Consul Wrap：Consul 安全策略的自动化生成工具
Consul Wrap 是一个用于自动化生成和优化 Consul 安全策略的工具，由社区用户 @user_922b1001 维护，定位为 IT 运维与安全领域的辅助能力。它帮助开发者减少手动配置错误，提升安全治理效率。
Read MoreDeepSeek Harness Browser Automation Plugin: Security-First Web Interaction Capabilities
dsh-plugin-browser-use is a browser automation plugin for DeepSeek Harness (DSH). Built on Chromium and Playwright, it provides 15 core tools, including navigation, page interaction, and screenshots. Its core advantage is a security-first design: policies are re-evaluated after each action, strictly restricting file paths and network access while supporting allowlists, protocol restrictions, and private network control. Installation requires Node.js 22.19+ or 24+, and Chromium must be configured. This plugin provides DSH agents with secure and controllable web interaction capabilities.
Read MoreIntroducing the DeepSeek Harness Client Connection Authorization Plugin
`sperictao/dsh-client-connection-authz` is an authentication plugin for DeepSeek Harness (DSH), designed to provide fine-grained authorization for external client connection requests. It intercepts connection requests by injecting `ConnectionRequestAuthorizer`, enforces access control policies, and preserves the original connection behavior. The plugin includes local bypass protection and browser security validation mechanisms, and must be used together with an authentication package that implements the authorization logic. This solution is suitable for scenarios that require strict restrictions on remote access permissions, and is compatible with DSH 0.1.0-rc.x and the dependency range `^0.1.6-alpha.1`.
Read MoreDeepSeek Harness Permissions Rule Engine: dsh-permissions
dsh-permissions is a rule engine plugin for DeepSeek Harness that enables fine-grained security control. It supports four priority levels, layered global and workspace scopes, and rule management through a visual editor. Core features include wildcard matching for file paths, interception by command prefix, and general permission hard-deny mechanisms. All rules are persisted and injected into system prompts, with built-in safe defaults protecting sensitive directories and commands. The plugin is designed to narrow the sandbox scope and provide low-cost, fine-grained policy management.
Read More