npm / sandboxOfficial
DSH Credentials Local
by DeepSeek
File-backed credentials provider ($DSH_HOME/.env under the live process environment) for the DeepSeek Harness
DSH Credential Guard
Blocks DSH file tools from reading common credential stores, SSH keys and secret files.
v0.1.0Version
npmnpm package
MITLicense
JavaScriptLanguage
Aug 14, 2026Updated
01
Installation
dsh plugin --profile web add dsh-plugin-credential-guard02
About this plugin
DSH Credential Guard checks paths before read, image, grep and glob tools run. Requests targeting common credential files such as .env, .npmrc, SSH keys and DSH credentials are denied with an explicit reason.
03
What it provides
- 01Credential-path protection for file tools
- 02Configurable sensitive-path patterns
- 03Explicit denial reasons
Important notes
- It guards supported tool calls only; shell commands still require host-level controls.
04
README preview
README.md
DSH Credential Guard
Blocks DSH file tools from reading common credential stores, SSH keys and secret files.
Read the full README at the source