Unverified50% confidenceDecision RuleExact time
The security module oma-deepsec was renamed to oma-security, the slash command /deepsec was changed to /security, and no compatibility alias is provided, so the old form stops working immediately
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/15/2026
First Seen
Valid until: 1/13/2027
Sources
Related Entities
Related Claims
UnverifiedThe new oma-security module routes work across source code, skills, MCP, and a restricted web runtime to target-specific engines, preserves forensic evidence, and requires independent verification before confirming a vulnerability or triggering a CI gate; Deepsec remains the default source-scanning engine65% similarUnverifiedDeepSeek Harness's plugin architecture has serious security vulnerabilities: each plugin has full shell access and file system access, completely separate from the sandbox.64% similarUnverified协议组合安全（compositional security）不能简单通过各协议独立安全性推导得出58% similarUnverifiedThe plugin's tagline is that it addresses the shortcoming of DeepSeek Harness not being able to 'open-source users,' serving as a satire of the behavior of secretly uploading user code.58% similarUnverified将密钥移出代码仓库改用环境变量或密钥管理服务（如HashiCorp Vault、AWS Secrets Manager），代码仅保留占位符是最彻底的架构级防护方案57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1038770API
curl https://kongchang.com/api/v1/knowledge/claims/1038770MCP
get_claim(id=1038770)