dsh-zh
Localize leftover DSH UI chrome to Chinese (command palette descriptions, permission presets, reasoning effort) at the display layer, and detect when the official build adapts them
169 results
Localize leftover DSH UI chrome to Chinese (command palette descriptions, permission presets, reasoning effort) at the display layer, and detect when the official build adapts them
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Scan installed DeepSeek Harness plugins and grade stability risk (hook surface, startup work, preflight health, packaging, dependencies). 扫描已安装插件的稳定性风险(钩子面/启动任务/预检/打包/依赖)。
GitHub App tools for WSL dsh: hint (env file existence) + repo PR/Actions status; never dumps secrets.
Safe Git credential hints: GCM path, HTTPS vs SSH origin (never returns secrets).
全局提示注入 / 上下文病毒(context virus)防御插件:tools/pre-execute 扫工具参数、tools/post-execute 扫工具结果、agent/pre-step 扫进入模型前的消息并注入金丝雀守卫、llm/stream 出站消毒;支持 block / quarantine / monitor 三模式、磁盘化可演进病毒库(学习/导入/导出)与审计日志。纯 JS 无原生依赖,profile 层挂载,对所有预设与子代理全局生效。
DSH sandbox extension: protect declared workspace subpaths (e.g. .git) from writes, and optionally grant extra writable roots under workspace-write, enforced for sandboxed CLI commands and the write/edit tools. 为 DSH 沙箱增加工作区子路径只读保护, 并支持在 workspace-write 下声明额外可写根.
Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1
Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required
Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件(隔离墙 + 人在回路审批 + 执行后验证 + 循环纠正 + 可回滚规则)
dsh 插件 · 用户管理:给 dsh web 加登录门禁——未登录访问弹登录/注册页,首个注册者自动成为管理员;支持 TOTP 两步验证(验证器 App 扫码/手输密钥绑定);管理员可管理所有用户(删除、重置密码、角色调整、重置两步验证)并查看登录记录与访问记录,普通用户只能查看和修改自己的信息。
DSH Auto Mode — pre-execution rule interception + delivery-time independent subagent security review. The native auto-mode for long-running agents in DeepSeek Harness (Codex/Claude Code auto mode 的 DSH 原生实现).
Update copilot for DeepSeek Harness: full version radar over the DSH core, shipped bundles, and every installed plugin (merged package-centric across profiles); gated one-click plugin updates behind the full compatibility gate, a single pinned core update execution, patch-name audits with post-flight probes, history & rollback. · DSH 更新助手:本体/bundle/插件全量雷达(跨 profile 按包合并);插件更新带预检闸门一键执行,本体始终钉最新健康版本代执行(全套兼容闸门),补丁名体检与更新后探测,历史快照与回滚。
DSH Cordis plugin: turn arbitrary source text or images with text, diagrams, and tables into an AI-generated knowledge graph (facts / inferences / concepts / definitions / examples / counter-examples / rules) with two-way linking between the graph and the original text, plus evidence-grounded verification, questioning, one-click fixes and an audit log.
Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.
DeepSeek Harness 多租户插件:认证反代网关(邮箱密码/LDAP/SSO)、角色权限(平台管理员/租户管理员/审计员/使用者)、token 配额与用量统计、审计日志
并行多角色代码评审小队:/review 一条命令派出安全/正确性/测试/风格四名只读评审员子代理(每人可单独指定模型与思考强度),汇总为按严重度分组的结构化报告。Parallel multi-role code review squad: /review dispatches security/correctness/tests/style reviewer subagents (each on its own model) and aggregates one severity-grouped report.
DSH Full access 一次性开关:新工作区/新对话默认 full access,不再逐个确认(可安装 bundle + 补丁工具)
DeepSeek Harness (DSH) 插件:可逆时间旅行与审计。为工具副作用建立「前状态快照 → 执行 → 补偿」链路,提供 rewindTo(turnId) 按轮次倒序恢复工作区,内置审计规则引擎。
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
安全加固:威胁建模(STRIDE)+ 三层边界系统,任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills(88k★ MIT)启发。