Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

Microsoft cross-platform sandbox support.

by wangzhaonan16

Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

by bingfengaaaaa

Jujutsu version control skill provider for DeepSeek Harness agent teams

by aleleppy

Native Leppy Loop bundle for DeepSeek Harness

by zhengqiuyang

Deterministic network egress gate for DeepSeek Harness — web fetches checked against a destination allowlist before they run

Session password lock plus an encrypted directory vault for DeepSeek Harness.

Restrict the file access of agents in any sandbox mode (read-only / workspace-write / danger-full-access / auto) to the session workspace, and ask the user to rule on cross-border access. Each session

by Phocinae

Pre-claim gate: a commit, push or tag claim like "tests pass" is checked against the session evidence ledger before it is written.

by zhengqiuyang

Signed chain-of-custody for DeepSeek Harness sessions — hash-chained, ed25519-signed records of what the agent actually did, commits bound into the chain

Replaces detected secrets (OpenAI, AWS, GitHub, PEM, Bearer) with deterministic, structurally valid honey tokens before they reach the model or the session file; adds manual marking for values the det

by Shark00I

Audits DeepSeek Harness plugins: a read-only pre-install check that grades a package S–D before it is installed, plus a runtime monitor that records plugin start/stop, sensitive tool calls and per-plu

Manual approval mode ("Manual Mode" / "Ask Mode").

by WindFromKadath

DSH plugin: archive the sessions of a workspace whose folder disappears, and bring them back (grouping included) when the folder returns.

by 863683348

DSH plugin health scorecard: quality & security audit, rankings and search across the dsh-plugin ecosystem.

by zjlww

Scoped, short-lived administrator access for DeepSeek Harness, without storing sudo passwords

by amwangfan

DSH Web Privacy Desensitization Guard Plugin: Status Monitoring Dashboard, Outbound Data Leak Detection Sandbox, and Gateway Route Management (with Privacy Gateway)

by Muggle8888

Read-only update auditing for DeepSeek Harness profile plugins

by YYfather

Secure credential vault for DeepSeek Harness: tokens never leave the host — the agent runs gh/npm/npx/node/git with the token injected in the environment. Manage from Settings → Credential Vault / Marketplace → Installed.

by ChenChen913

One-click local security checkup button for the DeepSeek Harness (DSH) Web UI: read-only checks (!!js config, third-party plugins, credential file perms, instruction files), severity-graded report, pl

by zhangnan

ChatGPT OAuth login and Codex usage for DeepSeek Harness

by GooDAnDReaDY

GitHub operations for DeepSeek Harness: releases, tags, a guarded API pass-through, sanitized mirror publication, workflow runs and repository settings.

by GIN0076

Pre-install review gate for DeepSeek Harness plugins: audit, approve the change plan, backup, then install (plugin pre-install review)

Support for the nono sandbox backend.