deepseekplugins

DeepSeek Harness plugin

dsh-agent-gate

Claw/session permission gate for DeepSeek Harness. 按分层权限拦截工具、钉官方沙箱、走一次性审批，并写审计。

Memory
Jump to install

Source facts

Repository
xingyingyuzhui/dsh-agent-gate
Latest update
Aug 19, 2026
Category
Memory
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/xingyingyuzhui/dsh-agent-gate
Plugin: dsh-agent-gate
Author: xingyingyuzhui

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-agent-gate · 权限闸

按分层权限拦截工具（tools/pre-execute + tools.guard），需要时走官方一次性审批，并在 ~/.dsh/agent-gate/audit.jsonl 记一笔。Claw 会话的官方沙箱由 dsh-session-permissions 钉成 read-only / workspace-write。设置里有 审计 页：按时间、结果、工具类型、Claw Agent 筛选，并可导出当前筛选结果。

Agent 技能拒绝名单会从该会话的官方技能目录和 / 选单里拿掉，不只拦 skill 工具。未授权的 MCP 服务同样会拒绝，并在会话开始时从模型可见工具里拿掉。

策略计算复用同目录的 dsh-session-permissions（官方 ∩ Agent ∩ 会话）。闸只拦 Claw 会话；工作区会话只走官方权限。闸可以单独卸：拦截会停，官方文件沙箱只要权限插件还在就会继续钉。

安装

dsh plugin --profile web add github:xingyingyuzhui/dsh-agent-gate

建议同时安装 dsh-session-permissions。装完重启 dsh web。

本地开发：

dsh plugin --profile web add link:/abs/path/to/dsh-agent-gate

卸载

dsh plugin --profile web remove dsh-agent-gate

卸掉后不再拦截新调用。官方文件沙箱由权限插件继续钉，不会因为卸闸而变宽。

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category