dsh-purge: A Red-Team Assessment DSH plugin that Separates Host and Model Layers
lanjingod/dsh-purge
dsh-purge is a red-team security evaluation plugin for DeepSeek Harness that swaps injected prompts per model, applies or restores patches from its Clean dock, and self-checks its ledger across three platforms.
dsh-purge is a red-team security assessment DSH plugin for an already installed official DeepSeek Harness, built to tell host-layer blocking apart from model refusal. Because the harness rewrites prompts, approval gates, sandbox policy, and session migration at runtime, judging by whether the model answers alone is misleading. A dock opened from beside the session title offers Clean and Drill pages: the first manages patch status, rule sets, and prompts, the second inspects assets and the local environment once authorization is in place, with startup reapply and automatic path discovery.
How to Install
dsh plugin --profile web add github:lanjingod/dsh-purge- Category
- Tools & Capabilities
- Platform
- DSH Plugin
- Author
- lanjingod
- Distribution
- Plugin
dsh-purge Key Features
dsh-purge Repo Summary
What Does It Do?
It is a red-team security assessment DSH plugin for DeepSeek Harness that separates host-layer blocking from model refusal on an already installed official Harness. The problem it solves is that the harness rewrites prompts, approval gates, sandbox policy, and session migration at runtime, so judging only by whether the model answers mistakes a host-layer restriction for a model refusal. The plugin splits those two layers on your own install through its Clean and Drill pages, supporting controlled evaluation and making it visible which default policies are too tight.
Core Features
- dsh-purge dock: a button beside the session title opens a right-side dock with two pages, Clean and Drill.
- Clean page: grouped patch status, apply, restore, and uninstall actions, plus a prompt editor and multiple rule sets.
- Drill page: after authorization, inspects assets, skills, and the local environment, only for a host you manage, an offline target, or a written authorized exercise.
- Host policy control: adjusts default copy, permission policy, and tool limits while keeping official capabilities and avoiding a second invented identity.
- Startup check and reapply: verifies and reapplies on start, so you do not hand-edit files after npm overwrites the dependency directory.
- Automatic path discovery: checks the environment variable, the config directory next to the launcher, then the user home, with no hardcoded drive letters and no changes to the Harness source tree.
How to Use This Plugin?
After enabling it in DSH, click the plugin button beside the session title to open the right dock, then run the apply action on the Clean page; a successful apply triggers a restart, while an unfinished one does not. After the restart, start a new chat, because that is when the injection enters the session. To change identity or rules, switch rule sets in the Clean page prompt editor and apply again; to assess the local environment, use the Drill page only when authorization is in place. The official Web build and the official desktop build must be installed and applied separately; the plugin is maintained by LanJinGod under the MIT license.
This page is an independent rewrite of the plugin's official README — for authoritative documentation and the latest changes, refer to the source: lanjingod/dsh-purge. The plugin is third-party code that runs on your machine once installed; inclusion does not imply endorsement — please review the source before installing.
DSH Plugin FAQ
