dsh-taintguard

Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin, gates privileged calls that follow untrusted content, and refuses credentials heading off the machine.

Star

7-day growth

Contributors

Language

TypeScript

Updated

2026-08-16

Install

Derived from package metadata

dsh plugin --profile web add https://github.com/sashankh/dsh-taintguard/releases/download/v0.1.0/dsh-taintguard-0.1.0.tgz

This command uses the unique uploaded GitHub Release .tgz whose asset name, release tag, package name, and package version agree. dshfind does not download, unpack, or execute the asset while probing; review the publisher and release before installing.

The name after --profile is a profile name you choose yourself — swap in whichever one you use.

Share card

Drop it into your README — it links back to this page.

Badge (inline)

[![dshfind](https://dshfind.com/api/badge/sashankh/dsh-taintguard)](https://dshfind.com/en/plugins/sashankh/dsh-taintguard?ref=badge)

Card (440×200)

[![dshfind](https://dshfind.com/api/card/sashankh/dsh-taintguard)](https://dshfind.com/en/plugins/sashankh/dsh-taintguard?ref=badge)

#agent-security #ai-security #guardrails #prompt-injection