dsh-taintguardsashankh0Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin, gates privileged calls that follow untrusted content, and refuses credentials heading off the machine.TypeScript08/16插件清单确认