SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
Tool-Call Approval Gating
在工具调用、命令执行或沙箱提权执行前进行批准、拒绝或升级裁决，包括人工审批界面、硬件或移动端审批、LLM/规则辅助审批、默认拒绝与 ask/deny 清单、会话或任务授权、信任白名单及超时处理。排除纯规则拦截、沙箱隔离和事后审计。
Leaf membership
55 plugins
dsh-full-with-approvalzjuhbh/dsh-full-with-approvalCatalog AnalyzedFourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) with per-operation user approval for writes outside the workspace or to protected paths (.git/**, .env*); implemented purely as a bundle over the official tools/pre-execute ask hook, no core edits.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-guardian-approvaldsh-guardian-approvalCatalog AnalyzedIndependent Codex Guardian-style approval reviewer for DSH.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-24Public signals551 downloadsdsh-llm-approve-for-mealaxrpg/dsh-llm-approve-for-meCatalog AnalyzedUses an isolated LLM review to approve or reject DSH sandbox permission requests.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-llm-approverXpectuer/dsh-llm-approverCatalog AnalyzedDSH plugin from Xpectuer/dsh-llm-approverCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-maestro-guardddtcorex/dsh-maestro-guardCatalog AnalyzedHost-only safety gate for DeepSeek Harness: approval store, secret redaction, permission policy, waterfall pre-execute integration.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-perm-gatedsh-perm-gateCatalog AnalyzedP0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.2Evidence updated2026-09-23Public signals1 stars · 1177 downloadsdsh-perm-guarda903067276-rgb/dsh-perm-guardCatalog AnalyzedAuto-approval permission guard: a middle tier between workspace-write and danger-full-access — auto-allows safe operations inside trust directories, always asks a human for destructive ones, with 11 per-category switches and an audit trail.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-permgate@mrweicodes/dsh-permgateCatalog AnalyzedFine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions, quick-tool defaults, custom rules, a bilingual approval modal with inline diff details, custom rejection reasons and a sandbox-upgrade flow.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.5.5Evidence updated2026-09-20Public signals8 stars · 1196 downloadsdsh-permission-matrixzhang8019/dsh-permission-matrixCatalog AnalyzedTurns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-plan-preset23aisfvb/dsh-plan-presetCatalog AnalyzedDSH plugin: read-only permission shown as Plan + permission escalation forbidden (approval never). Web search keeps working. 把只读Permissions显示为 Plan,并禁止申请Permissions升级。CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-plugin-confirm-checkAuraxM/dsh-plugin-confirm-checkCatalog AnalyzedDSH plugin from AuraxM/dsh-plugin-confirm-checkCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-plugins#dsh-approve-for-meDamonKoy/dsh-pluginsCatalog AnalyzedAutomated approval review: auto-approve read-only tools, auto-deny dangerous commands, fail-closed policy engine.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-policydsh-policyCatalog AnalyzedApproval policy engine for the DeepSeek Harness - name reserved; first release in development.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact0.0.1Evidence updated2026-09-26Public signals157 downloadsdsh-risk-gateleetom314/dsh-risk-gateCatalog AnalyzedSemantic risk grading and progressive authorization: classifies tool calls into safe/risky/redline, asks before irreversible actions, auto-allows only approved-and-succeeded signatures.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-safe-toolGoshawkGGGG/dsh-safe-toolCatalog AnalyzedDeepSeek Harness 的 AI 工具审批Plugin，使用AI审核AGENT调用工具的合规性并决定是否执行，审核标准可定制。CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-session-allowAnakinCao/dsh-session-allowCatalog AnalyzedDSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage) + right-panel auto-open guardCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-tiered-approvalElaina-real/dsh-tiered-approvalCatalog AnalyzedTiered auto-review for DeepSeek Harness: static-rule safety net + LLM reviewer + human fallback — auto-allow safe actions, deny irreversible ones, ask a human for the rest.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals2 starsdsh-turn-approvalarrow949/dsh-turn-approvalCatalog AnalyzedTurn-scoped “Allow for this task” approvals: automatically allow matching `danger-full-access` escalations only for the current task, then expire.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.