dsh-always-require-tools-approval
Requires one-shot user approval before configured tools (default bash, pwsh) execute — gated tools pause and ask, everything else delegates, and a missing approval channel fails closed.
在配置的工具（默认 bash、pwsh）执行前要求一次性用户审批：受控工具暂停并询问，其余委托执行，缺少审批渠道时默认拒绝。
How to install
dsh plugin add @j0ss077/dsh-always-require-tools-approval About
@j0ss077/dsh-always-require-tools-approval **Stop. Confirm. Run.** A DeepSeek Harness plugin that pauses the tools on your watchlist and waits for your explicit approval before every execution. What it does DSH runs your agent in a sandbox that blocks file **writes** — but not commands. bash can still read files, launch programs, and reach the network. This plugin puts an **approval gate** between a tool and its execution. When the agent calls a tool on the watchlist, the harness pauses and asks before anything runs. Default watchlist: bash and pwsh. One approval = **one** execution. The next …
Recommendation signals
Meta
- License
- MIT
- Language
- TypeScript
- GitHub stars
- 2
- mo. downloads
- –
- Last push
- 2026-08-26
- Created
- 2026-08-24
Links
Basic safety check
- Findings
- None
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- deepseek-harness, dsh-plugin
Related plugins
dsh-auth-gateway
xbzbing/dsh-auth-gateway
Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.
dsh-approval-llm
Letter2025/dsh-approval-llm
Model-based permission approval: an approval-request answerer backed by a separate reviewer model.
dsh-auto-review
PerryLink/dsh-auto-review
Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh-yolo-mode
SeverusZh/dsh-yolo-mode
LLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.