dsh-gpt-compat
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
189 results
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
DSH plugin guard: on every plugin load checks profile bundle lists for duplicate loader entries (aggregate bundle + sub-plugins listed together → 'duplicate loader entry id' boot crash) and runs site-level health checks — known conflict pairs, vendor @deepseek-ai tree integrity vs lockfile, plugin @deepseek-ai junction integrity — guarding the 2026-08-18 and 2026-08-21 incidents. Read-only diagnostics.
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.
A project-agnostic multi-agent collaboration protocol for the DeepSeek Harness: loop guards that stop runaway agent loops, a six-field handoff format, risk-tiered review routing, and a fixed verify-commit-push-review-close sequence.
DeepSeek Harness bundle that routes real sandbox escalation prompts through a dedicated approval reviewer
Dangerous-operation policy, canonical output redaction, and security review for DeepSeek Harness.
DSH 规则执行引擎 v3:容器解析 AGENTS.md + 理解器 + 匹配机 + 执行框架
文档-代码一致性守护(Document-Code Consistency Guard):审计仓库的版本号/更新记录表/结构树/模块清单/测试计数/文档间交叉引用,检测漂移并按严重度输出修复建议。全程只读。
DeepSeek Harness 环境体检插件:磁盘/内存/延迟/缓存膨胀/插件版本落后检测,历史基线趋势对比。只读,不删任何东西。融入了 sys-doctor/pc-guardian 的体检方法论。
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
上下文治理一体化插件:/context 命令 + ctx.contextMeter 服务 + 剪枝工具(prune_candidates/apply/expand/guard/stats,合并自 dsh-agent-context-pruner)
Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.
高峰自动会话门:周末模式 + 高峰自动暂停 + 官方源二维判定 + 会话级冻结 + 后端自动重试。
Detects DSH plugin conflicts (duplicate mounts, failed/pending plugins, duplicate config row ids) at startup, auto-stops or restores the affected plugins, and shows a conflict report popup in the web UI. DSH 启动时检测插件冲突,自动停用/恢复冲突插件,并在 Web 界面弹出冲突报告。
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Enforced pain-point-check guard plugin for DeepSeek Harness: after two non-converged experiments on one problem it injects the three questions, denies non-investigative tool calls until they are answered in the reply text, and blocks same-direction retries
Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
Eight DeepSeek Harness plugins: persona, language guard, vision fallback, python workdir guard, windows encoding guard, cross-agent memory, image generation, and skill shell injection.
dsh-docker — typed, guarded container control for DSH: structured docker/compose tools, project-aware targeting, an approval gate for destructive ops, service-health context, and a replayable status-table renderer
Remind and block stale tool work until todo_write is reconciled in DeepSeek Harness
DSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources for malicious install scripts, credential theft, obfuscation, persistence and network callbacks before 'dsh plugin add', plus 12 destructive-command patterns and workspace-boundary checks against accidental deletion. | 安装安全闸门与数据保护闸:60 条静态签名规则(31 高危/24 中危/5 低危)扫描插件恶意行为、持久化与外传,12 种危险命令模式与边界检查拦截误删。