dsh-approval-gate：DeepSeek Harness 自动审批门控
`dsh-approval-gate` 是 DeepSeek Harness 的一个沙箱越界自动审批插件，旨在平衡安全与效率。它利用判定模型预判操作风险，对常规行为自动放行，对硬性危险操作强制转人工。核心功能包括确认制学习、语义同类验证、热更新配置、文件回滚撤销及会话级快照管理。该插件通过自动化与人工确认的结合，确保开发流程安全且高效。
Read Moredsh-pnpm-build-control: Unified Management of pnpm Build Approvals in DSH Environments
`dsh-pnpm-build-control` is a management plugin for DeepSeek Harness (DSH), designed to address the maintenance overhead caused by pnpm’s blocking of build scripts during plugin installation or updates. It provides a unified build approval toggle in the DSH interface, allowing global build-script execution permissions to be enabled or disabled with a single click. When enabled, build-script approvals follow the original rules; when disabled, all dependencies, including indirect dependencies, are permitted to run build scripts. The plugin also provides CLI commands (such as `status`, `off`, and `on`) and fixes errors caused by repeatedly installing the same Git URL. Note that disabling approval modifies `pnpm-workspace.yaml`, which poses security risks, and uninstalling the plugin does not automatically revert these settings.
Read MoreDeepSeek Harness Plugin: Enforcing Explicit Approval for Tool Execution
The DeepSeek Harness plugin "Always Require Tools Approval," maintained by J0ss077, is designed to enforce user approval before an Agent invokes shell commands such as bash or pwsh via an interception mechanism. Its core features include approval interception, single-use approval (one vote per request), and sub-agent request forwarding. Users must configure the list of monitored tools in `settings.yaml`; the plugin takes effect after installation and restarting the DSH GUI. It adopts a fail-closed security model, refusing execution without approval, and is suitable for scenarios requiring strict control over Agent behavior.
Read More