treg-dsh
OpenRouter for tools - 2,896 agent-friendly tools, pay for the usage, not subscription
58 results
OpenRouter for tools - 2,896 agent-friendly tools, pay for the usage, not subscription
Local-first, self-hosted AI agent runtime with Claude Managed Agents-style APIs, sandboxed sessions, memory, tools, audit, replay, and a local Console.
Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.
DSH sandbox extension: configurable trusted writable roots outside the workspace, for both sandboxed CLI commands and the write/edit tools. 为 DSH 默认沙箱增加可配置的「沙箱授权目录」,允许工作区外的受信修改。
Fail-closed microsandbox microVM provider and model-facing guest tools
DSH 测试沙盒插件:把开发/测试任务路由到进程级隔离的沙盒实例(独立进程 + 独立 DSH_HOME + 独立端口),提供创建/注入/运行/健康检查/停止/销毁/清理与门禁式合回等原生工具,全程零影响本体(3080)。
Model-facing typed tools wrapping the frozen, reviewed underseal adapter for the DeepSeek Harness
DSH WebUI capability controls for skills, MCP servers, tools, prompt injections, approvals, and safety guards at session, project, and global levels.
🐳 The Everything-Plugin Quant OS — AI-native & DSH-native: 46 tools, 6 pluggable domains (data/alpha/ML/risk/execution), one end-to-end PDAT→PET pipeline. Methods open, secrets internal.
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
DeepSeek Harness plugin (temporary, pre-upstream-fix): automatically injects a CPython tempfile shim (PYTHONPATH -> sitecustomize) into every confined shell command on the Windows sandbox, so python/pytest tempfile use works with zero extra tools, zero model-context overhead, and zero escalation.
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Audit an agent harness against the harness-evaluation criteria, with machine-enforced evidence validation.
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
Turn DeepSeek Harness sessions into redacted, README-ready animated demos — as a local CLI or DSH plugin.
全局提示注入 / 上下文病毒(context virus)防御插件:tools/pre-execute 扫工具参数、tools/post-execute 扫工具结果、agent/pre-step 扫进入模型前的消息并注入金丝雀守卫、llm/stream 出站消毒;支持 block / quarantine / monitor 三模式、磁盘化可演进病毒库(学习/导入/导出)与审计日志。纯 JS 无原生依赖,profile 层挂载,对所有预设与子代理全局生效。
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
A security-conscious registry and installer for external CLI tools exposed through DeepSeek Harness.
Project DeepSeek Harness tool, approval, and result facts into a bounded action lifecycle ledger.
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
DSH-Plugin: structural observability layer — real tool/skill usage recording (tools/result), skill-catalog audit, and a watchdog with health/error events. No model self-reporting.
Security, Trust & Policy Layer for DeepSeek Harness. Don't trust your agent's tools. Verify them.