dsh security plugin: blocks agents from reading/writing sensitive files (.env, credentials), masks leaked secrets in tool results, audit journal, safe sg_* inspection tools
dsh plugin --profile web add github:JohnXu22786/secret-guard
View the source on GitHub