dsh-auto-review
Second-model approval reviewer for DeepSeek Harness that returns structured allow/deny verdicts with fail-closed fallback and session-log auditing.
Install
$ dsh plugin --profile web add "github:PerryLink/dsh-auto-review#main"Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Reviews AI-policy approval requests through a read-only reviewer subagent with structured decision, reason, and risk-level output.
- Uses configurable per-tool policies, regex risk rules, reviewer timeouts, budgets, risk thresholds, and a rejection circuit breaker.
- Falls back according to configurable policy when review fails; the documented default is rejection.
- Adds /auto-review controls for enabled state, status, and one-shot approval context.
- Records auto-review decisions and rejections for session-log audit, with documented compatibility degradation when ignorable event markers are unavailable.
- Provides an optional Web session-header review panel and an optional invariant companion.
- Includes dsh-eval, a YAML-driven CLI for headless DSH agent evaluation with trace collection and assertions.
Useful For
- Require a second-model review before selected tool requests are approved.
- Route sensitive or irreversible operations to human approval or deterministic rejection rules.
- Give the calling agent an explanatory denial reason rather than silently rejecting a request.
- Monitor per-session auto-review state, recent verdicts, budgets, and denial patterns.
- Run repeatable YAML-defined evaluations of headless DeepSeek Harness agent sessions.
Who It Fits
- DeepSeek Harness users configuring approval workflows.
- Teams building policy-driven agent tool-use controls.
- Plugin developers and evaluators who need headless DSH agent test suites.
Documented Limitations
- Requires DeepSeek Harness 0.1.0-rc.8 according to its declared compatibility metadata, plus Node.js ^22.19.0 or >=24.0.0.
- Reviewer operation requires a working LLM route; failures use the configured fallback policy.
- The reviewer is model-based advisory policy, not a security kernel; the README recommends human or never policies for irreversible operations.
- Reviewer context redaction is key-name based rather than content based.
- The optional invariant companion requires an invariants service and is not provided by the plain web profile.
- On released rc hosts that drop the session-event ignorable marker, documented audit logging degrades to an in-memory mirror for the session.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 20 runtime, 28 development, 12 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as Apache-2.0.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- PerryLink/dsh-auto-review
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 24ca8f7 · 2026-08-22
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 73GitHub stars
- Forks
- 1
- Open issues
- 4
- Last commit
- 2026-08-22
- Last release
- 2026-08-21
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
A native local SQLite taskboard plugin for DeepSeek Harness with a Web UI, agent task tools, CLI, and automation.
View plugin →Governance-powered AI-agent task execution framework with a DeepSeek Harness plugin integration.
View plugin →A DeepSeek Harness bridge that runs unmodified Pi ecosystem extensions as native DSH plugins.
View plugin →DeepSeek Harness plugin that bridges a local-shell-mcp service into DSH with shell, file, browser, remote-worker, and Live Workspace tools.
View plugin →