by mhdfy1988

ChatGPT/Codex authorization plugin for DeepSeek Harness

Uses an isolated LLM review to approve or reject DSH sandbox permission requests.

by aa2246740

Codex-aligned Auto-review and Approve for me mode for DeepSeek Harness

Three-tier deny/ask/auto gate for the computer-use (cua-driver) tool family: each tool category gets one segmented control in Settings, and an allow list or deny list overrides the tiers per tool name

by pengxuding

Plugin value auditor: pre-install review (source scan + LLM judge) and post-install audit of installed bundles, with model-switch re-audit reminders.

by devil233-ui

Put DeepSeek Harness sessions into the built-in Auto review permission preset: new sessions at creation, existing root sessions when they are restored.

by NattoCB

Tools guard that moves agent-issued `rm` targets to the macOS Trash instead of deleting, with a shell-aware lexer covering compound and disguised commands; a switch in Settings → General turns it off.

by AHIOSUZ

Applies per-workspace default Agent and permission presets to new root sessions automatically (Settings - Workspace defaults), using only official extension points.

by Vladimir-Kryshchenko

Static linter for DeepSeek Harness plugin HTTP routes: every webServer route bypasses the /api gateway's trust check and must pin the Host to loopback itself. PASS/WARN/FAIL per route, as a CLI and a

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-f

by lone-wolf-akela

DSH bundle: a copy-on-write permission preset that runs shell commands in a per-workspace Sandboxie box

by uckkk

Camping Fire Safety

by rrrrrredy

Unofficial alpha execution-fidelity guard bundle for DeepSeek Harness.

by tancheng33

Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceili

Pre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.

by mad-zero-mess

Codex-style global Enter to approve a pending DeepSeek Harness authorization request.

by GooDAnDReaDY

Background security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectu

by KSF1216

Harness-neutral Traditional Chinese enforcer and offline converter (skill / DSH bundle / CLI). Checks one script axis one way at a time plus two filter axes: Cantonese colloquialisms and Japanese-only kanji and words. Converts 繁↔簡, 粵語→書面語, 日文→中文, each opt-in, plus an optional wording preference. Single-file offline HTML, no runtime deps.

by Xylocarpro

Force DSH to delete via the Recycle Bin, disable del/rm/Remove-Item, and stop to prompt the user when the Recycle Bin or disk is full.

by Gdenich

DSH plugin: OpenCode Go API-key pool with quota-driven automatic switching, a Settings tab and a composer quota badge.

One-time Full access switch for DeepSeek Harness: new sessions (workspaces and conversations) start with danger-full-access and skip the per-session Full access confirmation; installable as a dsh bund

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wi

by beibeihk

Community plugin for event-grounded, privacy-first agent observability and reliability analysis in DeepSeek Harness.