SEMANTIC DIRECTORY · plugin-directory-semantic-v3-18
Sandbox & Execution Isolation
提供Action系统级、微虚拟机级或后端沙箱的隔离执行环境，包括沙箱后端、网络访问模式、文件不可变保护、可写范围和Permissions预设。排除审批决策与运行时规则拦截。
Leaf membership
23 plugins
dsh-android-sandboxSnail-Turbo/dsh-android-sandboxCatalog AnalyzedDSH plugin from Snail-Turbo/dsh-android-sandboxCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-bash-escalationsailoflight/dsh-bash-escalationCatalog AnalyzedStatus:完成CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-code-runtime-containertancheng33/dsh-code-runtime-containerCatalog AnalyzedContainer-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-cross-platformWang-Lin-Chang/dsh-cross-platformCatalog AnalyzedLinux backend for dsh-witness/dsh-anchor: chattr + bubblewrap sandbox recipes. Every claim carries an experiment number.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-escalation-toleranceericleoo/dsh-escalation-toleranceCatalog AnalyzedTolerate redundant sandbox_permissions requests: a Cordis plugin that turns hard failures into harmless no-ops when a tool asks for a permission mode that is already active.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-gpt-perm-stripFengLingYaaa/dsh-gpt-perm-stripCatalog AnalyzedDSH plugin: strip leftover GPT sandbox_permissions that are not strictly wider than the current session.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-login-gatewayrunfali/dsh-login-gatewayCatalog Analyzeddsh 登录门卫Plugin：让只监听本机的 dsh Web UI Security地对外开放——登录墙 + 全量反代，零依赖、零侵入。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-macosWang-Lin-Chang/dsh-macosCatalog AnalyzedmacOS backend for dsh-witness/dsh-anchor: uchg + sandbox-exec sandbox recipes. Every claim carries an experiment number.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-multi-workspacesomnusovis/dsh-multi-workspaceCatalog AnalyzedMulti-workspace sandbox: grants file-write access to every registered workspace automatically — add a workspace, write to it immediately, no config or escalation needed.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-permission-workspace-write-plusWonjader/dsh-permission-workspace-write-plusCatalog Analyzeddeepseek harness中workspace writePermissions的增强Plugin。使用前请自行评估风险。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-plugin-net-accessGumiho12345/dsh-plugin-net-accessCatalog Analyzed为 DeepSeek Harness(dsh) 新增 Net Access 模式，用于解决 Windows 沙箱内 curl.exe 无法访问 HTTPS 的问题，文件写保护不变。 / Adds a Net Access mode to DeepSeek Harness(dsh): curl.exe can access HTTPS inside the Windows sandbox again, with file-write protection unchanged.CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals7 starsdsh-remote-trustaashizpoudel/dsh-remote-trustCatalog AnalyzedDSH plugin: open privileged /api methods (settings, credentials, model discovery) to remote trusted hostsCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-sandbox-allowlistdeveloperdh/dsh-sandbox-allowlistCatalog Analyzed为 DSH 默认沙箱增加可配置的「沙箱授权目录」，允许工作区外的受信修改。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-sandbox-microomdsh-dev/dsh-sandbox-microCatalog AnalyzedDSH plugin from omdsh-dev/dsh-sandbox-microCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals2 starsdsh-sandbox-permission-guardJachinShen/dsh-sandbox-permission-guardCatalog AnalyzedDSH Cordis plugin that prevents redundant sandbox escalation failuresCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-sandbox-permissions-not-strictly-wider-justification-empty-fixyajiangandchenchen/dsh-sandbox-permissions-not-strictly-wider-justification-empty-fixCatalog Analyzed修复 sandbox_permissions 和 justification 字段在 pwsh/bash/fs/dsh-sandbox 中的 no-op 升级报错。当会话已是 danger-full-access 模式时，模型携带空 justification 或重申同一模式被拒的问题。CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals0 starsdsh-seatbelt-sandboxdrscrewdriver/dsh-seatbelt-sandboxCatalog Analyzeddsh-seatbelt 方面沙箱增强尝试使用非exec工具直接对接系统seatbelt相关apiCompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 starsdsh-self-checking-profileSLAPaper/dsh-self-checking-profileCatalog AnalyzedA drop-in dsh web profile that adds the **Self Checking** sandbox mode to DeepSeek Harness (dsh)CompatibilityDSH 0.1.2-rc.1 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-10Public signals1 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.