DeepSeek Harness Plugin: dsh-pi-review

`dsh-pi-review` is an open-source code review plugin for DeepSeek Harness, designed to address the risks of local file modifications and sensitive information leakage that can occur when directly running an LLM to review code. The plugin registers a root Agent tool, launches an independent Pi Worker in Harness's read-only sandbox, and freezes a Git snapshot to ensure that the review process is secure and isolated. It supports multiple Git scopes (such as unstaged and staged), allowing Pi to analyze changes in read-only mode only and return structured review results. Note that while the sandbox protects local files, the contents of code changes are still sent to the configured model provider, making it unsuitable for reviewing highly sensitive code.