dsh-write-protect
DeepSeek Harness sandbox extension for workspace write protection and granular path permissions.
Install
$ dsh plugin --profile web add azazo1/dsh-write-protectPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Protects subpaths (e.g., .git, secrets) from being modified by models or sandboxed commands using gitignore pattern syntax
- Grants access to declared external writable root directories without switching to danger-full-access mode
- Supports workspace-level .readonly rules files to define local write-protection policies
- Provides a request_writable_path tool enabling models to request session-scoped write access with approval
- Features a session UI tab to inspect, manually grant temporary writable paths, or revoke granted permissions with model notifications
- Hardens macOS Seatbelt profiles against sandbox escape via LaunchServices broker
Useful For
- Preventing LLMs from inadvertently corrupting or overwriting version control metadata like .git during coding sessions
- Permitting write access to sibling build or scratch directories outside the workspace while keeping general sandboxing enabled
- Enforcing strict read-only rules across enterprise or repository workspaces with per-directory authorization workflows
Who It Fits
- DeepSeek Harness developers working on multi-repository projects or sensitive repositories
- Engineers requiring fine-grained sandbox filesystem boundaries without full unsandboxed permissions
Documented Limitations
- Windows bash/pwsh execution does not support kernel-level subpath protection or external write roots (write/edit tools still enforced)
- Linux Landlock fallback runner cannot enforce subpath write protection for CLI commands
- Granted permissions are session-scoped and held in-memory without persistent configuration storage
- Plugin protections are completely bypassed when running under danger-full-access mode
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 26 development, 12 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- azazo1/dsh-write-protect
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 1bb99b1 · 2026-10-15
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 4GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-12
- Last release
- 2026-10-03
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →LLM-supervised persistent memory and graph-based recall integration bundle for DeepSeek Harness.
View plugin →