dsh-perm-guard
Auto-approval permission guard and firewall tier for DeepSeek Harness operations.
Install
$ dsh plugin --profile web add "github:a903067276-rgb/dsh-perm-guard#main"Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Dual operating modes including Standard (trust directory bounded) and Aggressive (location-unrestricted safe operations)
- 11 granular tri-state category switches (auto, ask, deny) for file edits, git, builds, and privilege actions
- Pre-execution interception firewall enforcing human prompts on destructive commands like rm -rf, disk wiping, and curl-pipe-sh
- Composer tool-row toggle and dedicated settings UI with persistent configuration in ~/.dsh/perm-guard.json
- Session audit trail tracking decisions, timestamps, and command summaries
Useful For
- Streamlining automated coding and build workflows without repeatedly prompting for safe edits
- Guarding against accidental destructive commands and privilege escalation during autonomous agent runs
- Configuring customized directory-based trust boundaries for multi-repository development
Who It Fits
- DeepSeek Harness developers seeking reduced prompt fatigue while maintaining safety boundaries
- Engineers running continuous subagent or automated coding sessions in DSH web
Documented Limitations
- Cannot enforce OS-level network fencing beyond regex pattern matching for download-execute syntax (e.g., curl|sh)
- Terminal sessions, subagent spawning, model calls, and MCP tools fall outside the host approval system
- Recent in-memory audit log is capped at 60 entries and resets upon restart
- Requires DeepSeek Harness 0.1.7+ or 0.2.0+ for current v0.4.x releases
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- a903067276-rgb/dsh-perm-guard
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 716b47d · 2026-10-08
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 3
- Open issues
- 0
- Last commit
- 2026-10-01
- Last release
- 2026-09-29
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →