DeepSeek Harness plugin

dsh-auto-approve-hanihaha

Auto-approve mode for DeepSeek Harness: auto-grants approval requests (sandbox escalations, or everything) and adds an "自动审批" (auto-approve) option to the permission selector. Install with `dsh

Jump to install

Source facts

Repository
Hanihahaha/dsh-auto-approve
Latest update
Aug 17, 2026
Category
Security & Permissions
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/Hanihahaha/dsh-auto-approve
Plugin: dsh-auto-approve-hanihaha
Author: Hanihahaha

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only
README language

dsh-auto-approve

中文

A DeepSeek Harness plugin that adds an auto-approve permission mode and can automatically grant requests matching its sandbox-reason heuristic or all approval requests.

Features

  • Adds an Auto approve permission preset that preserves the workspace-write boundary.
  • Provides /auto-approve all|sandbox|off|status.
  • Adds a session-header control that cycles between off, sandbox-matched, and all approvals.
  • Intercepts the approval/request waterfall and returns allowed-once for the selected mode.

Install

# Install from the repository root.
dsh plugin --profile web add ".\dsh-auto-approve"

# Or, after publishing
dsh plugin --profile web add dsh-auto-approve

Restart dsh web after installation. The permission selector then exposes the Auto approve preset and the command and header control become available.

How It Works

LayerBehavior
Permission presetExtends @deepseek-ai/dsh-permission-presets with auto-approve using workspace-write plus ask.
Approval handlingIntercepts approval/request; the preset grants all requests, while manual sandbox mode grants requests whose reason text contains sandbox, all grants every request, and off grants none.

DSH has ask and never policies but no native auto-approve policy. This plugin implements auto-approval by short-circuiting the waterfall. never means reject, not auto-approve.

Security

  • all grants every approval request and is only suitable for trusted tasks.
  • Manual mode is process-local and returns to the default sandbox mode after restart.
  • The Auto approve preset remains constrained to workspace-write; requests outside the workspace still use escalation, although this plugin grants the resulting approval.