SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18

Tool-Call Approval Gating

在工具调用、命令执行或沙箱提权执行前进行批准、拒绝或升级裁决,包括人工审批界面、硬件或移动端审批、LLM/规则辅助审批、默认拒绝与 ask/deny 清单、会话或任务授权、信任白名单及超时处理。排除纯规则拦截、沙箱隔离和事后审计。

Use keyword search
Source catalog discovery.composite.2026-09-06.v1-0-5.b92b985e31dfCanonical structure · 823 nodes · 14829 plugins

Leaf membership

49 plugins

@openguardrails/dsh-auto-mode@openguardrails/dsh-auto-modeCatalog AnalyzedAuto mode for DeepSeek Harness (dsh): an Auto entry in the Permissions selector whose approval prompts are answered by OpenGuardrails policy instead of a human — plus the full OGR guard engine underneath. No core changes.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.6Evidence updated2026-09-08Public signals176 downloadsclamicrolaosji/clamicroCatalog Analyzed在手机上审批 Claude Code 、DeepSeek Harness 的Action。局域网直连,零依赖。Sessions & MessagesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals4 starsdeepseek-AutoReviewViolet-Evergarden-Xiya/deepseek-AutoReviewCatalog AnalyzedDeepSeek Harness 的“替我审核”PluginTools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-action-outboxJimChen-g/dsh-action-outboxCatalog AnalyzedBatch Review Inbox for DeepSeek Harness — stage, inspect, edit, approve, and commit exact tool side effects safely.Tools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals3 starsdsh-action-outboxdsh-action-outboxCatalog AnalyzedDurable batch review and commit safety for DeepSeek Harness tool side effectsTools & CapabilitiesnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.3.0Evidence updated2026-09-08Public signals373 downloadsdsh-agent-approval@duke-dsh-plugins/dsh-agent-approvalCatalog AnalyzedAn independent approval subagent judges every sandbox escalation, with a configurable model and an audit log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact1.5.0Evidence updated2026-09-07Public signals3 stars · 1083 downloadsdsh-Almost_Full_Accessdsh-almost-full-accessCatalog AnalyzedPermission mode between workspace-write and full access: shell commands are checked by deterministic rules and a subagent review; irreversible or system-level actions require explicit approval.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact1.1.0Evidence updated2026-09-07Public signals1 stars · 1113 downloadsdsh-approval-assistant_0neKbyte0neKbyte/dsh-approval-assistant_0neKbyteCatalog Analyzeddeepseek 审批+问答+完成时添加提醒,可设置浏览器、系统通知、弹窗通知,可自拟音效Tools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-approval-auto-reviewperlied03/dsh-approval-auto-reviewCatalog AnalyzedCodex-style automatic approval review plugin for DeepSeek HarnessSessions & MessagesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-approval-gatedsh-approval-gateCatalog AnalyzedRisk-gated approval automation for DeepSeek Harness: flash pre-classifies whether a write/command is irreversible — safe operations are auto-approved, dangerous ones are escalated to human approval (fail-safe). File-diff review with one-click revert and session-scoped snapshots (v0.5.1: precise snapshots via tool-call parameter tracing, incl. human-approval cases).Security & PermissionsnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.5.0Evidence updated2026-09-06Public signals16 stars · 516 downloadsdsh-approval-modeNEVSTOP-LAB/dsh-approval-modeCatalog AnalyzedAdds an approval-mode toggle next to the permission selector: default approval keeps per-call confirmation, bypass approval auto-approves every tool call while staying in Workspace Write.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals4 starsdsh-approval-popupqingfengyu153781-star/dsh-approval-popupCatalog AnalyzedNative Windows popup dialogs for DeepSeek Harness (DSH) approval requests + turn-finished notificationsNotifications & IntegrationsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-approve-for-medsh-approve-for-meCatalog AnalyzedRule-gated automatic approval for DeepSeek Harness sandbox escalations with an optional LLM reviewer and native human fallback.Tools & CapabilitiesnpmGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.4Evidence updated2026-09-08Public signals1862 downloadsdsh-approve-for-meHakunm/dsh-approve-for-meCatalog Analyzed为DeepSeek Harness添加“代我审核”功能,让 AI 替你审查 DSH 的敏感Action,而不是直接交出全部Permissions。Fail-closed automatic approval for DeepSeek Harness with selectable reviewer models and visible WebUI decisions.UI EnhancementsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-autoCH3SH-LC/dsh-autoCatalog AnalyzedThe auto permission tier for DeepSeek Harness: workspace-write requests run directly, sandbox escalations (danger-full-access) are judged by a separate classifier model.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-autosimon300000/dsh-autoCatalog AnalyzedAdds an Auto Approve permission preset to the Web UI, using a fresh restricted Reviewer Agent to allow or deny each approval request.Security & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals5 starsdsh-auto-and-safetyyyyyolo7a79-sketch/dsh-auto-and-safetyCatalog AnalyzedDSH auto-and-safety permission preset: full file access but no delete without user approvalSecurity & PermissionsGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-auto-approvalwangyong1972/dsh-auto-approvalCatalog AnalyzedDSH plugin from wangyong1972/dsh-auto-approvalTools & CapabilitiesGitHubCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 stars

Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.