security

skill-scanner

cisco-ai-defense

Security Scanner for Agent Skills

Claude-Skills-Governance-Risk-and-Compliance

Sushegaad

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 93% (with skills) vs 74% (without skills). Updated Monthly.

claude-code-owasp

agamm

Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.

dsh-bridge

wenbin-wb

🚀 DeepSeek Harness multi-channel remote access and security guardian plugin | LAN QR code direct connection, Cloudflare / self-hosted public tunnel, WeChat / QQ / Feishu / Telegram bot full-lifecycle conversations | built-in all-protocol access security authentication, backend anti-tampering and disaster recovery fail-safe system

skill

ptn1411

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ thống mà bạn sở hữu hoặc được phép đánh giá.

dsh-reverse-skill

dhicoc

Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

dsh-passwords

slywalker2006

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

dsh-remote

xgone

Remote access for DeepSeek Harness: account/password auth + MFA (TOTP) login gate, signed session cookies, role-based access, in-browser directory picker, and a Settings page for account management.

database-sentinel

Farenhytee

Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.

Aurakit

smorky850612

One command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings. Works on Codex, Cursor, Manus, Windsurf.

dsh-secure-audit

PensiveFei

Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.

dsh-full-remote

JUANWANG-BUAA

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/directory support.

helm-d

ADWMC

DeepSeek Harness armor-piercing all-in-one security analysis plugin: Android · Web · Native · Protocol · Malware · AI-Security all-domain aggregation (9 bundle + 1 preset)

dsh-defend

PerryLink

Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanitized audit events

dsh-skill-pack-security

PerryLink

Security-audit skill pack + plugin_vet supply-chain gate for DeepSeek Harness (dsh): 8 bilingual agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) plus the plugin_vet automated pre-install scanner. Apache-2.0.

dsh-one-gateway

TiantianFlow

Private DSH One Gateway — loopback, identity-first ingress for DeepSeek Harness

dsh-auth-gateway

xbzbing

Adds remote access to DeepSeek Harness, hardened with password and OTP. Adds secure remote access to DeepSeek Harness with password auth and TOTP two-factor authentication (2FA).

dsh-mask

PerryLink

PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer, keep the restore table only in memory and a controlled storage domain, never log plaintext, and expose /mask and the mask_test tool

dsh-auth-gate

TecFancy

Login gate for the DeepSeek Harness (dsh) web surface: password or shared-token authentication, session cookies, rate limiting, and a user-management CLI. | DeepSeek Harness (dsh) web login gate plugin: account password or shared token auth, session cookie, login rate limiting, plus user management CLI.

Caushell

fatmo666

Compiler-style pre-execution safety analysis for Harness shell actions.

dsh-sentinel-scanner

Eligahyu

🛡️ X-ray your DeepSeek Harness plugins — plugin security checkup and health check. Read-only static scan: code execution/credentials/exfiltration/obfuscation/install scripts/bundle manifest, 0-100 risk score. DSH tool plugin + standalone CLI.

dsh-plugins

henlii

DSH plugin collection: password auth + trust for dsh web LAN/Tailscale access (dsh-web-auth) and more. Install per plugin via 'dsh plugin --profile web add' or all at once via the root cordis.patch.yml.

dsh-plugin-audit

jkrandom-sudo

Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH plugin security audit: static permission profile (with file/line evidence) + runtime sentinel that asks for your approval before touching credentials or sending data to unknown hosts

npm-safe-forDSH

nisconder

Local-first npm package supply chain security scanning engine, deepseek harness plugin version

dsh-telemetry-redactor

030611

Fail-closed export-copy redaction for DeepSeek Harness session telemetry

dsh-approval-ai

ang-XWBWZ

AI approval answerer for DeepSeek Harness (DSH) using the unified LLM route with fail-closed policy checks.

securstack-dsh-plugin

securstack

SecurStack adapter for DeepSeek Harness: run repository security scans, policy gates, doctor diagnostics, and JSON CLI results from safe AI-agent tools.

dsh-autogate

wangxing-git

DeepSeek Harness auto-approval plugin: deterministic rules + LLM safety review layered on top of the workspace-write sandbox; auto mode never loosens the sandbox, fail-closed. Safe auto-approval for DeepSeek Harness — deterministic rules + LLM review on top of the workspace-write sandbox. Auto mode without ever granting full-access.

dsh-memory-setup

863683348

Solve the AI goldfish brain: auditable personal memory for DeepSeek Harness - preferences, project conventions, workflows, error lessons. A local auditable memory layer that fixes the AI goldfish brain.

dsh-permissions

940842546

This repository does not provide a project description yet.

dsh-companion-enterprise

beijingwahw

DeepSeek Companion Enterprise — enterprise companion plugin for DeepSeek Harness: security audit and DLP, team collaboration and knowledge management, task orchestration with resume-from-checkpoint, multi-model arena, execution trace analysis, Prompt engineering workbench.

dsh-mcpguard

ChenLaoshiYF

?? for DeepSeek Harness: first security plugin for dsh. Scans skills/MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell, credential leaks. DSH ????????

dsh-path-guard

CloudyMountain

DSH (DeepSeek Harness) plugin: deny agent tool access to your configured paths (reads + writes, file tools + shell) — the path-level deny dsh never had

dsh-code-security

ihuajiu

OpenAI Codex Security for DSH, zero-setup — 13 audit skills + 5 scan tools in a session preset, plus an auto-audit gate for new plugins, running on your local model with no API keys.

dsh-security-manager

Kolos-alter

Description：Security plugin manager for DeepSeek Harness: auto-discovery, npm/GitHub source location, snapshot-backed update & rollback.

dsh-fleet-audit

LeslieWylie

DSH agent-fleet hygiene audit plugin: credential-file permissions, embedded git-remote credentials (masked), provider token literals. Read-only, zero-dependency, deterministic.

skill-bartender

MJorgin

Task-to-skill pairing for DeepSeek Harness — pours the minimal set (usually one; zero when plain tools suffice), prefers workflow skills over hand-composed atomics. Laziness ladder, quarantine → SkillSpector scan → explicit human approval, never auto-installs. Task-to-skill pairing · laziness ladder · secure cellar · never auto-install

skill-security-guard

rrrrrredy

Static security scanner for agent skills: A-F risk rating, safe zip scanning, CI-tested rules

capmark

taltara

Capability manifests for AI agent plugins. Declare what a plugin may do, in Markdown, and check it.

dsh-credential-handoff

xiaohj233

Conversation-local credential handoff for DSH that writes through the credential service without exposing the secret.

dsh-poison-guard

zoahdev

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST (JS-X-Ray) + deobfuscation + regex. Catches obfuscated exfiltration, eval, hidden shell commands.

dsh-gov

863683348

Agent governance suite for DeepSeek Harness: policy-based tool gating (allow/deny/ask), structured JSONL audit trail, per-agent token quotas — enterprise companion

dsh-insight

863683348

Plugin insight center — one answer to which plugins are worth installing: plugin_guide (needs), recipe (environments), plugin_rank (health scores), plugin_audit (security scan), plugin_verdict (install decision)

dsh-plugin-gate

863683348

Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources before dsh plugin add; 12 destructive-command patterns + workspace-boundary checks block accidental deletion. | Installation safety gate and data-protection guard: 60 static signature rules, 12 dangerous command patterns block accidental deletion.

dsh-plugin-verify

863683348

Verification toolkit for DeepSeek Harness agents: evidence-based claim checking with line citations, config validation (JSON/YAML), HTTP URL, npm and GitHub submission-readiness probes.

dsh-dep-vuln-scan

988hj7tczd-oss

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle) against the free OSV API and report confirmed dependency vulnerabilities with fix versions

reverse-workbench-skill

Asaiuta

This repository does not yet provide a project description.

dsh-plugin-sentinel

BotonJ

DSH plugin security auditor — static pre-install audit for DeepSeek Harness plugin bundles. Zero-dep, in-memory tar parsing, lexical strip scanner.

dsh-security-doctor

ChenChen913

One-click local security checkup button for the DeepSeek Harness (DSH) Web UI: read-only checks (!!js config, third-party plugins, credential file perms, instruction files), severity-graded report, plus AI-usable security-review & secure-development guides. / DSH security doctor: one-click local security checkup plugin

dsh-workspace-only-plugin

CsBpRd

DeepSeek Harness (dsh) plugin: Workspace Only switch — out-of-bounds file access requests user confirmation in every mode (approval prompt in every mode)

dsh-maestro-guard

ddtcorex

Host-only safety gate for DeepSeek Harness: approval store, secret redaction, permission policy, waterfall pre-execute integration.

dsh-depguard

DeLightor

No project description provided yet.

dsh-redact

dingge001

DSH / DeepSeek Harness plugin: runtime secret & PII redaction with mask, reversible vault and execution-time substitution

dsh-ccs-security

DSHCorrectover

CCS security plugin for DeepSeek Harness — 16-rule bidirectional scanning, Ed25519 receipts, P50 <3μs. Blocks rmdir escape, command injection, credential exfiltration.

dsh-tailscale-console

evanfang0054

Tailscale remote-access control panel for DeepSeek Harness: health checks, HTTPS serve toggle, proxy bypass, relay ops, ACL helper.

dsh-guardwall

iiiweiii

Runtime security guardrails for DeepSeek Harness: source-backed pre-install vetting, dangerous tool-call blocking, output-leak auditing, and tamper-evident HMAC-chained logs.

dsh-hawkeye-scan

liuqingman

Hawkeye Scan Workbench - AI-driven source-code security scanning for DeepSeek Harness (DSH): 5 model tools + /hawkeye web UI + JSON/Markdown/HTML vuln reports. Zero-dependency Cordis plugin.

dsh-vulnsec-bridge

MariNanari

v0.2.1: VulnClaw + DeepSec bridge for DeepSeek Harness (dsh) — security toolbox

dsh-rgate

raomaiping-hash

Remote access login gate for DeepSeek Harness Web: password wall, /api gating, session cookies, Remote Access settings.

dsh-credentials-keychain

ShawnSiao

Planned OS-backed credential provider for DeepSeek Harness

dsh-credentials-vault

tancheng33

HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host

dsh-egress-guard

tancheng33

Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log

dsh-plugin-guard

taxueseek

DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.

dsh-auth-gate

zephaniahwang94-cmyk

Authentication and security hardening plugin for DeepSeek Harness

dsh-dep-audit

zoahdev

Dependency supply-chain hygiene audit for DeepSeek Harness (dsh): peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry deps, installed-vs-declared drift. Complements dsh-poison-guard and dsh-plugin-doctor.

dsh-plugin-quality-hub

863683348

Independent ratings and security signals for the DSH plugin ecosystem - which plugins are actually worth installing?

dsh-plugin-scorecard

863683348

DSH plugin health scorecard: quality & security audit, rankings and search across the dsh-plugin ecosystem.

dsh-plugins

artemiroshnichenko

Production-ready plugins for DeepSeek Harness (DSH): remote SSH agent execution, integrated terminal & file tree, security guardrails, skills & MCP server console.

dsh-runtime-nutrition-label

biubiukam

Runtime nutrition labels for DeepSeek Harness plugins and tools, with bounded evidence for tool, filesystem, network, and side-effect activity.

dsh-zcode-scribe

BOWLUNA

A read-only memory room for DeepSeek Harness: a scribe_recall tool over plain markdown, path-safety rules that refuse traversal, Unicode smuggling and NTFS alternate data streams, and an index that never truncates silently.

dsh-principal-binding-proof

dongsheng123132

Offline content-addressed proof of pseudonymous authority binding across DSH execution surfaces

dsh-windows-settlement-proof

dongsheng123132

Offline content-addressed proof that approved Windows control-plane changes settled across required surfaces

dsh-podman

Exagone313

Podman-backed execution for DeepSeek Harness (dsh)

dsh-hidden-paths

Gabrip780

Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.

dsh-shadow-auditor

GooDAnDReaDY

DSH plugin for background security audits, secret leakage detection, and command safety

dsh-human-intent

guhanfei-ai

Cryptographically bind human authorization to the exact action an AI agent is about to execute.

dsh-remote

hadan8977

Remote access suite for DeepSeek Harness: QR pairing, HMAC sessions, cloudflared tunnel and PWA. Zero installs on any device.

dsh-managed-approval

jalllychun

Codex-inspired managed approval for DeepSeek Harness

dsh-windows-workspace-guard

julescules

DeepSeek Harness safety guard for PowerShell and structured file edits on Windows.

dsh-lan-gate

maxesisnclaw

Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness LAN password gate

dsh-plugin-firewall

MkaliezZ

Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.

dsh-malware-audit

rand0wn

DeepSeek Harness (dsh) plugin: real AST-based scan of installed plugins for malicious-intent patterns, with an optional periodic schedule and auto-quarantine on critical findings. Advisory-by-default, not an antivirus signature database.

dsh-plugin-safe-install

rouyiemei

DSH (DeepSeek Harness) plugin bundling the safe plugin-installation skill: audit, install one-by-one, five-level verification, clean uninstall. Born from a beginner's painful journey.

dsh-tool-runseal

runseal-labs

RunSeal sandbox plugin: OS-native policy-enforced boundary for dsh (Windows/macOS/Linux) | RunSeal sandbox provider for DeepSeek Harness — OS-native policy-enforced command execution

dsh-sentinel

scodypanda

This repository does not yet provide a project description.

dsh-risk-guard

shuxue6662-a11y

Zero-interruption audit + fuse blocking plugin for DeepSeek Harness / zero-disturbance Agent audit and fuse blocking plugin

dsh-code-runtime-container

tancheng33

Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings

dsh-dros-vajraclaw

Top-Celestial-Company-Ltd

⚡ DROS™ VajraClaw for DSH: Deterministic Runtime Execution Governance & Security Circuit-Breaker Plugin

dsh-route-fence-linter

Vladimir-Kryshchenko

Static linter for DeepSeek Harness plugin HTTP routes: every webServer route bypasses the /api gateway's trust check and must pin the Host to loopback itself. PASS/WARN/FAIL per route, as a CLI and a dsh tool.

dsh-release-guardian

XiaoSong1223

Deterministic release-risk checks and quality gates for DeepSeek Harness

dsh-llm-injection-filter

XiaoYuOvO

DSH LLM response-stream injection filter: hard-block rare Unicode scripts (Track A) + score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall. Install: dsh plugin --profile web add github:XiaoYuOvO/dsh-llm-injection-filter

dsh-plugin-gate

youkongling

Standalone pre-install security gate for DeepSeek Harness plugins, with npm, Git, and local source review.

dsh-token-vault

YYfather

Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from Settings → Credential Vault / Marketplace → Installed.

dsh-poison-guard-action

zoahdev

GitHub Action: supply-chain poison scan for DeepSeek Harness plugins (AST + deobfuscation)