sofagent
Commit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 79 tools. Installable via dsh plugin add.
面向 AI 编程 agent 的提交时审计 harness——24 条 git diff 规则（密钥泄漏、越界改动、提示注入）、HMAC 签名审计链、快照回滚、79 工具 MCP server；dsh plugin add 即装。
How to install
dsh plugin add @sofagent/core npx -y @sofagent/core Recommendation signals
Meta
- License
- MIT
- Language
- TypeScript
- GitHub stars
- 42
- mo. downloads
- 4.8K
- Last push
- 2026-09-03
- Created
- 2026-06-18
Basic safety check
- Findings
- None
- Sources
- curated:awesome-dsh-plugin.com
- Topics
- agent-audit, agent-governance, agent-orchestration, agent-skills, ai-agents, ai-safety, compliance, deepseek-harness, dsh-plugin, enterprise-ai, git-hooks, harness, harness-engineering, llm, mcp, model-context-protocol, ontology, prompt-injection, typescript, workflow-automation
Related plugins
dsh-web-startup-auth
GDWhisper/dsh-web-startup-auth
Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.
dsh-auto-approve
Jiao-XXX/dsh-auto-approve
Adds an `auto` permission preset between workspace-write and danger-full-access: a classifier grants routine sandbox escalations once, while dangerous or uncertain requests still go to a human.
dsh-auto-review
PerryLink/dsh-auto-review
Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh-permission-rules
PerryLink/dsh-permission-rules
Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.