Author audits DeepSeek Harness source for risks

An author audited the source code and published packages of DeepSeek Harness, an open-source coding agent, finding no explicit malware. However, the review noted potential security risks, including a default sandboxed shell that permits unrestricted local file reads and network connections, along with default session log uploads to DeepSeek. Open article →