SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Tool-Execution Policy Enforcement
在工具执行管线中以持久化规则强制执行 allow、deny、ask、出站白名单、写Permissions范围、文件修改额度、信息流/污点控制和环路熔断等策略。排除人工审批交互、危险命令专用拦截和企业策略配置治理。
Leaf membership
51 plugins
dsh-rule-enginedsh-rule-engineCatalog AnalyzedRules execution engine for dsh: parses AGENTS.md, hard-blocks rule-violating tool calls, text-based B/D rule auditing, /guard command, version-guard for versioned files, and free-zone support (engine skips free-zone sections).CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.6.1Evidence updated2026-09-07Public signals4 stars · 2791 downloadsdsh-safe-web-fetchdsh-safe-web-fetchCatalog AnalyzedSSRF-resistant HTTP(S) fetch provider for DeepSeek HarnessCompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0-next.0Evidence updated2026-09-08Public signals444 downloadsDSH-Search-Citation-AuditorAndKinoko/DSH-Search-Citation-AuditorCatalog AnalyzedAudit citation sources in AI responses – extract URLs from the reply, score and rank them by threat level, and output a detailed report. Domains on your blocklist will be genuinely blocked – web tools such as web_search and web_fetch will directly refuse to access them. The blocklist is fully maintained by you.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-session-permissionsxingyingyuzhui/dsh-session-permissionsCatalog AnalyzedLayered session permissions for DeepSeek Harness. 官方 ∩ Agent ∩ 本会话。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-shield245678000000/dsh-shieldCatalog AnalyzedSecurity, Trust & Policy Layer for DeepSeek Harness. Don't trust your agent's tools. Verify them.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-ssrf-guardjwilson411/dsh-ssrf-guardCatalog AnalyzedDeepSeek Harness plugin: fail-closed URL host/scheme allowlist that runs before a request is openedCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-workspace-scope-selectionjiangr100/dsh-workspace-scope-selectionCatalog AnalyzedA fourth DSH permission option: selected-workspace-write with a directory-tree scope editor for the DeepSeek Harness web UICompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-write-create-onlydsh-write-create-onlyCatalog AnalyzedHost-side guard that lets the write tool only create new files: when the target already exists it denies the call before execution and tells the model to use edit instead, applied to all sessions.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-08Public signals1 stars · 0 downloadsdsh-write-gatedsh-write-gateCatalog AnalyzedCommitment write-gate: operator-authored rules enforced before a tool call runs — a deterministic guard tier plus an LLM-judge tier, fail-closed by default, every block written to a contradictions log.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-08Public signals1 stars · 619 downloadsdsh-write-rule-guarddsh-write-rule-guardCatalog AnalyzedBlocks edit/write writes that contain characters matching configurable regex rules, executed before the tool runs, with configurable messages and same-turn pwsh propagation; default rule matches full-width parentheses.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.2.2Evidence updated2026-09-07Public signals1 stars · 0 downloadsdsh-yolo-modedsh-yolo-modeCatalog AnalyzedLLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.CompatibilityDSH 0.1.2-rc.1 · webDependency audit0 reported in bounded auditArtifact0.5.0Evidence updated2026-09-07Public signals4 stars · 354 downloadsfaultseed#dshJW53222/faultseedCatalog AnalyzedHonesty guardrails on the tool pipeline: blocks a coding agent from weakening tests, swallowing errors, stubbing type checks, or deleting tests through the shell — nine deterministic hooks, each backed by a planted-failure test proving the guard can fail.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starshol-guardhashgraph-online/hol-guardCatalog AnalyzedOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals561 starsKISS_Law-DSHShaky77/KISS_Law-DSHCatalog AnalyzedWeiwen's Law (KISS-Law) — a domain-agnostic causal-constraint middleware for DeepSeek Harness. A faithful, white-box presentation of how causal law actually runs. White-box audit, never prediction. Hard-gate the boundary; inner H decides freely.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsweiwen-law-dshShaky77/weiwen-law-dshCatalog AnalyzedWhite-box causal guardrail for dsh: every tool call is adjudicated before execution along a deterministic causal logic chain — blocks destructive and credential-file operations, escalates repeated boundary violations, cuts faulting links until verified-fixed, and gives risk verdicts on un-auditable execution; runs fully local with zero API cost, plus 6 white-box self-check tools.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals5 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.