dsh-defend：用 DeepSeek Harness 防護提示注入與機密外洩｜安裝指南

用於遞迴刪除檢查、提示注入、越獄與機密外洩偵測的 DSH Host 外掛。

DSH 整合

原生執行環境

作者聲明

安全稽核

未稽核

最後核實

2026-09-29

授權條款

Apache-2.0

01它能幫你完成什麼？

Guard DeepSeek Harness messages, tool arguments, results, and recursive delete commands against documented detection families.
Allow, ask, block, deny, or corrective-feedback decisions through official DSH seams, with a `/defend` summary and `defend_report` tool.
DeepSeek Harness operators who want deterministic safeguards around agent interactions and destructive shell commands.
85473a6b67c8…
Review detection activity without exposing matched text.
In-memory report totals and recent-match metadata without matched content.
Users who need a DSH command or tool surface for recent defense activity.
85473a6b67c8…

先決條件

安裝步驟

01
Run `dsh plugin --profile web add "github:PerryLink/dsh-defend#main"` or `dsh plugin --profile web add dsh-defend`.
$ dsh plugin --profile web add "github:PerryLink/dsh-defend#main"
02
Restart and run `dsh --profile web --dump-config | grep -A3 'id: dsh-defend'`.
$ dsh --profile web --dump-config | grep -A3 'id: dsh-defend'

驗證整合成功

Use `dsh --profile web --dump-config | grep -A3 'id: dsh-defend'` to verify the profile row.

復原

DSH 整合原生執行環境

Pure-host DeepSeek Harness plugin with destructive-delete and detection layers on official interception points.

Destructive-delete guard
Recursive delete shell commands at `tools/pre-execute`.→Refusal unless documented path conditions are met; dry-run markers pass.
Can deny or ask for guarded destructive shell commands.
85473a6b67c8…
Detection layer
Inbound messages, tool arguments, and tool results.→Allow, ask, or block decisions at three documented interception points.
Can reject steps, deny tool execution, or provide corrective feedback.
85473a6b67c8…

適合

DeepSeek Harness operators who want deterministic safeguards around agent interactions and destructive shell commands.
Users who need a DSH command or tool surface for recent defense activity.

不適合

The plugin produces decisions on official seams but does not replace the sandbox or approval systems as enforcement authorities.
Novel phrasing, lookalike-Unicode encodings, and multi-step attacks can evade the documented rule library.
The documented opt-in unmarked session audit can make a session unresumable on affected hosts.

The plugin produces decisions on official seams but does not replace the sandbox or approval systems as enforcement authorities.
Novel phrasing, lookalike-Unicode encodings, and multi-step attacks can evade the documented rule library.
The documented opt-in unmarked session audit can make a session unresumable on affected hosts.

2026-08-162026-09-25v0.3.16

Apache-2.0 · README-backed author documentation