dsh-safe-web-fetch
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
414 results
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
Plugin value auditor for DeepSeek Harness: judge a plugin before install and audit installed ones — heuristic scan + LLM judge, with model-switch re-audit reminders. · DSH 插件价值裁判:装前判断值不值得装,装后审计是否还该留,模型切换时提醒复核。
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
Self-healing DeepSeek-Harness plugin: keeps confined pwsh/bash console windows invisible (SW_HIDE) on Windows — no black console flash on every sandboxed command.
OS-isolated capability capsules for third-party DeepSeek Harness plugins
Approval timeout for DeepSeek Harness: when a sandbox/escalation approval is not answered within a configurable period, the request is automatically rejected instead of waiting forever.
A DSH profile bundle that ships the Telegram ↔ DeepSeek Harness bridge as a model-callable install tool. Requires the session sandbox policy to allow subprocess TLS to api.telegram.org (danger-full-access in the default sandbox policy).
Zero-interruption audit + fuse blocking for DeepSeek Harness. / 零打扰 Agent 审计与保险丝拦截插件。
Normalize invalid non-widening sandbox escalation arguments before DSH tool dispatch.
DSH plugin health scorecard: quality & security audit, rankings, search, score history and open-data export across the dsh-plugin ecosystem, with a workspace-persisted incrementally-synced catalog. 插件体检评分卡:质量/安全审计、榜单、搜索、历史评分曲线与开放数据导出(目录增量同步)。
Remote access login gate for the DeepSeek Harness Web UI: a password wall in front of non-loopback access, session cookies, an injected browser-side gate, and a Remote Access settings section. The /api RPC surface is authenticated by dsh itself.
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
A fourth permission option for DeepSeek Harness sessions: selected-workspace-write, where the user opens the workspace directory tree and toggles which directories the agent may write to.
Auto-reject unanswered permission requests with a model-visible timeout notice
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces
Runtime data-flow audit log for DeepSeek Harness: who mutated what, in what order — per-plugin, per-fiber attribution.
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
Enterprise compliance for DeepSeek Harness — SOC2/GDPR automated checks, sensitive-info redaction, and a redacted tool audit trail. · DSH 企业级合规插件:SOC2/GDPR 自动化合规自检、敏感信息拦截与脱敏、操作日志审计追溯。
Static linter: every plugin HTTP route must carry a browser-trust fence (loopback Host pin before Origin / sec-fetch-site).
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
DSH++ — a local-first control plane for DeepSeek Harness. Plugin security auditing and workflow regression testing for dsh, in a CLI plus a loopback web console.
SQL 优化模式:EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents(38k★ MIT)启发。
Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin and gates privileged tool calls that follow untrusted content