secret-guard

dsh security plugin: blocks agents from reading/writing sensitive files (.env, credentials), masks leaked secrets in tool results, audit journal, safe sg_* inspection tools

Star

7-day growth

Contributors

Language

TypeScript

Updated

2026-08-17

Install

Derived from package metadata

dsh plugin --profile web add github:JohnXu22786/secret-guard

The author hasn't published to npm, so this command installs from git source. pnpm ≥ 10 refuses to run a git dependency's prepare script until you grant it, so your first install needs an allowBuilds entry in that profile's pnpm-workspace.yaml — which means letting this package's code run on your machine. Pin a #commit while you're at it.

The name after --profile is a profile name you choose yourself — swap in whichever one you use.

Share card

Drop it into your README — it links back to this page.

Badge (inline)

[![dshfind](https://dshfind.com/api/badge/JohnXu22786/secret-guard)](https://dshfind.com/en/plugins/JohnXu22786/secret-guard?ref=badge)

Card (440×200)

[![dshfind](https://dshfind.com/api/card/JohnXu22786/secret-guard)](https://dshfind.com/en/plugins/JohnXu22786/secret-guard?ref=badge)