dsh-plugins-guard
Advanced tools
Security/approval/governance for dsh: rule-based tool denial via tools.guard(), full tool-call audit trail, and governance reports (Codex sandbox-x-approval + Claude PreToolUse hook pattern).
生态空白：整个 security & governance 分类都是 0-3★ 萌芽。本插件把两个头部 agent 的安全模式移植到 dsh：
tools.guard() 官方 seam，单调拒绝、无规则即无操作）| 工具 | 功能 |
|---|---|
guard_rules | 规则管理：add {tool, pattern, reason} / remove / list / toggle。tool 支持通配（bash*） |
guard_report | 治理报告：工具分布、错误率、被拒统计、危险命令命中 |
guard_status | 插件状态 |
guard_export | 审计导出 markdown |
guard_clear | 清空审计 |
存储：~/.dsh/guard/rules.json + ~/.dsh/guard/audit.jsonl
guard_rules action=add tool=bash pattern="rm -rf /" reason="禁止删除根目录"
guard_rules action=add tool=web_search reason="本项目禁用联网搜索"
guard_report period_days=7
FAQs
Security/approval/governance for dsh: rule-based tool denial via tools.guard(), full tool-call audit trail, and governance reports (Codex sandbox-x-approval + Claude PreToolUse hook pattern).
We found that dsh-plugins-guard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Research
/Security News
Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.
Product
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
Product
Create and manage Asana tasks directly from Socket alerts, with manual task creation, automated ticketing rules, and two-way sync.