Seguridad y permisos
Los plugins de Seguridad y permisos protegen DeepSeek-Harness (dsh) frente a llamadas a herramientas arriesgadas y plugins maliciosos. Esta categoría cubre control de herramientas basado en políticas con niveles allow/deny/ask, escáneres previos a la instalación para paquetes de plugins y tarballs de npm, protección contra inyección de prompts y filtración de secretos, ocultación de telemetría y registros de auditoría encadenados por hash.
56 plugins encontrados
dsh-plugins (dsh-secret-redactor)
damonkoy/dsh-plugins
Automatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.
dsh-plugins (dsh-approve-for-me)
damonkoy/dsh-plugins
Automated approval review: auto-approve read-only tools, auto-deny dangerous commands, fail-closed policy engine.
dsh-plugin-sentinel
botonj/dsh-plugin-sentinel
Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.
dsh-auto-reviewer
antarescorn/dsh-auto-reviewer
Codex-style auto-review permission mode: adds an auto-review preset that auto-approves safe sandbox escalations, asks on risky or ambiguous ones, and rejects critical unconfirmed operations.
dsh-permissions
940842546/dsh-permissions
Claude Code-style permission rules engine: hard/deny/ask/allow tiers with a hard tier above full access, workspace-scoped rules, wildcard path protection, and a visual staged editor; rules persist in settings.yaml.
dsh-plugin-gate
863683348/dsh-plugin-gate
Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".
dsh-gov
863683348/dsh-gov
Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.
dsh-lan-pass
x2802490130-prog/dsh-lan-pass
Una puerta de contraseña LAN para la Web UI: los teléfonos y tabletas en la misma red inician sesión con una clave compartida y ven las mismas sesiones en tiempo real, con un polyfill de randomUUID integrado para orígenes HTTP sin cifrar.