Browse

9 results

Bundle

dsh-sandbox-allowlist

DSH sandbox extension: configurable trusted writable roots outside the workspace, for both sandboxed CLI commands and the write/edit tools. 为 DSH 默认沙箱增加可配置的「沙箱授权目录」，允许工作区外的受信修改。

developerdh5

Bundle

A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.

StyxNether2

Bundle

@mkaliezz/dsh-dependency-firewall

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

MkaliezZ1

Bundle

dsh-safety-net

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

Asuna486-desuwa1

Bundle

dsh-safeguard

DSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)

ZhijiangTang1

Bundle

dsh-write-protect

DSH sandbox extension: protect declared workspace subpaths (e.g. .git) from writes, and optionally grant extra writable roots under workspace-write, enforced for sandboxed CLI commands and the write/edit tools. 为 DSH 沙箱增加工作区子路径只读保护, 并支持在 workspace-write 下声明额外可写根.

azazo11

Bundle

dsh-dep-vuln-scan

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

988hj7tczd-oss

Bundle

dsh-plugin-recycle-bin

Enforce recycle-bin-only deletion on Windows: block del/rm/Remove-Item and other disk-erase commands, forbid automatically emptying the recycle bin, and stop + ask the user when the recycle bin or disk is full.

Xylocarpro

Bundle

@dsh-external/dsh-tool-strict-check

Strict check: verify code and commands against real checkers instead of reading them — Lean 4 kernel checking with an axiom audit, language type/syntax checks, and static defect rules.

catsenior507