@tensorlakeai/dsh-sandbox
Tensorlake sandbox execution providers for DeepSeek Harness
14 results
Tensorlake sandbox execution providers for DeepSeek Harness
Sprites remote development environments for DeepSeek Harness through Cordis and MCP.
OrbStack VM sandbox v0.4.0: 在 v0.3(安全/可靠性)基础上新增 A1 交互终端、A3 场景化一键创建、A4 删除撤销+完成通知、A5 配额一眼可见、A6 协作分组、B1 安全基线 vm_harden、B2 密钥库 vm_secret、C1 增强指标+阈值告警 vm_alert、D1 vm_scp/vm_logs/vm_env/vm_withdraw、D2 调度 UI+用量报表 vm_report、D3 导出分片/远端、D4 累计配额+创建排队。
DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction
Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)
GitHub App tools for WSL dsh: hint (env file existence) + repo PR/Actions status; never dumps secrets.
AgentENV execution-world bundle for DeepSeek Harness
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
Record and compare project development environments without storing secret values.
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.
DSH bundle: re-inject KEY/PASSWORD/SECRET/TOKEN variables from the launching environment into dsh bash subprocesses under their original names
Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.