Taintguard

What this plugin does

Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin, gates privileged calls that follow untrusted content, and refuses credentials heading off the machine.

Purpose evidence: this record includes a GitHub repository description. Any localized fallback copy is not independent verification of its capability claims.

Repository and source evidence

This public repository was verified through the GitHub API. The catalog source links the plugin to this repository, but directory inclusion is not an official endorsement.

Repository owner

sashankh

Author

No independently verified author field is available

Source

https://github.com/topics/dsh-plugin

Example configuration

The directory snapshot does not include a repository-verified, plugin-specific configuration example, so no configuration keys are generated or guessed here. After installation, use the official DSH command to inspect the composed configuration for the active profile:

For plugin-specific configuration, use the repository README and manifests as the source of truth: https://github.com/sashankh/dsh-taintguard

Supported DeepSeek Harness versions

No explicit DSH version range in catalog evidence

Neither the repository evidence nor the directory record provides a verifiable DSH version range. Test the target DSH version in an isolated environment.

Environment, permissions, and dependencies

GitHub metadata

Stars / forks

0 / 0

Last repository update

August 16, 2026

Latest release

v0.1.0 · August 16, 2026

License

MIT

Default branch

main

Available / archived

Publicly reachable and not archived

Installation safety

No plugin-specific security assessment was collected. The following is generic DeepSeek Harness installation guidance, not a safety rating or audit conclusion for this plugin.

Third-party plugins can execute code inside your Harness environment. Before installation, review the source, recent activity, dependencies, build scripts, and requested permissions, then test in an isolated environment. Directory inclusion is not a security certification.

Git installs may execute prepare/build scripts on your machine, outside the agent sandbox. Only allow trusted source and pin a commit where possible.

Common errors and troubleshooting

No plugin-specific error documentation was collected. The steps below are generic DeepSeek Harness troubleshooting, not fixes verified for this plugin.

1. 1. Plugin missing after installation

   Confirm installation and launch use the same profile, then run dsh --profile web --dump-config to check whether the bundle entered the composed configuration.

2. 2. Git dependency build is blocked

   pnpm 10+ may block prepare scripts. Only after reviewing the source, add the exact package key reported by pnpm to allowBuilds, then retry.

3. 3. Version or configuration mismatch

   Check the repository README, releases, and compatibility evidence. Do not treat directory-wide commands as promises from the plugin author.