Plugin directory / Security / @PHM-Audit/dsh-action-guard
@PHM-Audit/dsh-action-guard
Verified · install-tested on dsh phm-audit
What it does
Deterministic pre-execution tool-call guard plugin for DeepSeek Harness (dsh) - monotonic guard seam, operator-declared policy, decision ledger. Gate: 12/12 green, 2000 benign FP=0, injected 7/7 caught.
Works — verified, early-stage project
Deterministic pre-execution tool-call guard plugin for DeepSeek Harness (dsh) - monotonic guard seam, operator-declared policy, decision ledger. Gate: 12/12 green, 2000 benign FP=0, injected 7/7 caught. It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
No README cached for this plugin yet. Check GitHub, or wait for the next daily sync.
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install @PHM-Audit/dsh-action-guard for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:phm-audit/dsh-action-guardHeadless (CLI) profile:
dsh plugin --profile headless add github:phm-audit/dsh-action-guardTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-action-guard/)<a href="https://dshbase.com/plugins/dsh-action-guard/"><img src="https://dshbase.com/badges/dsh-action-guard.svg" alt="dshbase install-tested"></a>