secret-guard
by JohnXu22786 · JohnXu22786/secret-guard
★ 0 Stars
⑂ 0 Forks
Updated: Aug 17, 2026
MIT
TypeScript
Original language: English
About
Blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe sg_* inspection tools that never print raw values.
Similar plugins
by cdxiaodong
Agent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.
★ 3
TypeScript
Sep 10, 2026
dsh plugin --profile web add dsh-guardianTaints the agent when tool results carry untrusted content, gates the privileged calls that follow, and refuses credentials passed to network-capable tools in every mode.
★ 0
dsh plugin --profile web add dsh-taintguardIrreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.
★ 0
dsh plugin --profile web add dsh-secret-scrubby MkaliezZ
DeepSeek Harness health and safety diagnostics: /doctor inspects the effective model-visible tool surface.
★ 0
MIT
TypeScript
Aug 29, 2026
dsh plugin --profile web add @mkaliezz/dsh-agent-doctorStatic and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web pan
★ 0
dsh plugin --profile web add dsh-security-guardby slywalker2006
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
★ 54
GPL-3.0
TypeScript
Sep 11, 2026
dsh plugin --profile web add dsh-passwords