secret-detection

Stops a DeepSeek Harness agent from reading your credential files and pasting secrets into tool calls

Runtime security guardrails for DeepSeek Harness: source-backed pre-install vetting, dangerous tool-call blocking, output-leak auditing, and tamper-evident HMAC-chained logs.