dsh plugin --profile web add github:Snail-Turbo/dsh-android-sandbox
Plugins in this repository
dsh-userspace-bashv0.1.0-rc.5✓
User-space bash executor for hosts without a usable kernel runner: advertises a sandbox mode (so permission-presets and tool escalation surfaces work) but never confines — file-effect enforcement is delegated to the userspace-gate gates at tools/pre-execute
Workspace-write guard plugin: a pure-user-space equivalent of the workspace-write sandbox at the tool-call layer — denies write/edit and bash write-intent calls whose targets fall outside the session workspace and platform temp roots, following the session sandbox mode
DeepSeek Harness (dsh) normally keeps writes inside the workspace with kernel-backed sandboxes — Landlock / bwrap, the filesystem fence, Seatbelt, Windows ACL runners. If your device has a working kernel sandbox, you don't need this repo; the shipped sandbox already covers you.
Repository check result
Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.