安全与治理插件

dsh-token-vault

YYfather/dsh-token-vault

Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from 设置 → 凭证库 / 市场 → 已安装.

查看仓库

Stars: 0
Forks: 0
Issues: 0
更新: 1 个月前

PROJECT TOPICS

项目标签

credentials deepseek-harness dsh-plugin security

INSTALL REFERENCE

安装参考

未验证

dsh plugin --profile web add github:YYfather/dsh-token-vault

在 DSH 中安装

该命令指向仓库当前默认分支；尚无绑定当前 commit 的完整验证结果。

PROJECT README

README

@yyfather/dsh-token-vault

Secure credential vault for DeepSeek Harness · 凭证库插件

Store your GitHub / npm / API tokens in DSH's own credential store (ctx.credentials → ~/.credentials.yaml). Secrets never leave the host — no plaintext file, no model context, no browser round-trip. The agent uses tokens through vault_run which injects them into a child-process environment only; vault_show (the single disclosure path) requires an explicit confirm: true.

设置 → 凭证库录入一次，之后所有 GitHub/npm 操作由 Host 侧代持。

Tools (agent-facing)

Tool	Purpose
`vault_list`	List stored token names only (never values)
`vault_has`	Check one token's presence
`vault_set`	Store/update a token (value never echoed)
`vault_remove`	Delete a token
`vault_import`	Import from `gh auth token` (source: gh) or `~/.npmrc` (source: npm)
`vault_run`	Run `gh/npm/npx/node/git` with the token injected via env (github/gh → `GH_TOKEN`, npm/node → `NPM_TOKEN`, `env_name` overrides); output contains no secrets
`vault_show`	Reveal one token (requires `confirm: true`, only on explicit user request)

Install

dsh plugin --profile desktop add @yyfather/dsh-token-vault

The package declares dsh.bundle.patch so it mounts automatically; restart DSH Desktop to activate. Then manage it from 设置 → 市场 → 已安装 (enable / update / uninstall), or paste tokens in 设置 → 凭证库.

Security design

Storage: DSH credential record space (dsh-token-vault/<name>, atomic modifyRecord) — no new plaintext files.
Usage: vault_run places the token in the child environment only; stdout/stderr/logs never contain it.
Disclosure: vault_show is the only leak path and demands confirm: true; usage rules advise rotating after use.
Prompt section token-vault-usage injected automatically: the agent must never print or persist tokens.

Structure

lib/index.js — host: ctx.tools.register for 7 vault tools; webServer routes /vault/status|set|remove|import; systemPrompt.section usage rules
lib/client.js — browser __ModuleLoader__ bundle: Settings → 凭证库 (add / import / delete, values never displayed)
cordis.patch.yml — bundle mount patch
package.json — market-format compliant (strict inject, full exports incl. ./client and ./cordis.patch.yml)

License

MIT © YYfather

CLASSIFICATION EVIDENCE

分类依据

项目类型插件

功能分类安全与治理

规则置信度高

系统优先读取 GitHub Topics，再与站内分类词典和词根规则比对。当前命中： credentials、security。