dsh-route-fence-linter

Static linter for DeepSeek Harness plugin HTTP routes: every webServer route bypasses the /api gateway's trust check and must pin the Host to loopback itself. PASS/WARN/FAIL per route, as a CLI and a dsh tool.

PluginSecurityTerminalNetworkCode reviewTerminal / Shell

Verification

L2 · Structured

Security

Low

Health

Active

Trust

Silver

What it doesAI

Static linter for plugin HTTP routes, ensuring each bypassing route pins Host to loopback for security trust.

Checks every webServer route for trust bypass
PASS/WARN/FAIL per route assessment
Available as CLI and dsh tool

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:Vladimir-Kryshchenko/dsh-route-fence-linter

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH Version	Status
not stated	Declared — not tested

Requirements

• Node.js: not stated
• DSH: declared "not stated"
• External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SO VETPASSED12bf62

Security reviewAutomated review · daily

PASSED

Vet static analysis found no suspicious behavior — verdict is clean.

0 critical·0 high·0 medium·100 score

Version binding

plugin version0.1.0dsh manifest

scanned commit12bf629c87aa2026-08-21

latest commit12bf629c87aa

vet verdictclean · gitscore 100

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

No critical or warning findings.

Activity

Last commit 2026-08-21 · activity: Active

• Repo created: 2026-08-21

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Vladimir-Kryshchenko/dsh-route-fence-linter

Plugin notes

What is the dsh-route-fence-linter DeepSeek Harness plugin?

dsh-route-fence-linter is a DeepSeek Harness plugin maintained by @Vladimir-Kryshchenko. It is cataloged on dsh.so as a Security plugin for Code review tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-route-fence-linter?

Run dsh plugin --profile web add github:Vladimir-Kryshchenko/dsh-route-fence-linter in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but it has not yet been tested in an isolated container at the L3+ level.

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-21