sandbox

dsh-auto-review

PerryLink

Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).

dsh-sandbox-tester

Sutera-Diffusus

DSH sandbox tester: process-isolated testing ground for DeepSeek Harness

dsh-plugin-multi-root-workspace

cherrchen

多文件夹 workspace：让 DSH（DeepSeek Harness）的 Agent 不只能读写主目录，还能同时读写你添加的其他文件夹。Multi-folder workspace for DeepSeek Harness: let the agent read and write several folders at once, not just the primary one.

dsh-acl-sandbox-patch

masknull

DSH 0.1.7 Windows ACL 沙箱在非系统盘工作区下全部命令 spawn 前失败的临时修复插件——不动任何系统 ACL，恢复 workspace-write。 | Temporary fix for the DSH 0.1.7 Windows ACL sandbox failing on non-system-drive workspaces (grantWrite / SetNamedSecurityInfoW Win32 5) — restores workspace-write without touching system ACLs. 支持 DSH 0.1.7-rc.1+。

deepseek-harness-blaxel-sandbox

blaxel-ai

Blaxel sandbox execution plugin for DeepSeek Harness

dsh-session-allow

AnakinCao

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage) + right-panel auto-open guard

dsh-approve-prefix

azazo1

按单命令前缀自动放行 DSH 沙箱提权请求, 含管道与链式的命令一律转人工审批.

dsh-plugin-pyrun

cup113

DeepSeek Harness（DSH）插件：Python 快捷执行工具，源码经 stdin 直灌 `python -X utf8 -u -`，一步返回结果，全链路 UTF-8，支持后台作业与沙箱提权。

dsh-sandbox-escalation-guard

iimaguest

DeepSeek Harness plugin: stops the sandbox escalation fields being advertised to a model when the calling session cannot grant them, fixing the retry loop known models fall into at danger-full-access.

dsh-gpt-compat

YaoaY

DSH 的 GPT/Codex 沙箱提权参数兼容插件 | Fail-closed GPT/Codex sandbox escalation compatibility for DeepSeek Harness