Skip to content
dsh.fish

Browse

104 results

Bundle

dsh-enter-approve

Press Enter to approve the sandbox permission-escalation prompt in the DeepSeek Harness WebUI instead of clicking the Allow once button.

abcofabc
Bundle

dsh-dep-vuln-scan

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

988hj7tczd-oss
Bundle

dsh-auto-approver

Configurable auto-approval for DeepSeek Harness: intercepts approval/request and answers allowed-once/rejected by policy (allow-all / allowlist / deny-always), with a full audit log — so the human is only asked when the policy says so.

nicecx
Bundle

dsh-admin-bridge

Password-gated Sudo access permission mode for DeepSeek Harness

zjlww
Bundle

dsh-danger-guard

DSH 危险命令守卫：通过 tools/pre-execute 门禁拦截 bash/pwsh 高危命令（rm -rf /、mkfs、dd 写设备、管道执行脚本、git push --force 等），支持分级策略（极高危始终拒绝 / 中危跟随全局 deny/ask/log）、用户自定义规则与白名单。

czhzz
Bundle

dsh-managed-approval

Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.

jalllychun
Bundle

dsh-plugin-security-audit

DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.

truelove-dreamer
Bundle

@deepseek-ai/dsh-escalation-tolerance

Tolerate redundant sandbox_permissions requests: a tool call asking to escalate to a mode that is not strictly wider than the session's standing mode runs as-is at the standing mode instead of failing with "not strictly wider". Genuine escalations still route through the approval flow.

ericleoo
Bundle

dsh-release-guardian

Local, deterministic release risk checks for DeepSeek Harness.

XiaoSong1223
Bundle

dsh-plan-preset

Plan 模式心智映射:read-only 权限显示为 "Plan",审批策略 never(拒绝即最终,不准申请权限),文件只读 + 网络搜索可用。

23aisfvb
Bundle

dsh-plugin-permission-popup

Corner approval popup: answer pending permission requests from any session while the agent window is away

wxjgit
Bundle

dsh-fs-allowlist

Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批（write/edit + bash），设置页可视化调整。

wangzhaonan16
Bundle

@ahiosuz/dsh-workspace-tools

Workspace tools for DeepSeek Harness: per-workspace default Agent preset and permission preset for new sessions, using only official extension points (no DSH patches required).

AHIOSUZ
Bundle

dsh-plugin-recycle-bin

Enforce recycle-bin-only deletion on Windows: block del/rm/Remove-Item and other disk-erase commands, forbid automatically emptying the recycle bin, and stop + ask the user when the recycle bin or disk is full.

Xylocarpro
Bundle

dsh-git-bash

Make a Git for Windows installation resolvable as `bash` inside the dsh host process, so the official bash shell stack (dsh-bash-sandbox + dsh-tool-bash) can run on Windows

VviLliAm-qwq
Bundle

dsh-permission-matrix

Permission matrix for DeepSeek Harness: 3 sandbox modes x 4 approval strategies = 9 selectable presets, with a global default, a separate LLM-robot default, four-tier risk policies, password-gated approval for high-risk operations, audit log and git checkpoint.

zhang8019
Bundle

dsh-escalation-advisor

Three-mode visible-session advisor plugin for DeepSeek Harness with configurable tool permissions, local-subagent coverage, and task-tree budgets.

zhangqian98
Bundle

@dsh-external/dsh-tool-strict-check

Strict check: verify code and commands against real checkers instead of reading them — Lean 4 kernel checking with an axiom audit, language type/syntax checks, and static defect rules.

catsenior507
Bundle

dsh-metafolder-plugin

DSH Metafolder Plugin — visual meta-folders for the DeepSeek Harness sidebar workspaces: nest real workspace folders under named, collapsible groups, by drag and drop or the row menu. Paths, permissions, sessions and workspace ordering are untouched.

ManoloRemiddi
Bundle

dsh-workspace-scope-selection

A fourth permission option for DeepSeek Harness sessions: selected-workspace-write, where the user opens the workspace directory tree and toggles which directories the agent may write to.

jiangr100
Bundle

dsh-share-page

Share any DeepSeek Harness session as a self-contained read-only static webpage — timeline, collapsible tool calls & reasoning, default redaction, dual SHA-256 fingerprints, watermark. · 把 DSH 会话一键变成可分享的只读静态网页：单文件 HTML、离线可开、默认脱敏。

huazhiliange