Articles tagged "Shell Security"

dsh-block-hanging-commands：在 Shell 执行前拦截会挂起的命令

2026-10-22 DeepSeek Harness plugin DeepSeek DSH dsh-block-hanging-commands admin-security Shell Security

DSH 智能体常因 git commit 无 -m、npm run dev、裸 REPL 等命令等待输入而导致整轮超时。dsh-block-hanging-commands 在 tools/pre-execute 阶段解析 Shell 调用，按 editor、git-editor、repl、server、watch 等规则拒绝会挂起的命令，并返回非交互替代写法。支持 web/headless/acp 多 profile 安装，可通过侧边栏或 cordis.patch.yml 配置 mode、pty、disabledRules。MIT 许可，维护者 acus9345。

DeepSeek Harness Plugin: dsh-jev-guard

2026-10-16 DeepSeek Harness plugin DeepSeek Harness dsh-jev-guard Shell Security Command execution interception Plugin Development

dsh-jev-guard is a security plugin for DeepSeek Harness (DSH), designed to prevent agents from accidentally deleting or overwriting user data. It uses L0 static hard rules and the TypeSafe Jev model to perform a three-stage evaluation—hard rules, pre-filtering, and semantic judgment—before Shell command execution. Based on the evaluation, the system returns one of four states: allow, revise, block, or escalate, providing interception, rewriting, or human confirmation capabilities. The plugin supports WSL/Linux and Windows; after installation, it can be debugged and monitored via CLI, and it adopts a fail-open design to ensure system availability.