noatmark-dsh-plugin
其他 活跃维护

noatmark-dsh-plugin

ylwl1997/noatmark-dsh-plugin

作为轻量文本卫生扩展插件,可自动清洗不可信文本内容,支持扫描隐形特殊字符、清理LLM输出格式残留、转义CSV注入风险,部署简单无额外依赖,开箱即用保障文本输入安全。

1
Stars 标星
0
Forks 分支
1
Watchers 关注
0
Open Issues
TypeScript
主要语言
MIT
开源协议
9 KB
仓库大小
1 个月前
最后推送
一键安装扩展 / 插件指令
dsh plugin --profile web add github:ylwl1997/noatmark-dsh-plugin
git clone https://github.com/ylwl1997/noatmark-dsh-plugin.git
git clone git@github.com:ylwl1997/noatmark-dsh-plugin.git
README.md main

noatmark-dsh-plugin

awesome · DSH plugin

NoAtMark text hygiene as a DeepSeek Harness (dsh) plugin.

Everything-is-a-plugin: this plugin gives your dsh agent four text-hygiene tools, backed by the same deterministic engines behind noatmark.com.

Tools

Tool What it does
sanitize_text Strip invisible/zero-width characters and flag prompt-injection + hidden-text signals.
scan_text Report invisible characters (with code points + positions), injection patterns, and hidden text.
clean_format Clean LLM formatting artifacts (blank lines, stray fences, trailing spaces) — meaning untouched.
sanitize_csv Escape CSV formula injection (OWASP): = + - @ prefixes get a leading quote.

All processing is deterministic and local — no data leaves your machine.

Install

Add this plugin to your dsh Web UI. If you're running from a source checkout, use a cordis.yml patch:

- insert:
    - id: noatmark
      name: noatmark-dsh-plugin

or point at the source directly (absolute path):

- insert:
    - id: noatmark
      name: '/path/to/noatmark-dsh-plugin/src/index.ts'

Start dsh with the patch:

npx @deepseek-ai/dsh web --patch ./cordis.yml

Usage

In a dsh session, ask the agent to use a tool, e.g.:

Sanitize this pasted text before you summarize it.

Scan this file for invisible characters.

Clean the formatting of this AI output.

Escape this CSV before saving it.

Development

pnpm install
pnpm build   # tsc -> dist/

Resources

MIT