AGPL-3.0 的 AI API 中繼站本機安全稽核工具——透過 `dsh plugin add` 作為 DeepSeek Harness 外掛安裝，用 `/relay-audit` 執行，產出可複查的 Markdown 稽核報告。
DSH 整合
原生執行環境
作者聲明
安全稽核
未稽核
最後核實
2026-08-21
授權條款
AGPL-3.0
01它能幫你完成什麼？
Audit a third-party AI API relay or LLM proxy before trusting it, from inside DeepSeek Harness
A local 14-step audit with per-step findings and a final `LOW / MEDIUM / HIGH` verdict in a structured Markdown report
Developers and agent operators who rely on third-party AI API relays or OpenAI/Claude-compatible proxies and want repeatable evidence before sending production or coding-agent traffic
Detect relay tampering: prompt injection, model substitution, tool-call rewriting and SSE anomalies
Per-step detector evidence covering prompt safety, relay integrity, model identity, and Web3 wallet safety checks
Security-conscious teams evaluating Claude-compatible or OpenAI-compatible proxies for hidden prompt injection, model swaps, context truncation, or rewritten tool output
Run wallet-safety checks before Web3 agent workflows touch signing or transactions
Profile-gated Web3 probes: ETH transfer guidance, signed-transaction refusal, and private-key leak refusal checks
Web3 agent builders who route wallet-related actions through a relay and want wallet-oriented prompt-injection probes first
02如何將外掛接入 DeepSeek Harness？
先決條件
- DeepSeek Harness (dsh) Web or a profile-based TUI client using the official `@deepseek-ai/dsh-commands` registry
- An API key stored in DSH Credentials for the relay/provider being audited
安裝步驟
- 01
Pin a release tag and install the plugin: `DSH_PLUGIN_REF=v2.4.0` then `dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`
$ dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
- 02
For dsh-cc-tui and other compatible profile-based clients: `dsh plugin --profile cc-tui add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`
$ dsh plugin --profile cc-tui add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
- 03
Run the audit command in the session: `/relay-audit`, or `/relay-audit --connectivity` for a lower-cost check
驗證整合成功
作者未說明
03DSH 整合程度與能力邊界
Installable dsh-api-relay-audit plugin bundle for DeepSeek Harness Web and compatible profile-based TUI clients, installed pinned to a release tag via `dsh plugin add`
14-step relay security audit
Relay base URL plus API key (standalone) or current DSH provider's baseURL / model / credential reference (DSH plugin)→Structured Markdown report with per-step findings and a final `LOW / MEDIUM / HIGH` verdict
Sends audit probes and your API key to the chosen relay URL; a full audit may consume metered tokensRuntime profiles: general / web3 / full
`--profile general|web3|full` flag→General relay checks by default, wallet-safety probes for Web3 flows, or both combined
Credential handling via DSH Credentials
DSH credential reference (or `--credential-ref`)→API key resolved from DSH Credentials and delivered to the local audit process
Credential is delivered through an environment variable — never through command arguments or the session logZero-dependency standalone audit
Python stdlib plus `curl`→Local audit run via the single-file `audit.py` without Python package dependencies
Downloads `audit.py` from raw.githubusercontent.com via curl
04適合誰？何時不該用？
適合
- Developers and agent operators who rely on third-party AI API relays or OpenAI/Claude-compatible proxies and want repeatable evidence before sending production or coding-agent traffic
- Security-conscious teams evaluating Claude-compatible or OpenAI-compatible proxies for hidden prompt injection, model swaps, context truncation, or rewritten tool output
- Web3 agent builders who route wallet-related actions through a relay and want wallet-oriented prompt-injection probes first
不適合
- Independent wrappers without DSH profiles and the DSH command registry are not compatible with this bundle.
- The DSH distribution does not add a new model baseline: the selected route must identify as Claude, although the relay API itself may be Anthropic-compatible or OpenAI-compatible.
05相容性、維護與安全提醒
- Independent wrappers without DSH profiles and the DSH command registry are not compatible with this bundle.
- The DSH distribution does not add a new model baseline: the selected route must identify as Claude, although the relay API itself may be Anthropic-compatible or OpenAI-compatible.
- A report is not a safety certificate: the tool does not certify that a relay is safe, and `inconclusive` results (blocked probes, ambiguous responses) stay visible instead of being treated as clean.
AGPL-3.0 · actively maintained (latest release v2.4.0, 2026-08-15)
06常見問題
如何把 API Relay Audit 安裝到 DeepSeek Harness？
固定 release tag 後安裝：先設 `DSH_PLUGIN_REF=v2.4.0`，再執行 `dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`。dsh-cc-tui 及其他基於 profile 的相容用戶端用 `--profile cc-tui` 執行同一命令即可。
安裝後如何執行稽核？
輸入 `/relay-audit` 執行預設的完整稽核；想先用低成本方式探路就用 `/relay-audit --connectivity`。也可以用 `/relay-audit --url <URL> --model <claude-model> --credential-ref <DSH_CREDENTIAL_REF>` 指定要稽核的中繼站。
我的 API Key 會被傳送到哪裡？
外掛沿用目前 DSH provider 的 baseURL、model 與 credential 參照。API Key 保存在 DSH Credentials 中，透過環境變數傳給本機稽核程序，不進入命令參數或 session 紀錄，而且只會傳送到你指定的中繼站 URL。
它有什麼限制？
沒有 DSH profile/plugin 機制的獨立 wrapper 與本 bundle 不相容，且被稽核線路必須自我識別為 Claude。稽核報告是可複查的證據，不是安全認證；`inconclusive` 結果不會被視為 clean，會保留在報告中。
07相關的 DSH 工作流程
dsh-context
作者 bowenliang123
The best DeepSeek Harness plugin for context insight and management, with context dashboard / browser and context command, for context statistics, composition, breakdown, evolution details, understanding how the context is made of, and how it evolves. 一站式 DeepSeek Harness 上下文視覺化外掛，Context 面板及瀏覽器與 Context 命令，透視上下文組成、演進、壓縮、剪枝等事件與動作。
awesome-deepseek-harness-plugins
作者 zhiyuan-fan
DeepSeek Harness 外掛精選清單，收錄外掛、擴充套件、工具、技能、客戶端與整合資源，中英雙語。
awesome-ai-pedia
作者 awesome-ai-pedia
AI skills大全 mcp ai知識庫 Agent 全維度 AI 資源百科，DSH外掛 收錄大模型、智慧 Agent、RAG 檢索增強、多模態、MLOps、AI 應用工具、AI面試集、Vibe coding 大全、零基礎學習路線，持續更新前沿 AI 開源專案，開發者一站式 AI 導航庫
awesome-deepseek-harness
作者 libukai
DeepSeek Harness 終極指南：快速入門、資源推薦、精選外掛與實用工具 ｜The Ultimate Guide to DeepSeek Harness: QuickStart, Resources, Plugins&Toolkit
08資料與來源
The repository is also an installable `dsh-api-relay-audit` bundle for DeepSeek Harness Web and community TUI surfaces t…
DSH_PLUGIN_REF=v2.4.0 dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
此頁面根據專案公開文件、儲存庫中繼資料與 DSH Plugins 的結構化解析所產生；最後核實於 2026-08-21。發現錯誤？提交更正。
最佳 DeepSeek Harness 外掛
從全目錄挑出的 12 個值得優先安裝的外掛，涵蓋各個分類。