Plugin directory / Security / dsh-token-vault
dsh-token-vault
Verified · install-tested on dsh YYfather
What it does
Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from 设置 → 凭证库 / 市场 → 已安装.
Works — verified, early-stage project
Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from 设置 → 凭证库 / 市场 → 已安装. It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
@yyfather/dsh-token-vault
Secure credential vault for DeepSeek Harness · 凭证库插件
Store your GitHub / npm / API tokens in DSH's own credential store (ctx.credentials → ~/.credentials.yaml). Secrets never leave the host — no plaintext file, no model context, no browser round-trip. The agent uses tokens through vault_run which injects them into a child-process environment only; vault_show (the single disclosure path) requires an explicit confirm: true.
设置 → 凭证库 录入一次，之后所有 GitHub/npm 操作由 Host 侧代持。
Tools (agent-facing)
| Tool | Purpose |
|---|---|
vault_list |
List stored token names only (never values) |
vault_has |
Check one token's presence |
vault_set |
Store/update a token (value never echoed) |
vault_remove |
Delete a token |
vault_import |
Import from gh auth token (source: gh) or ~/.npmrc (source: npm) |
vault_run |
Run gh/npm/npx/node/git with the token injected via env (github/gh → GH_TOKEN, npm/node → NPM_TOKEN, env_name overrides); output contains no secrets |
vault_show |
Reveal one token (requires confirm: true, only on explicit user request) |
Install
dsh plugin --profile desktop add @yyfather/dsh-token-vault
The package declares dsh.bundle.patch so it mounts automatically; restart DSH Desktop to activate. Then manage it from 设置 → 市场 → 已安装 (enable / update / uninstall), or paste tokens in 设置 → 凭证库.
Security design
- Storage: DSH credential record space (
dsh-token-vault/<name>, atomicmodifyRecord) — no new plaintext files. - Usage:
vault_runplaces the token in the child environment only; stdout/stderr/logs never contain it. - Disclosure:
vault_showis the only leak path and demandsconfirm: true; usage rules advise rotating after use. - Prompt section
token-vault-usageinjected automatically: the agent must never print or persist tokens.
Structure
lib/index.js— host:ctx.tools.registerfor 7 vault tools;webServerroutes/vault/status|set|remove|import;systemPrompt.sectionusage ruleslib/client.js— browser__ModuleLoader__bundle: Settings → 凭证库 (add / import / delete, values never displayed)cordis.patch.yml— bundle mount patchpackage.json— market-format compliant (strictinject, fullexportsincl../clientand./cordis.patch.yml)
License
MIT © YYfather
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-token-vault for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:YYfather/dsh-token-vaultHeadless (CLI) profile:
dsh plugin --profile headless add github:YYfather/dsh-token-vaultTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-token-vault/)<a href="https://dshbase.com/plugins/dsh-token-vault/"><img src="https://dshbase.com/badges/dsh-token-vault.svg" alt="dshbase install-tested"></a>