deepseekplugins

DeepSeek Harness plugin

dsh-auto-approve-tomcatzh

Independent LLM reviewer for DeepSeek Harness approval requests

Security & Permissions
Jump to install

Source facts

Repository
tomcatzh/dsh-auto-approve
Latest update
Aug 21, 2026
Category
Security & Permissions
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-21

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/tomcatzh/dsh-auto-approve
Plugin: dsh-auto-approve-tomcatzh
Author: tomcatzh

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-auto-approve

Independent LLM review for DeepSeek Harness approval requests while the session's access mode is Auto Approve. The plugin adds that fourth permission preset on top of the official workspace-write sandbox. The other three access modes retain their original DSH behavior.

> Community project, not an official DeepSeek release. The current version targets DSH 0.1.0-rc.7, Node.js >=22.19, and macOS for reviewer command confinement.

Install

Replace default with your DSH profile name:

dsh plugin --profile default add github:tomcatzh/dsh-auto-approve

Git installs build from source through the package's prepare script. Restart the selected profile after installation.

Reviewer models run in the configured order, may inspect the local machine only through three read-only tools, and must return strict allow, ask, or deny JSON. ask, an empty model list, and complete reviewer unavailability preserve the normal human approval UI.

Configure model ordering and browser notifications under Settings → Auto Approve, save, then select Auto Approve from the current session's access-mode menu. The recent decision audit is secret-free.

Decision behavior

  • allow approves the current request once.
  • deny rejects it.
  • ask, disabled review, missing reviewers, invalid output, timeouts, and reviewer failure preserve the normal human approval UI.
  • Reviewer inspection tools are read-only and network-denied on macOS. If full confinement is unavailable, the tool fails and review falls back to a human.

This is a heuristic review layer, not a security boundary. Read [THREAT_MODEL.md](THREAT_MODEL.md) before relying on it.

Develop

pnpm install
pnpm check

License

[MIT](LICENSE)

Back to searchOpen GitHub repository

More related plugins

View category