DeepSeek Harness plugin

dsh-plugin-gallery

Removes moot sandbox-escalation fields from Codex tool schemas when a DSH session already has danger-full-access.

Jump to install

Source facts

Repository
yfzhou0904/dsh-plugin-gallery
Latest update
Aug 22, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Package path
plugins/codex-moot-escalation
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
plugins/codex-moot-escalation/package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/yfzhou0904/dsh-plugin-gallery/tree/HEAD/plugins/codex-moot-escalation
Plugin: dsh-plugin-gallery
Author: yfzhou0904

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

@yfzhou/dsh-codex-moot-escalation

Some Codex models emit sandbox_permissions and justification arguments whenever those fields appear in a tool schema, and in a session already running with danger-full-access there is no wider sandbox to escalate into, so DSH rejects the call before the tool runs. This host plugin removes those two schema fields, but only when the provider is codex and the resolved sandbox mode is danger-full-access. It grants nothing and changes no sandbox mode — it only edits schemas shown to the model after DSH has already resolved unrestricted access.

Install

dsh plugin --profile web add @yfzhou/dsh-codex-moot-escalation

The package supplies its own DSH bundle row; do not add a separate cordis.patch.yml entry.

Tested with DSH 0.1.0-rc.6; it uses the system-prompt/assemble event and the optional sandboxPolicy service.

License

MIT