dsh-permission-matrix
by — · zhang8019/dsh-permission-matrix
★ 0 Stars
⑂ 0 Forks
Original language: English
About
Turns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.
Similar plugins
Auto-approval permission guard: a middle tier between workspace-write and danger-full-access — auto-allows safe operations inside trust directories, always asks a human for destructive ones, with 11 p
★ 0
dsh plugin --profile web add dsh-perm-guardSemantic risk grading and progressive authorization: classifies tool calls into safe/risky/redline, asks before irreversible actions, auto-allows only approved-and-succeeded signatures.
★ 0
dsh plugin --profile web add dsh-risk-gateRuntime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and ap
★ 0
dsh plugin --profile web add dsh-egress-guardFine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions,
★ 0
↓ 436/wk
dsh plugin --profile web add @mrweicodes/dsh-permgateby Andy8647
Automode for DeepSeek Harness: a fourth permission preset — full access with an LLM classifier as the only gate before every tool call.
★ 3
↓ 264/wk
BSD-3-Clause
TypeScript
Sep 9, 2026
dsh plugin --profile web add dsh-auto-approvalFourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) with per-operation user approval for writes outside the workspace or to protected paths (.git/**, .env*); implem
★ 0
dsh plugin --profile web add dsh-full-with-approval