dsh-strip-sandbox-permissions
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
355 results
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
Content-addressed proof for body-free DSH tool-result custody stages
DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.
Access-password gateway plugin for DeepSeek Harness Web: every request on the gateway port requires authentication (no unauthenticated surface besides the login/setup page), first visit sets the password, and it can be rotated from the dedicated Security settings page.
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
A security-conscious registry and installer for external CLI tools exposed through DeepSeek Harness.
Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
DeepSeek Harness 的 Tailscale 远程访问运营面板:健康检查、HTTPS 入口开关、macOS 代理绕过、中继服务器运维、ACL 片段生成。
AI代码审查:找出代码中的bug、安全漏洞、性能问题和风格建议
Read-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships it
Enterprise-grade Zero-Trust Authentication, LAN/Public Access Control & Security Gate Plugin for DeepSeek Harness (DSH).
A fail-closed, auditable approval policy plugin for DeepSeek Harness
【实验性】只读安全审计模式插件(自动只读、工具级白名单、强制交付选择)· EXPERIMENTAL plugin for the read-only security audit mode (auto read-only, tool allowlist gate, mandatory delivery choice);日常使用推荐 dsh-presets 仓库的原生纯预设版。
Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting
Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.
Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams
DSH web plugin: play a notification chime when the agent asks the user a question (ask_user_question / plan review) or requests approval (sandbox escalation, tool approval).
Deterministic DeepSeek Harness Web client plugin that explains the Windows-sandbox `spawn EPERM` failure as a distinct Conversation Node.
DSH task chime: play local sounds for approval/permission requests and task completion, fully configurable from the Web GUI settings. DSH 任务提示音:审批/权限请求与任务完成提示音,可在 GUI 设置中自定义声音、音量与冷却时间。
Native Auto Review for DeepSeek Harness with automatic host compatibility selection
DeepSeek Harness 多租户插件:认证反代网关(邮箱密码/LDAP/SSO)、角色权限(平台管理员/租户管理员/审计员/使用者)、token 配额与用量统计、审计日志
DSH Full access 一次性开关:新工作区/新对话默认 full access,不再逐个确认(可安装 bundle + 补丁工具)
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件(隔离墙 + 临时借出 + 触碰审计 + 紧急熔断)