Browse

DSH Auto Guard: a Claude Code Auto Mode-like command approval mechanism that adds an LLM safety net on top of full access, with rules, caches, file tracker, and sensitive path gates.

Ayle56781

Bundle

Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.

Elaina-real1

Bundle

dsh-guardian-approval

Independent Codex Guardian-style approval reviewer for DSH.

Scotlight1

Bundle

dsh-prolong-memory

PRO-LONG-style programmatic memory for DeepSeek Harness: appends every session event to a per-workspace log.txt that the agent retrieves with grep/python. Built-in write probe, /prolong status command and permission-deny counter.

ycr401

Bundle

dsh-plugin-observatory

Static DSH plugin compatibility audit before installation, plus bounded Loader lifecycle observation

CMSKL1

Bundle

dsh-airbag

Non-intrusive safety belt for DeepSeek Harness: blocks API keys pasted to the agent, blocks secret writes, tracks leak events, and offers a workspace health scan. 非侵入式安全护栏：拦截粘贴给 Agent 的 API 密钥、写入拦截、泄露追踪与工作区安全体检。

uwu90391

Bundle

@deepseek-ai/dsh-sandbox-micro

DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction

omdsh-dev1

Bundle

dsh-auto-review-plugin

Codex-style Guardian reviews, audit, and manual override for DeepSeek Harness

Xinlong-Wu1

Bundle

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

DSHCorrectover1

Bundle

dsh-auto-classifier

Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.

PAKIKNOWLEDGE1

Bundle

@deepseek-ai/dsh-exit-bash

One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched

123625661

Bundle

dsh-gpt-compat

Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments

YaoaY1

Bundle

dsh-llm-injection-filter

DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.

XiaoYuOvO1

Bundle

dsh-strip-sandbox-permissions

Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.

Sharl2101

Bundle

dsh-full-with-approval

DSH profile plugin: unconfined (GPU-capable) session sandbox plus per-operation user approval for writes outside the workspace or to protected files.

zjuhbh1

Bundle

stavros-dsh-redteamer

Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).

CSI-entitymorton1

Bundle

dsh-cli-store

A security-conscious registry and installer for external CLI tools exposed through DeepSeek Harness.

Harzva1

Bundle

dsh-disk-audit

Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.

zoahdev1

Bundle

dsh-session-allow

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)

AnakinCao1

Bundle

@mkaliezz/dsh-dependency-firewall

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

MkaliezZ1