跳到正文
dsh-market 浏览插件 GitHub EN

ylwl1997/noatmark-dsh-plugin

文本卫生 dsh 插件:净化不可信文本、扫描隐形字符、清洗 LLM 格式、转义 CSV 公式注入。

Star 数 ★ 1 分类 安全与权限 收录于 2026-08-14

安装

在 DeepSeek Harness 里通过 dsh-market 安装

dsh plugin --profile web add dshmarket

或使用命令行

dsh plugin --profile web add github:ylwl1997/noatmark-dsh-plugin

装任何插件都等于在你的机器上跑第三方代码,权限和你本人一样大——能读你的文件、用你的凭据、访问网络。请先审阅源码,并尽量锁定 commit(github:owner/repo#sha)。

README

该插件的 README 只有英文版本。

NoAtMark text hygiene as a DeepSeek Harness (dsh) plugin.

Everything-is-a-plugin: this plugin gives your dsh agent four text-hygiene tools, backed by the same deterministic engines behind noatmark.com.

Tools

Tool What it does
sanitize_text Strip invisible/zero-width characters and flag prompt-injection + hidden-text signals.
scan_text Report invisible characters (with code points + positions), injection patterns, and hidden text.
clean_format Clean LLM formatting artifacts (blank lines, stray fences, trailing spaces) — meaning untouched.
sanitize_csv Escape CSV formula injection (OWASP): = + - @ prefixes get a leading quote.

All processing is deterministic and local — no data leaves your machine.

Install

Add this plugin to your dsh Web UI. If you're running from a source checkout, use a cordis.yml patch:

- insert:
    - id: noatmark
      name: noatmark-dsh-plugin

or point at the source directly (absolute path):

- insert:
    - id: noatmark
      name: '/path/to/noatmark-dsh-plugin/src/index.ts'

Start dsh with the patch:

npx @deepseek-ai/dsh web --patch ./cordis.yml

Usage

In a dsh session, ask the agent to use a tool, e.g.:

Sanitize this pasted text before you summarize it.

Scan this file for invisible characters.

Clean the formatting of this AI output.

Escape this CSV before saving it.

Development

pnpm install
pnpm build   # tsc -> dist/

Resources

MIT

内容来自项目 README(GitHub)↗