PII masking middleware for DeepSeek Harness
PerryLink/dsh-mask · themes
PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer, keep the restore tab.
★ 6GitHub stars
0Forks
2026-09-07Last updated
JavaScriptLanguage
Apache-2.0License
Key features
- PII masking middleware for DeepSeek Harness — anonymize personal data before it reaches the model, restore it at the display layer.
- Request-time masking — agent/pre-step messages are rewritten so phones, emails, ID cards, bank cards, keys, and IPs (each opt-in) become -style placeholders.
- Permissionsdsh-mask performs no network requests and stores no credentials
- Plaintext never enters the session log.
- Phones, emails, ID cards, bank cards, keys, and more become placeholders at the model boundary
Requirements
- Name (person) and address (address) recognition needs an external NER recognizer, which the pure-host zero-dependency form does not bundle
- moderegex+ner and those entities fail loudly at load.
Install command
dsh plugin --profile web add github:PerryLink/dsh-mask