dsh-autogate
Layered auto-approval plugin for DeepSeek Harness combining deterministic L0 rules and LLM review on top of the workspace-write sandbox.
Install
$ dsh plugin --profile web add github:wangxing-git/dsh-autogatePlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Layered decision-making pipeline across L0 deterministic rules, L1 LLM classifier, and L2 escalation handling
- Two operating presets: auto-ask (semi-automatic with human escalation fallback) and auto-full (fully autonomous LLM adjudication)
- Fail-closed evaluation on LLM timeout, formatting errors, or classifier failures
- L0 zero-overhead rules blocking privilege escalation, self-destruction, and sensitive credential exfiltration
- Subagent permission inheritance tracing back to the top-level parent session authority
- Interactive in-browser approval trail overlay (shell.overlay) displaying real-time decision badges and tool call logs
- Hot-reloading configuration integrated with DSH plugin settings and custom classifier endpoints
Useful For
- Reducing repetitive manual confirmation prompts during autonomous coding and testing workflows
- Enforcing strict non-bypassable workspace-write sandboxing while allowing safe build and test commands
- Auditing and inspecting tool execution decisions and policy escalations through an in-session overlay
Who It Fits
- Developers seeking streamlined autonomous execution in DeepSeek Harness without compromising security boundaries
- Teams requiring deterministic safety barriers and audit trails for agent tool executions
Documented Limitations
- Preflight checks default to false and must be explicitly enabled to run pre-sandbox deterministic and LLM filtering on standard calls
- Prompt injection defenses and LLM classifiers are heuristic; adversary prompts or TOCTOU symlink races remain reliant on the underlying OS sandbox
- Credential detection may miss long tokens lacking known prefixes or standard character patterns
- In auto-full mode, LLM review decisions are terminal without manual prompt popups
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 29 development, 18 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- wangxing-git/dsh-autogate
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 6d6b8e8 · 2026-10-23
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 3GitHub stars
- Forks
- 0
- Open issues
- 1
- Last commit
- 2026-10-17
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →