dsh-agent-gate
Claw/session permission gate for DeepSeek Harness. 按分层权限拦截工具、走一次性审批,并写审计。官方沙箱由权限插件钉。
51 results
Claw/session permission gate for DeepSeek Harness. 按分层权限拦截工具、走一次性审批,并写审计。官方沙箱由权限插件钉。
Maestro Guard — pre-execute safety gate: native DSH approval prompts, parsed command-surface rules, decision journal
WeCom (Enterprise WeChat) Smart Robot bridge for DeepSeek Harness — two-way chat over the aibot WebSocket gateway (bot_id + secret), no public endpoint needed.
Authentication and security hardening plugin for DeepSeek Harness
Login wall and public gateway for DeepSeek Harness cloud deploys.
Cloud-backed cross-session memory for DeepSeek Harness: structured entries + vector retrieval persisted to S3-compatible object storage (AWS S3 / MinIO / R2 / OSS), with local cache projection, approval-gated writes and auditable trails
Agent harness 配置系统:agents/skills/hooks/rules 四层分工、instincts 持续学习(自动学模式、聚簇成技能)、AgentShield 安全审计(secrets/权限/hook 注入/MCP 风险)、Unified Memory Vault 跨 harness 共享、GateGuard 破坏性命令门卫。受 affaan-m/ECC(185k★ MIT)启发。
🛡️ DeepSeek Harness 高级安全认证网关:支持 Argon2id 密码、CSRF 保护、账户锁定、IP 访问控制、审计日志、会话管理、TOTP 两步验证及 WebAuthn/通行密钥预备。零配置启动,即装即用。
Password-gated Sudo access permission mode for DeepSeek Harness
Local, deterministic release risk checks for DeepSeek Harness.
Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁
Natural-language driven dynamic assembler for DeepSeek Harness (dsh): discovers plugins at runtime (official-first, third-party optional), generates assembly plans, and loads them via Cordis — with built-in security audit gates for unofficial plugins.
Zero-dependency static + sandbox smoke detector for DeepSeek Harness (dsh) plugins: package-structure gates (R), cordis contract scans (K), keyless-headless sandbox smoke (D), and ecosystem-listing checks (CC).
Feishu (Lark) OAuth login gate for the DeepSeek Harness web GUI.
Permission matrix for DeepSeek Harness: 3 sandbox modes x 4 approval strategies = 9 selectable presets, with a global default, a separate LLM-robot default, four-tier risk policies, password-gated approval for high-risk operations, audit log and git checkpoint.
Installing-time safety gate for the DSH plugin market — scans npm / GitHub plugins before the market executes them. · DSH 插件市场安装安全检查:安装前自动检测三方插件风险,安全直接放行,有风险弹窗由你决定。
Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness — a capability seam (ctx.memory service + local SQLite provider + memory tool + frozen snapshot injection), not another memory warehouse
Remote access login gate for the DeepSeek Harness Web UI: a password wall in front of non-loopback access, session cookies, an injected browser-side gate, and a Remote Access settings section. The /api RPC surface is authenticated by dsh itself.
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
Access lock for DeepSeek Harness web profile (password, passkey, IP lists, Nginx)
Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff), structured reports (gate_report), 12 destructive-command patterns and workspace-boundary checks.
Local tool-call failsafe and DWGR-8 personal governance proxy gate for DSH: blocks high-risk shell patterns, credential leaks, and enforces declarative param-level boundaries with hash-linked JSONL audit logs and optional Gateway.
并行多角色代码评审小队:/review 一条命令派出安全/正确性/测试/风格四名只读评审员子代理(每人可单独指定模型与思考强度),汇总为按严重度分组的结构化报告。Parallel multi-role code review squad: /review dispatches security/correctness/tests/style reviewer subagents (each on its own model) and aggregates one severity-grouped report.