dsh-auto-approve
Automatic LLM-based review of sandbox escalation requests with circuit breakers and an /approve slash command.
Install
$ dsh plugin --profile web add /home/xiuyuaned/dsh-plugins/dsh-auto-approvePlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Intercepts sandbox escalation requests to perform automated LLM policy reviews
- Evaluates real user authorizations and checks risk taxonomies including exfiltration, credential probing, and destructive actions
- Implements fail-closed behavior for timeouts, malformed outputs, and review errors
- Provides a turn-based circuit breaker to trip consecutive or excessive denials
- Offers an /approve slash command and UI question menu to authorize single-use retries for denied actions
- Integrates web UI elements including a session-header review status chip, composer-bar auto-mode toggle, and a dedicated settings panel
- Persists denied escalation histories in per-session JSONL stores
Useful For
- Automating safe sandbox permission escalations without interrupting user workflows for routine commands
- Enforcing policy compliance and inspecting tool call arguments prior to elevated execution
- Quickly reviewing and selectively unblocking rejected tool executions via /approve
Who It Fits
- DeepSeek Harness developers working in interactive sandbox environments
- Users seeking automated Codex Guardian-style security review pipelines for agent tool calls
- Power users managing sandbox permissions across web and terminal profiles
Documented Limitations
- Full command inspectability depends on session tool/call event resolution via callId; otherwise falls back to justification and recent transcript tail
- Reasoning-heavy models may deplete maxTokens on reasoning output and fail closed unless reasoning effort is disabled or token limits are increased
- Manual approval grants are single-use, in-memory, and will not survive application restarts
- Does not override harness sessions configured with a deterministic 'never' approval policy
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 2 runtime, 1 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub did not report an SPDX license for this repository snapshot.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- xiuyuan18/dsh-auto-approve
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- cb559e3 · 2026-08-25
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-25
- Last release
- 2026-08-25
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →Persistent multi-model Agent teams and bounded DAG workflows with GUI controls for DeepSeek Harness.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →