dsh-correctover

dsh-correctover

Runtime security for DeepSeek Harness (DSH) — CCS 7-dimension verification, command-injection / SSRF / credential-exfiltration blocking, Ed25519 receipts, audit-first.

🇨🇳 国内用户 · 支付宝一键购买

本工具的合规授权与批量能力可通过支付宝 SkillPay 获取：

• 打开货架：https://skillpay.alipay.com/public/correctover
• 或把这行发给你的 AI 助手：请通过 SkillPay 购买并安装 Skill「CCS收据批量审计」

China users: purchase via Alipay SkillPay — see above.

Install

dsh plugin add dsh-correctover

Or with npm directly:

npm install dsh-correctover

What it does

Once installed in a DSH profile, the plugin auto-mounts and registers:

• ccs_status model tool — report current policy and live stats
• ccs_audit model tool — run a security audit on installed plugins
• tools/pre-execute hook — block dangerous tool calls
• tools/post-execute hook — scan outputs for leaked secrets / prompt injection
• subprocess spawn wrapper — block command injection and credential exposure
• web fetch wrapper — block SSRF to private / link-local networks

It is audit-first: by default it observes and logs, never blocks. Switch to enforce mode when you have tuned rules against real traffic.

CCS standard

CCS (Correctover Conformance Shape) is a 7-dimension runtime verification standard for AI agents: Structure, Schema, Latency, Cost, Identity, Integrity, Security. Published as IETF Internet-Draft draft-correctover-ccs.

Links

• Main package: correctover
• Source: codeberg.org/correctover-labs/correctover
• Scanner CLI: npx correctover-scan