dsh-risk-guard
Zero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.
PromptHub provides the directory and install command only. Plugin code comes from the author's GitHub or npm source; review it locally before installing.
dsh plugin --profile web add dsh-risk-guardThese labels describe capabilities publicly declared by the plugin; actual behavior depends on the author's source and host configuration.
A DSH Plugin runs with your local permissions and may access files, shells, networks, or credentials. Listing and static metadata are not a security guarantee from PromptHub; review the source first.