文本卫生 dsh 插件：净化不可信文本、扫描隐形字符、清洗 LLM 格式、转义 CSV 公式注入。

安装

# GitHub 源码（首次需按提示配置 allowBuilds 构建授权后重试）

dsh plugin --profile web add github:ylwl1997/noatmark-dsh-plugin

GitHub 来源的插件在安装时会在你的机器上执行构建脚本。请只安装可信来源，并尽量锁定 commit（github:owner/repo#sha）。

README

NoAtMark text hygiene as a DeepSeek Harness (dsh) plugin.

Everything-is-a-plugin: this plugin gives your dsh agent four text-hygiene tools, backed by the same deterministic engines behind noatmark.com.

Tool	What it does
`sanitize_text`	Strip invisible/zero-width characters and flag prompt-injection + hidden-text signals.
`scan_text`	Report invisible characters (with code points + positions), injection patterns, and hidden text.
`clean_format`	Clean LLM formatting artifacts (blank lines, stray fences, trailing spaces) — meaning untouched.
`sanitize_csv`	Escape CSV formula injection (OWASP): `= + - @` prefixes get a leading quote.

All processing is deterministic and local — no data leaves your machine.

Add this plugin to your dsh Web UI. If you're running from a source checkout, use a cordis.yml patch:

- insert:
    - id: noatmark
      name: noatmark-dsh-plugin

or point at the source directly (absolute path):

- insert:
    - id: noatmark
      name: '/path/to/noatmark-dsh-plugin/src/index.ts'

Start dsh with the patch:

npx @deepseek-ai/dsh web --patch ./cordis.yml

In a dsh session, ask the agent to use a tool, e.g.:

Sanitize this pasted text before you summarize it.

Scan this file for invisible characters.

Clean the formatting of this AI output.

Escape this CSV before saving it.

pnpm install
pnpm build   # tsc -> dist/

MIT