← DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-approve-for-me

Rule-gated sandbox auto-approval plugin for DeepSeek Harness with optional LLM reviewer and native fallback.

UI & ProductivityTerminal & TUIDeveloper ToolsBrowser & WebSecurity & PolicySkills & WorkflowsRemote Execution
18GitHub Stars1ForksUpdated2026-09-12

Install

$ dsh plugin --profile web add dsh-approve-for-me@latest

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-approve-for-me is a DeepSeek Harness plugin designed for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk security checks, literal command-prefix matching, and an optional tool-free LLM reviewer. Every approved command is granted a one-time 'allowed-once' scope, and any unapproved, ambiguous, or risky operations safely fall back to native human approval.

Key Capabilities

  • Rule-gated evaluation of Shell and PowerShell sandbox escalations
  • Fixed high-risk command detection and blocking from auto-approval
  • Optional tool-free LLM reviewer utilizing session model or custom provider
  • Grants strictly one-time execution permissions ('allowed-once') without persistent access
  • Web settings card integration via loopback RPC and Settings service
  • Full headless profile support via YAML configuration

Useful For

  • Automating safe read-only inspection commands (e.g., git status, git diff) in sandbox environments
  • Reducing repetitive human confirmation prompts during automated coding workflows
  • Enforcing policy boundaries with LLM-assisted verification before command execution

Who It Fits

  • DeepSeek Harness users seeking streamlined sandbox command workflows
  • Developers looking for automated, policy-constrained Shell and PowerShell executions

Documented Limitations

  • Does not replace human approval for unmatched, ambiguous, or flagged high-risk commands
  • Command prefix allowlist is empty by default and requires manual configuration
  • Web settings card is restricted to loopback connections
  • Grants access only on a one-time basis rather than granting broad persistent permissions

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 1 runtime, 29 development, 17 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as MIT.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
timeance/dsh-approve-for-me
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
b6da503 · 2026-09-25

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
18GitHub stars
Forks
1
Open issues
0
Last commit
2026-09-12
Last release
No release detected
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app