dsh-auto-approval
Adds a Trusted Auto permission preset for DeepSeek Harness that auto-approves narrowly defined harmless commands and operations in configured trusted areas.
Install
Awaiting GitHub sync
Repository Intelligence
AI-assisted, source-grounded explanation based on the public repository snapshot. It does not replace compatibility or security verification.
Key Capabilities
- Adds a `trusted-auto` permission preset to DSH permission settings and the `/permission` picker.
- Evaluates approval requests using recorded tool-call arguments rather than model-written justifications.
- Auto-approves configured harmless shell commands without shell metacharacters.
- Auto-approves qualifying filesystem write/edit targets within configured trusted areas.
- Resolves path containment through real paths to account for symlinks and junctions.
- Records auto-approval audit events and can log the matched decision rule.
- Defers unmatched, dangerous, malformed, oversized, or unavailable requests to the human approval handler.
Useful For
- Reduce repeated approval prompts for read-only inspection commands.
- Allow controlled work in approved directories outside the current workspace.
- Use a middle permission mode where Full Access would be too broad.
- Apply auditable one-shot approval automation in trusted local development sessions.
Who It Fits
- DeepSeek Harness users managing local development workflows.
- Teams or individuals who need configurable approval automation for trusted paths.
- Users who want a permission tier between Workspace Write and Full Access.
Documented Limitations
- Trusted areas are empty by default, so trusted-area automation is inert until configured.
- The plugin is explicitly scope control rather than a security boundary.
- Auto-approved operations run with the wider mode for that one call, equivalent to a human one-shot grant.
- It never denies requests; requests outside its rules defer to the deployment's normal human answerer.
- Shell metacharacters, write/fetch/merge Git operations, certain Git display commands, dangerous-pattern matches, and unsupported tools are not auto-approved.
- Its bundle patch must be kept synchronized with the DSH base permission preset table when DSH is upgraded.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 3 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 3 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 3 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Traceable source and registry metadata for this entry, kept separate from runtime verification.
- Source repository
- StyxNether/dsh-auto-approval
- Registry source
- Public GitHub repository
- Source snapshot
- ac529b1a3b52
- Artifact type
- plugin
- AI enrichment
- gpt-5.6-terra · 2026-08-14
- Prompt version
- dsh-plugin-enrichment-v3
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-14
- Last release
- —
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Schedule standalone coding tasks in fresh DeepSeek Harness Agent sessions, with workspace-scoped controls and durable run history.
View plugin →一个适用于deepseek-harness的插件，功能是显示当前账户余额以及当前会话预估的费用消耗 | A plugin for deepseek-harness that displays the current account balance and the estimated cost consumption of the current session.
View plugin →DeepSeek Harness Plugin and Agent Profile Package Index - Install dsh-plugin with just one command
View plugin →DSH snapshot and rollback plugin for configuration changes, with WebUI controls, chat actions, and offline PowerShell recovery tools.
View plugin →