onlyqzq/dsh-riskproof
RiskProof tracks cross-tool data flows inside DeepSeek Harness and blocks sensitive tool output before it leaves: a persistent security beacon beside the conversation shows redacted execution receipts, and deterministic rules flag web content influencing a command, customer-data transfer, tool-schema change and read-only restrictions without any extra LLM calls.
RiskProof tracks cross-tool data flows inside DeepSeek Harness and blocks sensitive tool output before it leaves, with a persistent security beacon beside the conversation that updates on ordinary tool calls and opens a compact overview when clicked. Its deterministic rules - no extra LLM calls - catch web content influencing a command, customer-data transfer, a tool-schema change and a read-only restriction, and /riskproof demo runs four isolated rehearsals with synthetic inputs that read no private files, run no shell commands and send no email. Ordinary DSH model usage keeps its normal cost, and redacted execution receipts are shown rather than raw secrets.
Install
dsh plugin --profile web add dsh-riskproof@0.5.0Copied verbatim from the README's Quick Start block; the README also documents a prebuilt local tarball form (dsh plugin --profile web add ./artifacts/dsh-riskproof-0.5.0.tgz).
Compatibility
Verified against DSH 0.1.0-rc.7 / 0.1.2-rc.1 on the install+tools pipeline and 0.1.2-rc.1 for Web acceptance; the README states newer DSH versions require separate verification. Deterministic rules need no reviewer model or extra API key, and beacon, overview and reports follow experience.language (en or zh-CN). It declares a DSH bundle, so plugin add composes its riskproof row automatically.
Details
- Repo: onlyqzq/dsh-riskproof
- Category: Infrastructure & Deployment
- Stars: 7
- Version: GitHub repo onlyqzq/dsh-riskproof (7★); npm package dsh-riskproof at 0.5.0 (registry check 2026-10-14; the registry repository field resolves back to this repo). Requires Node.js 22.19+. English README with a Simplified Chinese translation.
Alternatives
1m01m0/deepseek-harness-desktop · AIcivilization/dsh-vps-manager · AlliotTech/deepseek-harness-docker