dsh-dependency-firewall

Manifest valid

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

hasBundlePatch

dsh-dependency-firewall

Domain-specific dependency-installation guard for DeepSeek Harness.

v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.

High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.

Non-claims

no package is installed by this plugin;
no online reputation or CVE lookup in v0.1;
classification is bounded and deterministic, not complete supply-chain security.

Development

npm install
npm test

MIT

Comments

Loading…

Similar plugins

dsh-safeguard

by ZhijiangTang

DSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)

Development & InfrastructureSecurity & AuditManifest valid

★ 0

↓ 58/wk

MIT

JavaScript

Aug 16, 2026

dsh plugin --profile web add dsh-safeguard

dsh-plugin-firewall

by MkaliezZ

Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.

Manifest valid

★ 0

TypeScript

Aug 29, 2026

dsh plugin --profile web add @mkaliezz/dsh-plugin-firewall

dsh-always-require-tools-approval

by J0ss077

Stop. Confirm. Run. A DeepSeek Harness plugin that pauses selected tools and waits for your explicit approval before every execution.

Security & AuditDevelopment & InfrastructureManifest valid

★ 3

↓ 186/wk

MIT

TypeScript

Sep 6, 2026

dsh plugin --profile web add @j0ss077/dsh-always-require-tools-approval

dsh-injection-guard

by loeanxi

Source-aware prompt injection guard for DSH: tracks untrusted turn context, detects injection signals, scores sensitive sinks, and blocks high-risk tool calls with explainable audit logs.

Development & InfrastructureSecurity & AuditManifest valid

★ 2

↓ 95/wk

TypeScript

Aug 21, 2026

dsh plugin --profile web add dsh-injection-guard

dsh-plugin-precheck

by BaqiF2

该仓库暂未提供项目说明。

Development & InfrastructureTerminal & ClientsSecurity & AuditManifest valid

★ 1

↓ 217/wk

MIT

JavaScript

Sep 17, 2026

dsh plugin --profile web add dsh-plugin-precheck

dsh-plugin-gate

by 863683348

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 0

MIT

JavaScript

Sep 11, 2026

dsh plugin --profile web add dsh-plugin-gate