HunYiSage/dsh-purge

Test the security boundaries of your local DeepSeek Harness with a red team tool

You can distinguish whether a specific request is blocked by the model itself or by the harness (execution environment) policies on your computer. This tool is used to temporarily adjust the harness's security settings in a local environment and observe the model's reactions to various prompts. It is installed as a plugin for the official DeepSeek Harness and works by displaying a button next to the session title.

Separating the harness and model boundaries

DeepSeek Harness does more than simply pass prompts; it rewrites prompts at runtime and manages approval gates, sandbox policies, and session migration. This tool isolates these harness-layer interventions to allow you to evaluate how the model actually responds. Specifically, version 1.1.90 targets DSH 0.2.1-rc.2 and supports 0.2.0, but does not support RC versions after 0.2.1-rc.3. Both the official web (dsh web) and desktop EXE are supported, and each must be installed and applied separately.

Clean and Drill: two modes

The plugin opens a right-side Dock via a button next to the session title and consists of two pages: Clean and Drill.

• Clean page Check patch status by group and perform apply, restore, and remove operations. You can manage the prompt editor and multiple rule sets.
• Drill page Handles local environment and assets after authorization. This build does not include a skill library or knowledge base and is for local labs only.
• Local lab restrictions Attack operations are only allowed on loopback and RFC1918 private addresses. Domains are verified to be private or loopback addresses after resolution, and public addresses are rejected.

Installation and application procedure

It does not use the plugin marketplace and is installed via the dsh plugin add command or pnpm.

• Restart required After adding the plugin, you must completely terminate and restart the host. For web, stop and restart dsh web; for desktop, terminate the tray icon and then open the executable.
• Application verification Clicking Apply on the Clean page applies the patch and restarts the host. Enter /purge status in the chat to check DSH_HOME and the patch list.

Legal and technical boundaries to check before use

This tool is distributed under the Apache License 2.0, and when forking or redistributing, you must retain copyright notices and NOTICE and specify the original repository. Reselling the original build is prohibited, and distributing it as a commercial product or selling it with a changed skin is not allowed. This project has no employment, commercial, licensing, or warranty relationship with DeepSeek or its affiliates, and the term 'official' only means that the evaluation target is the user's local official DeepSeek Harness package. Users bear all legal responsibility, and the license is immediately terminated if used for illegal purposes. Game cheats (aimbot, wallhack, etc.) are prohibited at both the prompt layer and session gate.