DeepSeek Harness Plugin: Enforcing Explicit Approval for Tool Execution
The DeepSeek Harness plugin "Always Require Tools Approval," maintained by J0ss077, is designed to enforce user approval before an Agent invokes shell commands such as bash or pwsh via an interception mechanism. Its core features include approval interception, single-use approval (one vote per request), and sub-agent request forwarding. Users must configure the list of monitored tools in `settings.yaml`; the plugin takes effect after installation and restarting the DSH GUI. It adopts a fail-closed security model, refusing execution without approval, and is suitable for scenarios requiring strict control over Agent behavior.
Read More