Masked phone numbers, emails, identity numbers, bank card numbers and keys, with the restore table held on the local machine.
DSH integration
Native runtime
Author-claimed
Safety audit
Unaudited
Last verified
2026-11-05
License
Apache-2.0
01What can it help you accomplish?
Replace personal data with placeholders at the DSH model boundary using a host-side middleware.
Masked phone numbers, emails, identity numbers, bank card numbers and keys, with the restore table held on the local machine.
DeepSeek Harness users
02How to install into DeepSeek Harness
Prerequisites
- Node ^22.19.0 || >=24.0.0
Installation steps
- 01
$ dsh plugin --profile web add dsh-mask
Verify the integration
- dsh --profile web --dump-config | grep -A2 'id: mask'
Rollback
- dsh plugin --profile web remove dsh-mask
03DSH integration and capability boundaries
DSH profile plugin
mask personal data at the model boundary
Masked phone numbers, emails, identity numbers, bank card numbers and keys, with the restore table held on the local machine.
04Who is it for? When not to use it?
Good for
- DeepSeek Harness users
Not for
- Detection is regex-based. Names and addresses require an external NER recognizer that is not bundled. Phone and identity-card patterns cover mainland China formats only.
05Compatibility, maintenance and safety notes
- Detection is regex-based. Names and addresses require an external NER recognizer that is not bundled. Phone and identity-card patterns cover mainland China formats only.
Repository README retrieved.
06Frequently asked questions
What does dsh-mask do in DSH?
Replace personal data with placeholders at the DSH model boundary using a host-side middleware. Masked phone numbers, emails, identity numbers, bank card numbers and keys, with the restore table held on the local machine.
How do I install it in DeepSeek Harness?
dsh plugin --profile web add dsh-mask
What limitations should I check first?
Detection is regex-based. Names and addresses require an external NER recognizer that is not bundled. Phone and identity-card patterns cover mainland China formats only.
07Related DSH workflows
cc-safety-net
by kenryu42
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
dsh-uumit-remote
by uumit-ai
Connect to DSH from another device and selectively share the remote instance with invited users.
deltabox-lite
by delta-box
Lightweight, agent-native sandboxing with diff, commit and abort
tencentmeeting-cli
by tencentcloud
Tencent Meeting command-line tool with OAuth2 authorization for meeting, recording and attendance-report management.
08Data and sources
面向 DeepSeek Harness 的纯主机端 PII 遮罩中间件：电话、邮箱、身份证、银行卡、密钥在模型边界变成占位符，恢复表只留在你自己的机器上。
This page is generated from the project’s public documentation, repository metadata and a structured parse of DSH Plugins; last verified on 2026-11-05. Found an error? Submit a correction.
Best DeepSeek Harness Plugins
Twelve plugins worth installing first — picked from the whole catalog, across every category.