dsh-agent-approval
Automated security approval and tool execution review plugin for DeepSeek Harness.
Install
$ dsh plugin --profile web add /path/to/dsh-agent-approvalPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Adds an 'Auto Approval' preset to the DSH /permission menu
- Evaluates sandbox privilege escalations via direct LLM calls, isolated judge subagents, or TypeSafe Jev
- Implements fail-closed behavior on timeouts, agent crashes, or low confidence
- Provides an optional per-call tool review mode before execution
- Displays per-session audit trails and allowlisting rules within a dedicated conversation UI tab
- Supports configurable judge models, providers, and timeout thresholds
Useful For
- Eliminating manual approval prompts while maintaining sandbox safety during long agent tasks
- Auditing and reviewing automated tool execution decisions per conversation session
- Integrating strict subagent or TypeSafe Jev structured decision policies for DSH tool calls
Who It Fits
- DeepSeek Harness users requiring automated background approvals for workspace actions
- Developers seeking policy-based sandbox escalation review without constant human confirmation
- Security-focused teams running automated workflows in DSH
Documented Limitations
- Requires DeepSeek Harness runtime environment with compatible Typert host support
- Full access automatic review mode requires a configured TypeSafe Jev backend and API key
- Menu glyph patching requires running an optional post-install script
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 0 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- MoonlitDropOfBlood/dsh-agent-approval
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 5acfdfe · 2026-10-03
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 3GitHub stars
- Forks
- 1
- Open issues
- 0
- Last commit
- 2026-09-30
- Last release
- 2026-09-30
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Self-hosted AI agent runtime and MCP bridge providing sandboxed execution, memory, and audit logs.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →