Community directory previewDeepSeek Harness is in developer preview
DP

dsh-permission-rules

PluginConfirmed pluginCommunity

PerryLink/dsh-permission-rules · updated today

Installation

dsh plugin --profile web add "github:PerryLink/dsh-permission-rules#main"
dsh plugin --profile web add dsh-permission-rules
dsh plugin --profile web add ./dsh-permission-rules-
dsh plugin --profile web add github:PerryLink/dsh-permission-rules

Plugins in this repository

  • dsh-permission-rulesv0.6.12✓

    Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.

    package.json
    package.json
    dsh.bundle.patch
    cordis.patch.yml
    Official core packages (12)
    • @deepseek-ai/cordis^4.0.2shared
    • @deepseek-ai/dsh-agent>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-client-connection>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-client-locale>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-client-ui-settings>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-client-web>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-commands>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-llm>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-session>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-tools>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/dsh-typert-protocol>=0.1.2-rc.1 <0.2.0shared
    • @deepseek-ai/schemastery^3.18.2shared

Paths are pinned to commit f7656a4cb60f

Overview

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

High risk
Checked commit
f7656a4cb60f
Evidence Score
85/100
Static risk
High risk
Files scanned
3
Findings
3

Evidence breakdown

Source provenance25/25
Install documentation25/25
Maintenance18/20
Compatibility evidence14/20
Security signals3/10

Compatibility confidence: Limited

Install-time scripts (1)
  • preparenode scripts/prepare.mjs
Findings (3)
  • Highinstall.script
    package.jsoninstall-time
    "prepare": "node scripts/prepare.mjs"
  • Mediumobfuscation.child-process
    scripts/prepare.mjs:7obfuscation
    import { spawnSync } from 'node:child_process'
  • Mediumobfuscation.child-process
    scripts/prepare.mjs:24obfuscation
    const result = spawnSync(process.execPath, [bin, ...args], { stdio: 'inherit' })
Not run
  • Dependency advisory database scan
  • Installation execution test
  • Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0