dsh-tool-policy
Allow, ask, or deny DeepSeek Harness tool calls before execution
274 results
Allow, ask, or deny DeepSeek Harness tool calls before execution
DSH tool-call compatibility: strips sandbox_permissions/justification from tool-call arguments for third-party models (GPT etc.), and lets the user skip possibly-stuck tool calls with an LLM-facing notice.
🐳 The Everything-Plugin Quant OS — AI-native & DSH-native: 46 tools, 6 pluggable domains (data/alpha/ML/risk/execution), one end-to-end PDAT→PET pipeline. Methods open, secrets internal.
DSH plugin: strip GPT-family tool-call sandbox_permissions that are not strictly wider than the current session.
Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, plus the minimal-win collective-thinking preset (we/let's reasoning chain).
nono (Landlock/Seatbelt) backend for the DeepSeek Harness sandbox seam with a vendored fail-closed executor
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Model-facing typed tools wrapping the frozen, reviewed underseal adapter for the DeepSeek Harness
AI approval answerer using the unified ctx.llm route with fail-closed local policy checks
A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.
DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.
DeepSeek Harness plugin (temporary, pre-upstream-fix): automatically injects a CPython tempfile shim (PYTHONPATH -> sitecustomize) into every confined shell command on the Windows sandbox, so python/pytest tempfile use works with zero extra tools, zero model-context overhead, and zero escalation.
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Event-driven development automation, offline standards, CI adapters, and quality gates for Cordis plugins in DeepSeek Harness.
Find and audit DeepSeek Harness (DSH) plugins inside the agent — live `dsh-plugin` topic search + source audit with trial-to-production install plans.
OMV Audit Desk: an evidence-first vulnerability audit workbench for DeepSeek Harness
Harness Plugin Store Optimized: a customized fork of dsh-plugin-hub — configurable plugin download directory, bundle-layer conflict detection, automatic pnpm lookup, and upstream bug fixes
自然语言查询 + 商业智能报表插件 for DeepSeek Harness:在 dsh-mysql 连接底座之上,提供 Text2SQL 自然语言查库、15+ 图表类型、Dashboard 仪表盘、指标/维度管理、多维分析、自助分析、报表导出、审计日志与数据权限。Natural-language data queries + enterprise BI reports for DeepSeek Harness: Text2SQL, 15+ chart types, dashboards, metric management, multi-dimensional analysis, self-service analysis, export, audit log and data permissions.
KISS's Law (Weiwen's Law) universal causal engine (white-box presentation). DeepSeek Harness (Cordis) plugin implementation.
Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.
DSH WebUI capability controls for skills, MCP servers, tools, prompt injections, approvals, and safety guards at session, project, and global levels.
AI response quality review for DeepSeek Harness: audits each finished assistant turn with an independent reviewer model and steers the agent to fix unreasonable output (up to 2 review rounds).
Export-copy redaction for DeepSeek Harness session telemetry
DeepSeek Harness 工作区管理工具集:查看、创建注册、重命名、删除工作区记录(纯注册,不触碰磁盘目录);破坏性操作(删除注册、改注册路径)走用户审批 fail-closed。