← DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-auto-review

Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed fallback and session audit logging.

UI & ProductivityTerminal & TUIDeveloper ToolsBrowser & WebSecurity & PolicySkills & WorkflowsRemote Execution
235GitHub Stars2ForksUpdated2026-10-10

Install

$ dsh plugin --profile web add github:PerryLink/dsh-auto-review

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-auto-review is an approval answerer plugin for DeepSeek Harness that intercepts tool approval requests and routes them to a read-only reviewer subagent. By evaluating streamed tool arguments, workspace context, and regex risk rules, it returns structured allow or deny decisions. It features fail-closed fallbacks, per-turn budget controls, a rejection circuit breaker, an interactive web review panel, a companion CLI evaluation runner (dsh-eval), and a deterministic MCP server.

Key Capabilities

  • Intercepts approval/request waterfall with an automated second-model answerer
  • Spawns a read-only reviewer subagent restricted to inspection tools (read, glob, grep)
  • Configurable per-tool routing policies (ai, human, never) and regex-based risk rules
  • Fail-closed defaults with deny-reason feedback returned to the calling agent
  • Rejection circuit breaker and per-turn evaluation and failure budgets
  • Session command (/auto-review) for managing state, viewing metrics, and granting one-shot approvals
  • Web review panel integrated into conversation session header via session projections
  • Bundled dsh-eval CLI for YAML-driven agent regression tests and standalone rule-based MCP server

Useful For

  • Automating safe tool executions (such as bash and file writing) without manual human approval
  • Enforcing strict safety boundaries and blocking high-risk commands (e.g. force push or recursive deletion)
  • Providing auditable verdict logs and actionable deny reasons back to the main agent for adaptive behavior
  • Running regression test suites for agent evaluation via dsh-eval

Who It Fits

  • Developers seeking automated yet auditable sandboxed agent workflows in DeepSeek Harness
  • System administrators and safety teams defining policy rules and circuit breakers for automated tools
  • Engineers testing agent performance using headless evaluation suites

Documented Limitations

  • Requires a functioning LLM route for the reviewer subagent, falling back to configured fallback policy if unavailable
  • Settings are read from Cordis patch configuration rather than ~/.dsh/settings.yaml
  • The standalone MCP server path runs deterministic rules and cached verdicts only, lacking model subagent capabilities
  • Hosts lacking ignorable session event envelope support degrade audit events to in-memory mirrors
  • Reviewer child tool names specified in configuration must exist in the active profile

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 18 runtime, 29 development, 16 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as Apache-2.0.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Prepare Script Detected

package.json declares a prepare lifecycle script that may run during relevant package installation workflows.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
PerryLink/dsh-auto-review
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
2b931b8 · 2026-10-10

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
235GitHub stars
Forks
2
Open issues
13
Last commit
2026-10-10
Last release
2026-10-10
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app