Skip to content
dsh.fish

Browse

231 results

Bundle

dsh-quality-review

AI response quality review for DeepSeek Harness: audits each finished assistant turn with an independent reviewer model and steers the agent to fix unreasonable output (up to 2 review rounds).

CAI-MH2
Bundle

dsh-workspace-only-plugin

Workspace Only switch for DeepSeek Harness: confine file access of every sandbox mode to the session workspace

CsBpRd1
Bundle

dsh-hotplug-engine

DSH hot-plug execution engine: a reliable install/enable/disable/rollback/audit service for plugin marketplaces, agents, and host plugins (execution layer, not a marketplace).

AnothetLoice1
Bundle

dsh-tiered-approval

Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.

Elaina-real1
Bundle

dsh-prolong-memory

PRO-LONG-style programmatic memory for DeepSeek Harness: appends every session event to a per-workspace log.txt that the agent retrieves with grep/python. Built-in write probe, /prolong status command and permission-deny counter.

ycr401
Bundle

@deepseek-ai/dsh-sandbox-micro

DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction

omdsh-dev1
Bundle

dsh-auto-review-plugin

Codex-style Guardian reviews, audit, and manual override for DeepSeek Harness

Xinlong-Wu1
Bundle

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

DSHCorrectover1
Bundle

dsh-auto-classifier

Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.

PAKIKNOWLEDGE1
Bundle

dsh-qbetter-config

Better config hub for DeepSeek Harness: one page showing sandbox mode, default model, workspaces, settings namespaces and copy-ready composition templates.

21286272671
Bundle

@deepseek-ai/dsh-exit-bash

One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched

123625661
Bundle

dsh-gpt-compat

Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments

YaoaY1
Bundle

dsh-llm-injection-filter

DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.

XiaoYuOvO1
Bundle

dsh-strip-sandbox-permissions

Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.

Sharl2101
Bundle

dsh-full-with-approval

DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.

zjuhbh1
Bundle

dsh-cli-store

A security-conscious registry and installer for external CLI tools exposed through DeepSeek Harness.

Harzva1
Bundle

dsh-session-allow

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)

AnakinCao1
Bundle

@mkaliezz/dsh-dependency-firewall

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

MkaliezZ1
Bundle

dsh-safety-net

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

Asuna486-desuwa1
Bundle

windows-bash

Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.

bainianlaoyao1