dsh-password-shield

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

# dsh-password-shield

A narrowly scoped DSH web plugin that blocks the iCloud Passwords completion-list popup floating over the chat composer in old conversations.

## The problem

The iCloud Passwords Chrome extension applies WebKit-style credential-field heuristics to every page. On some DSH conversation pages it misclassifies the chat composer and injects its empty completion list:

- iCloud Passwords
- Open Passwords App
- Find and create passwords

No saved credential is required. The empty-state popup itself confirms that the extension offered autofill even though it found no credential for the DSH URL.

The popup is implemented as a `` appended to ``. Its open shadow root contains an iframe whose extension URL points to `completion_list.html`.

## The fix

The plugin watches the DOM for exactly that structure. When it appears, it removes the completion-list iframe and forces its host invisible while keeping the host connected, allowing the extension to finish its own show/hide bookkeeping safely.

It intentionally does **not**:

- change `input[type=password]` into another type;
- modify API-key fields;
- change autocomplete attributes;
- read or store field values;
- hide ordinary DSH popovers;
- hide unrelated extension iframes.

## Install

```bash
dsh plugin --profile web add github:ruby1304/dsh-password-shield
# Restart dsh web.
```

After an npm release:

```bash
dsh plugin --profile web add dsh-password-shield
```

## Tests

```bash
npm install
npm test
```

Tests cover pre-existing and dynamically inserted iCloud completion lists, ordinary DSH popovers, unrelated extension iframes, and the guarantee that password/text inputs remain untouched.

## License

MIT