dsh-safe-tool
AI-powered command approval plugin for DeepSeek Harness that intercepts tool calls with a read-only subagent.
Install
$ dsh plugin --profile web add ./dsh-safe-tool # 安装到 web profilePlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Intercepts tool execution via tools/pre-execute hooks
- Runs an isolated, read-only subagent with zero tool permissions for safe evaluation
- Enforces structured JSON outputs for approval and denial decisions
- Loads and hot-reloads customizable criteria from approval-criteria.md
- Supports deny-list and allow-list filtering modes with regular expression bypass rules
- Caches approval decisions for 60 seconds per session, tool, and argument set
- Falls back to human interactive approval on AI failure with automated timeout refusal
- Provides a Web UI configuration card in the Harness Settings view
Useful For
- Preventing catastrophic or destructive CLI commands (like rm -rf, sudo, chmod) from running unsupervised
- Protecting sensitive environment files (.env, .ssh keys) and system paths from agent modification
- Adding an automated policy check layer before autonomous agents execute external bash or write tools
Who It Fits
- Developers running autonomous agent workflows with write/terminal permissions
- Security teams defining compliance and safety boundaries for DeepSeek Harness agents
Documented Limitations
- Relies on LLM reasoning and prompt criteria which may require tuning to avoid false positives or negatives
- AI evaluation adds slight latency per uncached tool call invocation
- Requires manual adjustment of default criteria files if legitimate heavy build/file operations are blocked
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 16 runtime, 7 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub did not report an SPDX license for this repository snapshot.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- GoshawkGGGG/dsh-safe-tool
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 7950b03 · 2026-09-29
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-26
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →