SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Tool-Call Approval Gating
在工具调用、命令执行或沙箱提权执行前进行批准、拒绝或升级裁决，包括人工审批界面、硬件或移动端审批、LLM/规则辅助审批、默认拒绝与 ask/deny 清单、会话或任务授权、信任白名单及超时处理。排除纯规则拦截、沙箱隔离和事后审计。
Leaf membership
49 plugins
dsh-auto-approvalSipengXie2024/dsh-auto-approvalCatalog AnalyzedLLM-gated auto approval for DeepSeek Harness: a model judges every approval ask first, low-risk operations pass without prompting (fail-closed)CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-auto-approval-llm@quill507/dsh-auto-approval-llmCatalog AnalyzedLLM-assisted auto approval with countdown fallback for the Auto permission preset: static rules, risk tiers, breaker and file audit.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.0.18Evidence updated2026-09-07Public signals6 stars · 1906 downloadsdsh-auto-approval-plugindsh-auto-approval-pluginCatalog AnalyzedA middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact2.1.2Evidence updated2026-09-08Public signalsNo public usage signalsdsh-auto-approveHanihahaha/dsh-auto-approveCatalog AnalyzedDSH plugin from Hanihahaha/dsh-auto-approveCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-auto-approvexiuyuan18/dsh-auto-approveCatalog AnalyzedUnofficial community plugin: automatic review of sandbox escalation requests for DeepSeek Harness (Codex Guardian-style) plus an /approve slash commandCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-auto-approvedsh-auto-approveCatalog AnalyzedAdds an `auto` permission preset between workspace-write and danger-full-access: a classifier grants routine sandbox escalations once, while dangerous or uncertain requests still go to a human.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.6.0Evidence updated2026-09-06Public signals14 stars · 1444 downloadsdsh-auto-classifierdsh-auto-classifierCatalog AnalyzedAutonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git checkpointing for unattended sessions.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.14Evidence updated2026-09-07Public signals1 stars · 2688 downloadsdsh-auto-execute1x1-lab/dsh-auto-executeCatalog AnalyzedDeepSeek Harness(DSH)的 Cordis Plugin:让审批自动放行CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-auto-modeNuo-cl/dsh-auto-modeCatalog AnalyzedDSH plugin: auto mode that routes permission-gated tool calls through an LLM review before approving, blocking, or asking for confirmation.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-auto-reviewaa2246740/dsh-auto-reviewCatalog AnalyzedCodex-style Auto-review and Approve for me mode for DeepSeek HarnessCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-auto-reviewdsh-auto-reviewCatalog AnalyzedSecond-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.10.4Evidence updated2026-09-06Public signals134 stars · 2457 downloadsdsh-auto-reviewJelee0145/dsh-auto-reviewCatalog AnalyzedCodex-style automated approval review for DeepSeek Harness: an isolated reviewer subagent decides sandbox escalations by intrinsic risk and user authorization. Community Beta — not an official DeepSeek AI plugin.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-clawrouterdsh-clawrouterCatalog AnalyzedA second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 75 models from one credential: a BlockRun API key, or a wallet paying per call over x402.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.12.0Evidence updated2026-09-08Public signalsNo public usage signalsdsh-codex-approvaldsh-codex-approvalCatalog AnalyzedCodex-style approval autopilot for DeepSeek Harness: ordered glob rules (allow/ask/deny) plus an AI risk judge (low/medium/high) mapped through a risk tolerance, as an approval answerer.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.4.0Evidence updated2026-09-08Public signals791 downloadsdsh-command-quarantinesutimee/dsh-command-quarantineCatalog AnalyzedDSH 命令隔离Plugin：让agent只能间接使用命令工具，Plugin内置三种审计方式，防止模型幻觉输错字符，但是命令工具却执行造成严重后果。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-full-with-approvalzjuhbh/dsh-full-with-approvalCatalog AnalyzedFourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) with per-operation user approval for writes outside the workspace or to protected paths (.git/**, .env*); implemented purely as a bundle over the official tools/pre-execute ask hook, no core edits.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-guardian-approvaldsh-guardian-approvalCatalog AnalyzedIndependent Codex Guardian-style approval reviewer for DSH.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-08Public signals551 downloadsdsh-llm-approve-for-mealaxrpg/dsh-llm-approve-for-meCatalog AnalyzedUses an isolated LLM review to approve or reject DSH sandbox permission requests.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.