dsh-riskproof
Securityonlyqzq/dsh-riskproof
A risk-aware approval layer for DeepSeek Harness that tracks the provenance of tool inputs, detects risky cross-tool data flows, and can block sensitive side effects before execution. It shows a persistent security beacon beside the conversation with pending execution receipts, a call-distribution ring, recent checks, and recent risk chains.
- agent-security
- dsh-plugin
- provenance
- tool-security
GitHub Stars
7GitHubViews
0DSH Plugin HubForks
0GitHubOpen issues
0GitHub IssuesManifest version
0.4.1dsh-riskproofLatest push
Oct 8, 2026GitHubLicense
Apache-2.0TypeScriptPlugin type
Host + ClientRuns in both Host and Web ClientPRE-INSTALL EVIDENCE
Verification and compatibility
This section shows evidence collected by the catalog. Undeclared information is labeled as unknown.
01Exact source: npm · dsh-riskproof@0.4.102Validated: Sep 22, 202603Verified Harness: 0.1.0-rc.7
- Current-version compatibility
- Verified on the catalog Harness version
- Declared Harness range
- Not declared
- Declared platforms
- Not declared
- Profiles
- web
- Build approval
- Unknown
- Permissions
- Not declared
- External services
- Not declared
- Telemetry
- Unknown
No known risk flags found
This is not a security endorsement. Review source, permissions, and configuration before installing.
View evidence and scope
Verification covers only the named source, version, and Harness environment. It does not guarantee future compatibility.
dsh-riskproof@0.4.1- The manifest and static structure passed checks; a runtime load check has not completed.
Project README
