dsh-defend：用 DeepSeek Harness 防护提示注入与密钥泄漏｜安装指南

用于递归删除检查、提示注入、越狱和密钥泄漏检测的 DSH Host 插件。

DSH 适配

原生运行时

作者声明

安全审计

未审计

最后核验

2026-09-29

许可证

Apache-2.0

01它能帮你完成什么？

Guard DeepSeek Harness messages, tool arguments, results, and recursive delete commands against documented detection families.
Allow, ask, block, deny, or corrective-feedback decisions through official DSH seams, with a `/defend` summary and `defend_report` tool.
DeepSeek Harness operators who want deterministic safeguards around agent interactions and destructive shell commands.
85473a6b67c8…
Review detection activity without exposing matched text.
In-memory report totals and recent-match metadata without matched content.
Users who need a DSH command or tool surface for recent defense activity.
85473a6b67c8…

前置条件

安装步骤

01
Run `dsh plugin --profile web add "github:PerryLink/dsh-defend#main"` or `dsh plugin --profile web add dsh-defend`.
$ dsh plugin --profile web add "github:PerryLink/dsh-defend#main"
02
Restart and run `dsh --profile web --dump-config | grep -A3 'id: dsh-defend'`.
$ dsh --profile web --dump-config | grep -A3 'id: dsh-defend'

验证接入成功

Use `dsh --profile web --dump-config | grep -A3 'id: dsh-defend'` to verify the profile row.

回滚

DSH 适配原生运行时

Pure-host DeepSeek Harness plugin with destructive-delete and detection layers on official interception points.

Destructive-delete guard
Recursive delete shell commands at `tools/pre-execute`.→Refusal unless documented path conditions are met; dry-run markers pass.
Can deny or ask for guarded destructive shell commands.
85473a6b67c8…
Detection layer
Inbound messages, tool arguments, and tool results.→Allow, ask, or block decisions at three documented interception points.
Can reject steps, deny tool execution, or provide corrective feedback.
85473a6b67c8…

适合

DeepSeek Harness operators who want deterministic safeguards around agent interactions and destructive shell commands.
Users who need a DSH command or tool surface for recent defense activity.

不适合

The plugin produces decisions on official seams but does not replace the sandbox or approval systems as enforcement authorities.
Novel phrasing, lookalike-Unicode encodings, and multi-step attacks can evade the documented rule library.
The documented opt-in unmarked session audit can make a session unresumable on affected hosts.

The plugin produces decisions on official seams but does not replace the sandbox or approval systems as enforcement authorities.
Novel phrasing, lookalike-Unicode encodings, and multi-step attacks can evade the documented rule library.
The documented opt-in unmarked session audit can make a session unresumable on affected hosts.

2026-08-162026-09-25v0.3.16

Apache-2.0 · README-backed author documentation