dsh-security-guard
by — · bigclawd/dsh-security-guard
★ 0 Stars
⑂ 0 Forks
Original language: English
About
Static and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web panel, and allowlist.
Compatibility
Versions
| Latest version | Published | Size |
|---|---|---|
| 0.1.0-rc.5 | — | — |
| 0.1.0-rc.6 | — | — |
| 0.1.0-rc.7 | — | — |
Similar plugins
Pre-install static security review and runtime guard for dsh plugins: deobfuscation decoding, supply-chain checks, web one-click review/install/uninstall, and optional runtime tool-call guard.
★ 0
dsh plugin --profile web add dsh-plugin-security-reviewby shaoshi20
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence
★ 9
MIT
TypeScript
Aug 21, 2026
dsh plugin --profile web add @shaoshi/dshscanDSH plugin security guard: 28-rule static scanner, risk scoring, whitelist/blacklist policy, local web dashboard and in-DSH risk popups.
★ 0
dsh plugin --profile web add dsh-security-guardAdds dangerous-operation policy checks, output redaction, and a security-review workflow.
★ 0
↓ 59/wk
dsh plugin --profile web add dsh-guardianRuntime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and ap
★ 0
dsh plugin --profile web add dsh-egress-guardString-matches tool-call input arguments, blocks dangerous tool calls (deny) or allows them with an injected warning (warn), and ships a full rules-management panel.
★ 0
dsh plugin --profile web add @jypjypjypjyp/dsh-guardrail