SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
工具执行策略强制
在工具执行管线中以持久化规则强制执行 allow、deny、ask、出站白名单、写权限范围、文件修改额度、信息流/污点控制和环路熔断等策略。排除人工审批交互、危险命令专用拦截和企业策略配置治理。
叶子目录成员
55 个插件
@agenticcontrolplane/dsh@agenticcontrolplane/dsh目录 已分析Agentic Control Plane for DeepSeek Harness — check every tool call against your policies before it runs, and keep a durable record of what was allowed and why.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.4证据更新2026-09-26公开信号45 downloads@jiesou/dsh-stream-rules@jiesou/dsh-stream-rules目录 已分析Inject rules when needed, without wasting context. DSH port of opencode-stream-rules.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.7证据更新2026-09-25公开信号311 downloads@ramen-ai/dsh-ramen-guard@ramen-ai/dsh-ramen-guard目录 已分析Fail-closed semantic policy guard for secure DeepSeek Harness tool execution.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.0证据更新2026-09-26公开信号96 downloads@tappass/dsh-governance@tappass/dsh-governance目录 已分析The authority layer for agentic AI, as a DeepSeek Harness plugin. Governs every tool call against your business rules via the TapPass /v1/govern policy decision point.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.2.1证据更新2026-09-25公开信号793 downloads@yadsh/dsh-session-scope@yadsh/dsh-session-scope目录 已分析Per-session workspace visibility scopes for DeepSeek Harness.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.7.5证据更新2026-09-25公开信号暂无公开使用信号correctovercorrectover目录 已分析AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品2.4.17证据更新2026-09-26公开信号2928 downloadscue-skills#cue-omni-reader-guardsensedeal/cue-skills目录 已分析面向 DeepSeek Harness 的 mcp__omni__parse 加固护栏：tools/pre-execute 监听器拒绝私网/保留主机（SSRF），施加白名单或 ask（同意），allowedRoots 为空时 fail-closed。兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号7 starsdsh-agentfuse-pluginMkaliezZ/dsh-agentfuse-plugin目录 已分析Deterministic fail-closed tool-call authorization for DSH with evidence: allow/block/ask policy gate plus approval-chain deferral.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号3 starsdsh-approval-firstjoao-paulo-santos/dsh-approval-first目录 已分析Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号0 starsdsh-approval-guardiankaruboniru/dsh-approval-guardian目录 已分析模仿codex auto-review 的自动审批机制兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号2 starsdsh-approval-llmdsh-approval-llm目录 已分析基于模型的权限审批：由独立审查模型自动应答 approval 权限请求。兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品0.1.6证据更新2026-09-20公开信号7 stars · 806 downloadsdsh-approve-for-mewcwplaygitbub/dsh-approve-for-me目录 已分析dsh增加类似替我审批的能力兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号0 starsdsh-auto-modea1140314368/dsh-auto-mode目录 已分析DSH auto-mode: LLM-based safety interceptor (allow/deny/ask) for dangerous tool calls, as a selectable permission preset兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号0 starsdsh-auto-mode@nanmicoder/dsh-auto-mode目录 已分析在 Workspace Write 与 Full access 之间增加 Auto 权限档：日常操作留在官方 workspace-write 沙箱内，由当前会话模型复核升权与破坏性调用，精确的越界访问按次放行一次，意图不明时询问，命中关键路径则拒绝。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.9证据更新2026-09-19公开信号161 stars · 3409 downloadsdsh-auto-reviewAtropinolTT/dsh-auto-review目录 已分析DSH Auto Mode — native security review plugin for DeepSeek Harness: pre-execution rule interception + delivery-time independent subagent review. Built for long-running agents.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号2 starsdsh-auto-reviewXinlong-Wu/dsh-auto-review目录 已分析adds an auto-review permission preset to DeepSeek Harness. Same Codex auto review兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号1 starsdsh-auto-reviewaccpowered/dsh-auto-review目录 已分析沙箱越权审批的 LLM 应答器：先过确定性正则过滤，再交给干净上下文的审核模型；拿不准才转人工。需要随附的核心补丁。兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号暂无公开使用信号dsh-autogatewangxing-git/dsh-autogate目录 已分析DeepSeek Harness 自动审批插件：在 workspace-write 沙箱之上叠加确定性规则 + LLM 安全审批，自动模式不放宽沙箱、fail-closed。 Safe auto-approval for DeepSeek Harness — deterministic rules + LLM review on top of the workspace-write sandbox. Auto mode without ever granting full-access.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号3 stars
分类属于公开语义索引事实，不是最终推荐；兼容性、权限与来源证据仍需分别核对。