dsh-safety
A DeepSeek Harness filesystem safety plugin with execution-time guards, recoverable deletion, approval workflows, snapshots, rollback, and restart checks.
Install
$ dsh plugin --profile web add @suagr_xl/dsh-safety # install from the official npm registry / 从官方 npm registry 安装Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Guards destructive tool calls at execution time, including supported shell commands and scanned run_code bodies.
- Requires one-shot, time-limited human approvals for sensitive operations.
- Provides trash-based safe_delete with preview and undo.
- Creates and transactionally restores plugin-composition snapshots.
- Checks composition files for UTF-8, mojibake, JSON errors, and duplicate plugin row IDs before restart.
- Provides audit journal, status, approval, policy, snapshot, restore, and recovery commands through DSH tools and a standalone CLI.
Useful For
- Prevent accidental deletion or modification of DSH profile and composition files.
- Require explicit human approval before an agent performs sensitive writes or deletes.
- Recover deleted files through trash and undo.
- Snapshot a DSH composition before plugin changes and roll back after a failed change.
- Diagnose configuration issues that can prevent DSH from starting.
Who It Fits
- DeepSeek Harness users managing plugins and profiles.
- Teams seeking human-gated safeguards for agent-driven filesystem operations.
- Developers who need CLI-based recovery when DSH is unavailable.
Documented Limitations
- Requires a working DeepSeek Harness installation for plugin use; repository installation requires Node.js 22+ and pnpm.
- The guard intercepts model tool calls, not commands run directly by the user in a terminal.
- run_code inspection is text-based and may be bypassed by dynamic or obfuscated code.
- Approval state can be tampered with by a same-process plugin.
- It is described as a safety net, not a sandbox; separate DSH sandboxing or approval controls are needed for containment.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- sugarxl/dsh-safety
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 3fd8e7c · 2026-09-15
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-19
- Last release
- 2026-08-19
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →DSH undo and crash-recovery plugin with snapshots, rollback, Safe Mode, and offline Windows tools.
View plugin →Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →