dsh-auto-mode
Sandbox-first automatic permission policy and risk classifier for DeepSeek Harness.
Install
$ dsh plugin --profile web add @nanmicoder/[email protected]Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Adds a dedicated 'Sandbox Auto' permission preset backed by workspace-write sandboxing
- Automatically allows safe workspace execution including package installation, local git commits, builds, and test runs
- Classifies risky actions such as pre-existing file deletions, ephemeral package executions (e.g., npx/bunx), and network access
- Tracks session-created filesystem artifacts to permit automated cleanup while protecting existing workspace data
- Supports temporary, bounded one-shot permission widening (`allowed-once`) for explicitly authorized out-of-workspace tasks
- Propagates sandboxed permissions to in-process sub-agents and workflow executions under parent supervision
Useful For
- Automating repetitive approval prompts for sandboxed builds, tests, and dependency installs in DeepSeek Harness
- Safely delegating multi-step agent workflows without granting full unrestricted host access
- Enforcing fine-grained deletion and external write policies during automated code generation
Who It Fits
- Developers looking for automated Harness workflows without sacrificing file sandbox boundaries
- Users managing complex sub-agent setups requiring strict permission inheritance
- Engineers migrating legacy sandboxed auto-permission workflows
Documented Limitations
- Repository is archived and maintenance has ended; no future updates or upstream host compatibility fixes are planned
- Cannot intercept actions executed outside ctx.tools or package lifecycle hooks running prior to plugin initialization
- File sandbox does not inherently limit read operations or external network connectivity
- Third-party patch utilities without official sandbox contracts require manual approval
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 33 development, 9 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
GitHub reports this repository as archived.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- NanmiCoder/dsh-auto-mode
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 907d663 · 2026-09-30
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 164GitHub stars
- Forks
- 7
- Open issues
- 4
- Last commit
- 2026-09-29
- Last release
- 2026-09-29
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed fallback and session audit logging.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Agent skill for DeepSeek Harness that turns ideas, plans, and codebases into interactive architecture diagrams.
View plugin →