Skip to content
dsh.fish

Browse

92 results

Bundle

@jyleaves/dsh-win-bash-fix

Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, plus the minimal-win collective-thinking preset (we/let's reasoning chain).

Jyleaves2
Bundle

@deepseek-ai/dsh-sandbox-nono

nono (Landlock/Seatbelt) backend for the DeepSeek Harness sandbox seam with a vendored fail-closed executor

omdsh-dev2
Bundle

@duke-dsh-plugins/dsh-agent-approval

Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval subagent judges every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.

MoonlitDropOfBlood2
Bundle

dsh-auto-approval-plugin

A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.

StyxNether2
Bundle

dsh-blocker-notify

Real-time attention alerts for DeepSeek Harness: a global banner plus flashing workspace entries when the agent is blocked (approval request / sandbox denial), with an audible chime and OS-level notifications for new blockers.

Frost-Reed2
Bundle

dsh-python-tempfile-shim

DeepSeek Harness plugin (temporary, pre-upstream-fix): automatically injects a CPython tempfile shim (PYTHONPATH -> sitecustomize) into every confined shell command on the Windows sandbox, so python/pytest tempfile use works with zero extra tools, zero model-context overhead, and zero escalation.

AngelosZou2
Bundle

dsh-memory-gate

Retrieved ≠ injected: CBDC-gated memory for DeepSeek Harness — decides how memory is USED (use/verify/ignore decisions, feedback learning, full audit); local SQLite + FTS5, bounded, no extra model call

GIT1219952
Bundle

dsh-seatbelt-sandbox

Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required

drscrewdriver1
Bundle

dsh-workspace-only-plugin

Workspace Only switch for DeepSeek Harness: confine file access of every sandbox mode to the session workspace

CsBpRd1
Bundle

dsh-access-mode

Standalone DeepSeek Harness access-mode plugin with Default, No Edit, and Auto modes

ddll80231
Bundle

dsh-gpt-perm-strip

DSH plugin: strip GPT-family tool-call sandbox_permissions that are not strictly wider than the current session.

FengLingYaaa1
Bundle

dsh-capcheck

V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.

heming-gmh1
Bundle

dsh-tiered-approval

Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.

Elaina-real1
Bundle

@deepseek-ai/dsh-sandbox-micro

DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction

omdsh-dev1
Bundle

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

DSHCorrectover1
Bundle

dsh-qbetter-config

Better config hub for DeepSeek Harness: one page showing sandbox mode, default model, workspaces, settings namespaces and copy-ready composition templates.

21286272671
Bundle

@deepseek-ai/dsh-exit-bash

One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched

123625661
Bundle

dsh-gpt-compat

Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments

YaoaY1
Bundle

dsh-strip-sandbox-permissions

Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.

Sharl2101
Bundle

dsh-full-with-approval

DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.

zjuhbh1
Bundle

dsh-qapproval-timeout

Approval timeout for DeepSeek Harness: when a sandbox/escalation approval is not answered within a configurable period, the request is automatically rejected instead of waiting forever.

21286272671
Bundle

dsh-safety-net

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

Asuna486-desuwa1