SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Dangerous Operation & Deletion Guardrails
针对 shell 命令、删除、破坏性写入和高风险敏感Action进行自动风险拦截、预演、熔断、改道至回收站或可恢复执行，包括工作区边界和路径保护。排除人工审批、通用策略引擎及沙箱环境本身。
Leaf membership
48 plugins
@ljwei-stak/dsh-approval-gate@ljwei-stak/dsh-approval-gateCatalog AnalyzedDeepSeek Harness 自动审批门控：Flash 模型预判写入/命令是否不可回补，Security自动批准、危险转人工（fail-safe），最小人工介入，含人工审查 UICompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.5.3Evidence updated2026-09-09Public signalsNo public usage signals@shizhanyu13/dsh-ironbound-policy@shizhanyu13/dsh-ironbound-policyCatalog AnalyzedIronbound hard-gate guard plugin for the DeepSeek Harness (DSH). Blocks dangerous shell commands before they reach a tool, with a double-layer degrade counter over the tools/execute seam. Part of the Ironbound safety gate set. Discoverable via the dsh-pluCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifact0.1.1Evidence updated2026-09-09Public signals273 downloadsagent-guardmokuyoaxis/agent-guardCatalog AnalyzedMake destructive AI-agent actions reversible by default — quarantine + audit + human escalation for rm/git destructive operations. Reliability infrastructure, not a sandbox.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals3 starsCaushellfatmo666/CaushellCatalog AnalyzedCompiler-style pre-execution safety analysis for Harness shell actions.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals6 starsdsh-approval-flow-poclasoloryan/dsh-approval-flow-pocCatalog AnalyzedNon-official fail-closed approval policy PoC for DeepSeek HarnessCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-approve-for-meshifan3/dsh-approve-for-meCatalog AnalyzedApprove-for-me mode for DeepSeek Harness: LLM safety auto-approval for approval requests; high-risk destructive commands still ask the user.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-auto-approvalAndy8647/dsh-auto-approvalCatalog AnalyzedDSH plugin from Andy8647/dsh-auto-approvalCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals4 starsdsh-careful-full-accesszdjmrq/dsh-careful-full-accessCatalog AnalyzedDSH plugin: command guard that blocks disaster-tier deletions, escalates high-risk ones, and adds the careful-full-access preview/model-check deletion pipelineCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-danger-guardczhzz/dsh-danger-guardCatalog AnalyzedDSH plugin from czhzz/dsh-danger-guardCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-edit-approvaldsh-edit-approvalCatalog AnalyzedAsk-before-act approval for every edit and every bash command: a red/green line diff before a file is touched, a description+command panel before a command runs — approve once or reject, each gate with its own master switch in Settings → General.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.3.1Evidence updated2026-09-07Public signals3 stars · 2608 downloadsdsh-file-confirmdsh-file-confirmCatalog Analyzed文件改动确认机制（双面Plugin）：write/edit/str_replace_editor 写入前弹出确认条，内嵌 GitHub 风格 diff（行号 + 红删绿增），允许本次 / 拒绝。File-change confirmation with inline diff for DeepSeek Harness.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-10Public signals351 downloadsdsh-fs-deny-policydsh-fs-deny-policyCatalog AnalyzedDeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never touch - fences read, write, search, and shell tool calls at tools/pre-executeCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-10Public signals238 downloadsdsh-gamepad-approvaldsh-gamepad-approvalCatalog AnalyzedXbox 手柄硬件审批 dsh Plugin — Agent 高危工具调用需物理按键确认（A 批准 / B 驳回）CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.4Evidence updated2026-09-09Public signals0 downloadsdsh-guard-sensitive-pathsTARS-snail/dsh-guard-sensitive-pathsCatalog AnalyzedApproval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) become an approval ask.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-guardianlonelymoon87/dsh-guardianCatalog AnalyzedAdds dangerous-operation policy checks, output redaction, and a security-review workflow.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-guardiancdxiaodong/dsh-guardianCatalog AnalyzedAgent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals4 starsdsh-guardrailjypjypjypjyp/dsh-guardrailCatalog AnalyzedString-matches tool-call input arguments, blocks dangerous tool calls (deny) or allows them with an injected warning (warn), and ships a full rules-management panel.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-kubectl-guarddsh-kubectl-guardCatalog AnalyzedA dsh policy plugin that gates kubectl writes by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.0Evidence updated2026-09-09Public signals0 downloads
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.