SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Tool-Execution Policy Enforcement
在工具执行管线中以持久化规则强制执行 allow、deny、ask、出站白名单、写Permissions范围、文件修改额度、信息流/污点控制和环路熔断等策略。排除人工审批交互、危险命令专用拦截和企业策略配置治理。
Leaf membership
51 plugins
dsh-automode@log.li/dsh-automodeCatalog AnalyzedCC-style auto-approval for DeepSeek Harness: deterministic deny/allow rules plus a two-stage allow/reject classifier with a circuit breaker and denial guidance.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.11.1Evidence updated2026-09-07Public signals3 stars · 939 downloadsdsh-capmark-gatedsh-capmark-gateCatalog AnalyzedHold a DeepSeek Harness agent to a capmark capability manifest: mask its tools and judge every call.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.3.1Evidence updated2026-09-08Public signals941 downloadsdsh-change-budget@raphelutumn/dsh-change-budgetCatalog AnalyzedConfigurable per-turn budgets for supported file mutations, limiting distinct files, mutation calls, and UTF-8 payload bytes before tool execution.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-07Public signals2 stars · 146 downloadsdsh-circuit-breakerpricklywiggles/dsh-circuit-breakerCatalog AnalyzedLoop guard for DeepSeek Harness: denies repeated identical tool calls and caps per-agent calls, outside the model where instructions cannot reachCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-claim-guardxuxucodepractice-code/dsh-claim-guardCatalog AnalyzedA deterministic pre-write claim guard for supported DeepSeek Harness file tools.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-claude-antidoteFolioTemp/dsh-claude-antidoteCatalog AnalyzedDSH compatibility antidote: keep dsh-claude-ux visibly enabled while neutralizing its actual debuffs.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-claw-suitexingyingyuzhui/dsh-claw-suiteCatalog AnalyzedClaw Agent governance suite for DeepSeek Harness. 人设、Permissions、闸、委派、记忆。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-dependency-firewallMkaliezZ/dsh-dependency-firewallCatalog AnalyzedDependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-egress-guardtancheng33/dsh-egress-guardCatalog AnalyzedRuntime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-fs-allowlistwangzhaonan16/dsh-fs-allowlistCatalog AnalyzedDSH plugin from wangzhaonan16/dsh-fs-allowlistCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-gov863683348/dsh-govCatalog AnalyzedAgent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-gpt-compatYaoaY/dsh-gpt-compatCatalog AnalyzedDSH 的 GPT/Codex 沙箱提权参数兼容Plugin | Fail-closed GPT/Codex sandbox escalation compatibility for DeepSeek HarnessCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-model-pindsh-model-pinCatalog AnalyzedDeepSeek Harness plugin: keep every model request inside an allowed set per provider, redirect or refuse the rest, and warn when a request would make a llama.cpp router reload modelsCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-08Public signals0 downloadsdsh-movein-permissionsdsh-movein-permissionsCatalog AnalyzedFine grained per tool permission rules for DSH at the tools/pre-execute gate, deny and ask lists in Claude Code rule syntax (Bash(rm -rf:*), Read(_secrets_), mcp__server__tool), works standalone without migrating.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.7Evidence updated2026-09-06Public signals14 stars · 1205 downloadsdsh-permission-rulesdsh-permission-rulesCatalog AnalyzedClaude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.6.10Evidence updated2026-09-06Public signals113 stars · 2887 downloadsdsh-permissions940842546/dsh-permissionsCatalog AnalyzedClaude Code-style permission rules engine: hard/deny/ask/allow tiers with a hard tier above full access, workspace-scoped rules, wildcard path protection, and a visual staged editor; rules persist in settings.yaml.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-plugin-governance-gatedsh-plugin-governance-gateCatalog AnalyzedDeepSeek Harness (dsh) approval answerer backed by the agent-governance sidecar — every approval/request is decided by the deny-by-default gate, L0–L4 rules and the organizational audit chain.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-09Public signals147 downloadsdsh-plugins#dsh-guarddsh-plugins-guardCatalog AnalyzedSecurity and governance for dsh: rule-based tool denial, full tool-call audit trail, and governance reports.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact1.0.1Evidence updated2026-09-07Public signals3 stars · 304 downloads
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.