← DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

cc-safety-net

Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.

Terminal & TUIDeveloper ToolsSecurity & PolicySkills & WorkflowsRemote Execution
1.6kGitHub Stars84ForksUpdated2026-10-14

Install

No clear install command was found in the current repository evidence.

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
CC Safety Net (cc-safety-net) is a pre-execution guard for AI coding agents including DeepSeek Harness. It analyzes command intent prior to execution, intercepting destructive Git and filesystem operations (such as rm -rf or git reset --hard) as well as unauthorized reads of sensitive credentials and environment files.

Key Capabilities

  • Pre-execution command syntax parsing to detect nested or obfuscated destructive commands
  • Secret protection blocking read access to SSH keys, .env files, and cloud credentials
  • Configurable safety policy presets (Standard, Strict, Paranoid) and GUI configuration
  • Modular rulebook support for cloud and infrastructure tools including AWS, GCP, and Terraform
  • Native integration hook and Cordis patch configuration for DeepSeek Harness and other agent CLIs

Useful For

  • Preventing autonomous coding agents from running destructive Git or filesystem operations
  • Protecting sensitive developer credentials and local environment tokens from agent inspection
  • Enforcing consistent security boundaries across team members using shared repository policies

Who It Fits

  • Developers utilizing AI coding agents and autonomous coding assistants
  • Platform and security engineers managing AI developer tooling policies
  • Teams sharing repository-level safety constraints for automated agent runs

Documented Limitations

  • Does not act as an isolated process sandbox or monitor runtime network egress
  • Requires Node.js 18 or higher to execute the CLI hook and verification tooling

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 0 runtime, 14 development, 2 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as MIT.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Prepare Script Detected

package.json declares a prepare lifecycle script that may run during relevant package installation workflows.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
kenryu42/cc-safety-net
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
c90dec9 · 2026-10-14

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
1.6kGitHub stars
Forks
84
Open issues
1
Last commit
2026-10-14
Last release
2026-10-14
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app