https://github.com/tancheng33/dsh-egress-guard
Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.
PromptHub provides the directory and install command only. Plugin code comes from the author's GitHub or npm source; review it locally before installing.
dsh plugin --profile web add github:tancheng33/dsh-egress-guardThese labels describe capabilities publicly declared by the plugin; actual behavior depends on the author's source and host configuration.
A DSH Plugin runs with your local permissions and may access files, shells, networks, or credentials. Listing and static metadata are not a security guarantee from PromptHub; review the source first.