SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
工具执行策略强制
在工具执行管线中以持久化规则强制执行 allow、deny、ask、出站白名单、写权限范围、文件修改额度、信息流/污点控制和环路熔断等策略。排除人工审批交互、危险命令专用拦截和企业策略配置治理。
叶子目录成员
55 个插件
dsh-plugin-governance-gatedsh-plugin-governance-gate目录 已分析DeepSeek Harness (dsh) approval answerer backed by the agent-governance sidecar — every approval/request is decided by the deny-by-default gate, L0–L4 rules and the organizational audit chain.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.0证据更新2026-09-26公开信号147 downloadsdsh-plugins#dsh-guarddsh-plugins-guard目录 已分析dsh 安全治理：规则化工具拦截、完整工具调用审计轨迹与治理报告。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品1.0.1证据更新2026-09-22公开信号2 stars · 336 downloadsdsh-repeat-tool-breakerdsh-repeat-tool-breaker目录 已分析Hard break on repeated tool calls: a synchronous ctx.tools.guard gate that counts semantic fingerprints (net/site/sink/cmd/exact) over a per-agent sliding window, ignoring decoy arguments such as description and timeoutMs.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.7.0证据更新2026-09-26公开信号241 downloadsdsh-rule-enginedsh-rule-engine目录 已分析dsh 规则执行引擎：解析 AGENTS.md、硬拦违反规则的工具调用、文本纠察与审计、/guard 命令、版本化文件守卫、自由区域支持（引擎跳过自由区内容）。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.6.5证据更新2026-09-21公开信号3 stars · 4274 downloadsdsh-safe-web-fetchdsh-safe-web-fetch目录 已分析SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.0-next.0证据更新2026-09-25公开信号444 downloadsDSH-Search-Citation-AuditorAndKinoko/DSH-Search-Citation-Auditor目录 已分析Audit citation sources in AI responses – extract URLs from the reply, score and rank them by threat level, and output a detailed report. Domains on your blocklist will be genuinely blocked – web tools such as web_search and web_fetch will directly refuse to access them. The blocklist is fully maintained by you.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号2 starsdsh-session-permissionsxingyingyuzhui/dsh-session-permissions目录 已分析Layered session permissions for DeepSeek Harness. 官方 ∩ Agent ∩ 本会话。兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号1 starsdsh-shield245678000000/dsh-shield目录 已分析Security, Trust & Policy Layer for DeepSeek Harness. Don't trust your agent's tools. Verify them.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号1 starsdsh-ssrf-guardjwilson411/dsh-ssrf-guard目录 已分析DeepSeek Harness plugin: fail-closed URL host/scheme allowlist that runs before a request is opened兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号0 starsdsh-web-allowlist-fetchdsh-web-allowlist-fetch目录 已分析IP/domain allowlist web_fetch provider for DeepSeek Harness: lets web_fetch reach allowlisted hosts/IPs freely (incl. proxy fake-IP addresses like 198.18.x.x) while keeping the default public-IP safety check for everything else.兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.3.0证据更新2026-09-26公开信号0 downloadsdsh-workspace-scope-selectionjiangr100/dsh-workspace-scope-selection目录 已分析A fourth DSH permission option: selected-workspace-write with a directory-tree scope editor for the DeepSeek Harness web UI兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号0 starsdsh-write-create-onlydsh-write-create-only目录 已分析纯 host 端守卫，让 write 工具只允许创建新文件：目标已存在时在执行前直接拒绝并提示改用 edit，全局所有会话生效。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.0证据更新2026-09-22公开信号2 stars · 517 downloadsdsh-write-gatedsh-write-gate目录 已分析承诺写入闸门：由运营者编写的规则在工具调用执行前生效——先是一层确定性守卫，再是一层 LLM 裁判，默认失败即拒绝，每一次拦截都写进矛盾日志。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.1.1证据更新2026-09-23公开信号1 stars · 390 downloadsdsh-write-rule-guarddsh-write-rule-guard目录 已分析在工具执行前拦截 edit/write 写入内容里匹配配置正则的字符，默认匹配全角圆括号，同一回合命中后连带拦截后续 pwsh，报错文案与正则均可配置。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.3.0证据更新2026-09-21公开信号3 stars · 583 downloadsdsh-yolo-modedsh-yolo-mode目录 已分析沙箱升权申请的 LLM 自动审批：内置预设，fail-closed 兜底。兼容性DSH 0.1.6-alpha.2 · web依赖审计有限审计报告 0 项制品0.5.0证据更新2026-09-21公开信号3 stars · 622 downloadsfaultseed#dshJW53222/faultseed目录 已分析工具流水线上的诚实性护栏：阻止编码 agent 弱化测试、吞掉错误、用桩替换类型检查或通过 shell 删除测试——九个确定性 hook，每个都配有植入失败的测试，证明该护栏确实会触发。兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号1 starshol-guardhashgraph-online/hol-guard目录 已分析Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号630 starsKISS_Law-DSHShaky77/KISS_Law-DSH目录 已分析Weiwen's Law (KISS-Law) — a domain-agnostic causal-constraint middleware for DeepSeek Harness. A faithful, white-box presentation of how causal law actually runs. White-box audit, never prediction. Hard-gate the boundary; inner H decides freely.兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析证据更新2026-09-27公开信号2 stars
分类属于公开语义索引事实，不是最终推荐；兼容性、权限与来源证据仍需分别核对。