drscrewdriver/dsh-perm-gate
Shipped with cc-safety-net-style mechanical safety-net rules appended; supports both no-model and model-assisted security review, in modes such as 自动审查 (auto-review) and 机械直通 (mechanical pass-through). P0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.
$ dsh plugin --profile web add dsh-perm-gate$ dsh plugin --profile web add github:drscrewdriver/dsh-perm-gateHealth breakdown
57 / 100Score reflects license, community signals, documentation and distribution. It is not a code audit — review the source before installing.
Security
Key metrics
Related
Related plugins
Browse, search and install community plugins from inside DeepSeek Harness settings, with category filters, one-click updates, enable/disable, theme switching and configuration backup.
Provides bash, PowerShell 7, and high-performance Rust tools for DSH on Windows to reduce token usage.
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and .env files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file falls back to safe defaults instead of stopping your agent. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.
Free, keyless web search for DSH: 7 engines (DuckDuckGo/Bing/SearXNG free + Exa/Perplexity/DeepSeek paid), auto-failover, settings-page UI with API key inputs and official links, web_fetch, and an engine test tool.
Image-generation tool with automatic prompt enhancement, switchable API profiles, and a Turn-tail image card that survives chat folding. Requires a user-supplied image API endpoint and key; none are bundled.
Multi-machine remote workspace: manage many SSH hosts, pick a local or remote workspace in the native Add-workspace flow (system folder chooser / local path / remote dir browse), mirror a remote workspace to a real local folder, and operate it with rw_* tools. The picker is a centered modal that opens on the local tab and auto-fills `/` for remote paths, live-completing each directory level.