re-run security_audit after upgrading either side.
Install command
dsh plugin --profile web add github:PensiveFei/dsh-secure-audit