Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.
- GitHub stars
- 1
- License
- MIT
- Added
- 2026-08-15
GitHub info
- GitHub stars
- 1
- License
- MIT
- Primary language
- TypeScript
- Last push
- Aug 15, 2026, 3:40 PM
- Maintainer
- tancheng33
- Added
- 2026-08-15
Install
dsh plugin --profile web add github:tancheng33/dsh-egress-guardREADME badge
Add this Markdown to your plugin README to link back to its listing.
[](https://dshget.com/plugins/tancheng33/dsh-egress-guard)Related plugins
Security & Permissionsdsh-credentials-vault
★ 1HashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-operation reads so rotation needs no restart, and compare-and-swap writes.
dsh-code-runtime-container
Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.
api-relay-audit
★ 819Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.