AGPL-3.0 的 AI API 中转站本地安全审计工具——通过 `dsh plugin add` 作为 DeepSeek Harness 插件安装，用 `/relay-audit` 运行，产出可复查的 Markdown 审计报告。
DSH 适配
原生运行时
作者声明
安全审计
未审计
最后核验
2026-08-21
许可证
AGPL-3.0
01它能帮你完成什么？
Audit a third-party AI API relay or LLM proxy before trusting it, from inside DeepSeek Harness
A local 14-step audit with per-step findings and a final `LOW / MEDIUM / HIGH` verdict in a structured Markdown report
Developers and agent operators who rely on third-party AI API relays or OpenAI/Claude-compatible proxies and want repeatable evidence before sending production or coding-agent traffic
Detect relay tampering: prompt injection, model substitution, tool-call rewriting and SSE anomalies
Per-step detector evidence covering prompt safety, relay integrity, model identity, and Web3 wallet safety checks
Security-conscious teams evaluating Claude-compatible or OpenAI-compatible proxies for hidden prompt injection, model swaps, context truncation, or rewritten tool output
Run wallet-safety checks before Web3 agent workflows touch signing or transactions
Profile-gated Web3 probes: ETH transfer guidance, signed-transaction refusal, and private-key leak refusal checks
Web3 agent builders who route wallet-related actions through a relay and want wallet-oriented prompt-injection probes first
02如何接入 DeepSeek Harness？
前置条件
- DeepSeek Harness (dsh) Web or a profile-based TUI client using the official `@deepseek-ai/dsh-commands` registry
- An API key stored in DSH Credentials for the relay/provider being audited
安装步骤
- 01
Pin a release tag and install the plugin: `DSH_PLUGIN_REF=v2.4.0` then `dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`
$ dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
- 02
For dsh-cc-tui and other compatible profile-based clients: `dsh plugin --profile cc-tui add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`
$ dsh plugin --profile cc-tui add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
- 03
Run the audit command in the session: `/relay-audit`, or `/relay-audit --connectivity` for a lower-cost check
验证接入成功
作者未说明
03DSH 适配与能力边界
Installable dsh-api-relay-audit plugin bundle for DeepSeek Harness Web and compatible profile-based TUI clients, installed pinned to a release tag via `dsh plugin add`
14-step relay security audit
Relay base URL plus API key (standalone) or current DSH provider's baseURL / model / credential reference (DSH plugin)→Structured Markdown report with per-step findings and a final `LOW / MEDIUM / HIGH` verdict
Sends audit probes and your API key to the chosen relay URL; a full audit may consume metered tokensRuntime profiles: general / web3 / full
`--profile general|web3|full` flag→General relay checks by default, wallet-safety probes for Web3 flows, or both combined
Credential handling via DSH Credentials
DSH credential reference (or `--credential-ref`)→API key resolved from DSH Credentials and delivered to the local audit process
Credential is delivered through an environment variable — never through command arguments or the session logZero-dependency standalone audit
Python stdlib plus `curl`→Local audit run via the single-file `audit.py` without Python package dependencies
Downloads `audit.py` from raw.githubusercontent.com via curl
04适合谁？何时不该用？
适合
- Developers and agent operators who rely on third-party AI API relays or OpenAI/Claude-compatible proxies and want repeatable evidence before sending production or coding-agent traffic
- Security-conscious teams evaluating Claude-compatible or OpenAI-compatible proxies for hidden prompt injection, model swaps, context truncation, or rewritten tool output
- Web3 agent builders who route wallet-related actions through a relay and want wallet-oriented prompt-injection probes first
不适合
- Independent wrappers without DSH profiles and the DSH command registry are not compatible with this bundle.
- The DSH distribution does not add a new model baseline: the selected route must identify as Claude, although the relay API itself may be Anthropic-compatible or OpenAI-compatible.
05兼容性、维护与安全提示
- Independent wrappers without DSH profiles and the DSH command registry are not compatible with this bundle.
- The DSH distribution does not add a new model baseline: the selected route must identify as Claude, although the relay API itself may be Anthropic-compatible or OpenAI-compatible.
- A report is not a safety certificate: the tool does not certify that a relay is safe, and `inconclusive` results (blocked probes, ambiguous responses) stay visible instead of being treated as clean.
AGPL-3.0 · actively maintained (latest release v2.4.0, 2026-08-15)
06常见问题
如何把 API Relay Audit 安装到 DeepSeek Harness？
固定 release tag 后安装：先设 `DSH_PLUGIN_REF=v2.4.0`，再运行 `dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"`。dsh-cc-tui 及其他基于 profile 的兼容客户端用 `--profile cc-tui` 执行同一命令即可。
安装后如何运行审计？
输入 `/relay-audit` 运行默认的完整审计；想低成本先探路就用 `/relay-audit --connectivity`。也可以用 `/relay-audit --url <URL> --model <claude-model> --credential-ref <DSH_CREDENTIAL_REF>` 指定要审计的中转站。
我的 API Key 会被发送到哪里？
插件复用当前 DSH provider 的 baseURL、model 和 credential 引用。API Key 保存在 DSH Credentials 中，通过环境变量传给本地审计进程，不进入命令参数或会话日志，并且只会发送到你指定的中转站 URL。
它有什么限制？
没有 DSH profile/plugin 机制的独立 wrapper 与本 bundle 不兼容，且被审计线路必须自我识别为 Claude。审计报告是可复查的证据，不是安全认证；`inconclusive` 结果不会被当作 clean，会保留在报告中。
07相关的 DSH 工作流
dsh-context
作者 bowenliang123
The best DeepSeek Harness plugin for context insight and management, with context dashboard / browser and context command, for context statistics, composition, breakdown, evolution details, understanding how the context is made of, and how it evolves. 一站式 DeepSeek Harness 上下文可视化插件，Context 面板及浏览器与 Context 命令，透视上下文组成、演进、压缩、剪枝等事件与动作。
awesome-deepseek-harness-plugins
作者 zhiyuan-fan
DeepSeek Harness 插件精选清单，收录插件、扩展、工具、技能、客户端与集成资源，中英双语。
awesome-ai-pedia
作者 awesome-ai-pedia
AI skills大全 mcp ai知识库 Agent 全维度 AI 资源百科，DSH插件 收录大模型、智能 Agent、RAG 检索增强、多模态、MLOps、AI 应用工具、AI面试集、Vibe coding 大全、零基础学习路线，持续更新前沿 AI 开源项目，开发者一站式 AI 导航库
awesome-deepseek-harness
作者 libukai
DeepSeek Harness 终极指南：快速入门、资源推荐、精选插件与实用工具 ｜The Ultimate Guide to DeepSeek Harness: QuickStart, Resources, Plugins&Toolkit
08数据与来源
The repository is also an installable `dsh-api-relay-audit` bundle for DeepSeek Harness Web and community TUI surfaces t…
DSH_PLUGIN_REF=v2.4.0 dsh plugin --profile web add "github:toby-bridges/api-relay-audit#${DSH_PLUGIN_REF}"
页面基于项目公开文档、仓库元数据和 DSH Plugins 的结构化解析生成；最后核验于 2026-08-21。发现错误？提交更正。
最佳 DeepSeek Harness 插件
从全目录挑出的 12 个值得优先安装的插件，覆盖各个分类。