dsh-perm-gate
Deterministic, fail-closed permission gate and sandbox policy manager for DeepSeek Harness.
Install
$ dsh plugin --profile web add dsh-perm-gatePlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Multi-tier deterministic evaluation chain spanning P0 hard-deny, bounded session grants, static rules, LLM risk classification, and interactive human asks
- Command argv decomposition with recursive shell detection (sh -c/bash -c), redirection checks, and dangerous flag matching
- Adds custom selectable session tiers such as 自动审查 (permissive) and permissive-full directly into the DSH composer picker
- Optional Windows AppContainer sandbox to isolate auto-allowed shell subprocesses with zero outbound network access
- Local HTTP/CONNECT proxy layer for inspecting and filtering outbound shell network traffic against configured policies
- Pre-execution file snapshotting with line-diff preview and restore commands in the DSH conversation tab
- Risk-graded LLM semantic classification with optional verdict learning and rule sedimentation
Useful For
- Enforcing strict security boundaries and preventing destructive operations like recursive deletions or credential leaks during autonomous agent runs
- Streamlining developer workflows using automatic permission grants for known benign commands while retaining interactive review for risky actions
- Isolating command line tool invocations inside restricted process sandboxes and proxying outbound network connections
Who It Fits
- DeepSeek Harness developers and power users executing shell commands and multi-tool agent workflows
- System administrators and security teams requiring deterministic guardrails, audit trails, and process containment
Documented Limitations
- Gate is active only when session permission preset is in gatePresets (default permissive/permissive-full); other tiers like danger-full-access cause the gate to stand down unless gatePresets is set to '*'
- Network proxy enforcement is cooperative and only intercepts clients honoring proxy environment variables, bypassing raw TCP or direct Node.js http/fetch calls
- Windows AppContainer sandbox feature is currently in beta and classic APIs are unavailable on Windows 11 25H2+ builds (fails closed)
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 3 runtime, 15 development, 6 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- drscrewdriver/dsh-perm-gate
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- c0beabd · 2026-10-24
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 4GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-24
- Last release
- 2026-10-22
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →