dsh-seatbelt-sandbox
macOS Seatbelt (libsandbox) sandbox provider plugin for DeepSeek Harness replacing deprecated sandbox-exec.
Install
$ dsh plugin --profile web add /absolute/path/to/dsh-seatbelt-sandboxPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Native C11 loader calling macOS libsandbox APIs (sandbox_init) directly
- Drop-in Cordis patch replacement for @deepseek-ai/dsh-sandbox-local via cordis.patch.yml
- Dynamic SBPL profile generation matching DSH workspace-write and read-only permission modes
- Fail-closed execution model returning SANDBOX_UNAVAILABLE upon launcher or environment probe failure
- Self-testing probe verifying libsandbox availability prior to command execution
Useful For
- Enforcing kernel-level filesystem write protections during DSH agent tool execution on macOS
- Modernizing DSH macOS sandbox runtime to avoid reliance on deprecated sandbox-exec binaries
- Restricting command execution in DSH web profiles with strict workspace isolation
Who It Fits
- macOS DeepSeek Harness self-hosted users
- Developers needing secure local execution environments for DSH agents
- Security-focused teams running AI agent workflows on Apple Silicon
Documented Limitations
- macOS only; not usable on Linux or Windows environments
- Primary prebuilt binary support focuses on macOS arm64; darwin-x64 requires manual native compilation
- Git-based installations require local C compilation with macOS Command Line Tools
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 4 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as BSD-3-Clause.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- drscrewdriver/dsh-seatbelt-sandbox
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- f6d3ce7 · 2026-09-17
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-16
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →Free frontier LLM provider plugin for DeepSeek Harness with upstream probing and local OpenAI-compatible gateway.
View plugin →