dsh-llm-approve-for-me
Uses an isolated LLM review to approve or reject DSH sandbox permission requests.
使用隔离的 LLM 审查来批准或拒绝 DSH 沙箱权限请求。
How to install
dsh plugin add github:alaxrpg/dsh-llm-approve-for-me About
dsh-llm-approve-for-me 一个 DeepSeek Harness（DSH）插件：当会话选择 **AI Approval** 权限预设时，每一笔有效的沙箱权限升级（Shell/PowerShell 命令、write/edit 文件写入等所有带 sandbox_permissions 的工具调用）都由插件内置的专用无工具审查角色判定（独立模型路由、无会话单次调用、快速裁决）。 设计边界 **专用审查角色**：审查由插件内置的 REVIEWER_ROLE（固定 system persona、无工具、单请求快速裁决、严格 JSON 输出）执行，不借用环境里任何通用子代理角色模板。 **不污染子代理列表**：审查直接通过 DSH llm 服务执行无会话单次调用，不创建 Agent/Session，因此不会在子代理 catalog 中留下条目，也不会累积历史上下文。 没有命令前缀、正则、白名单、黑名单、危险操作列表或其他规则判断。 不会绕过 DSH 的沙箱：每次允许只返回原生的 allowed-once 一次性授权。 审查 LLM 输出是唯一的自动决策来源：allow 允许一次、deny 拒绝、ask 交回原生人工审批。 覆盖面：bash/pwsh 传完整命令文本；write/edit 传文件路径 + 变更摘要（old/new 或 content，截断至 2000 字符防大…
Recommendation signals
Meta
- License
- MIT
- Language
- JavaScript
- GitHub stars
- 1
- mo. downloads
- –
- Last push
- 2026-09-08
- Created
- 2026-08-25
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- dsh-plugin
Related plugins
dsh-auto-mode
NanmiCoder/dsh-auto-mode
Adds an Auto permission preset between Workspace Write and Full access: routine work stays in the official workspace-write sandbox while the current session model reviews escalation and destructive calls, granting one exact wider access once, asking when the intent is ambiguous, and denying critical paths.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
sofagent
KongFangXun/sofagent/tree/main/engine/dsh-plugins/cordis-plugin-sofagent-audit
Commit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 84 tools. Installable via dsh plugin add.
dsh-vault
Ox0400/dsh-vault
Encrypted local credentials vault for the Harness: a web settings page and vault_* tools to store, search and copy passwords, API keys, TOTP secrets and card data, with health audits, expiry rotation, imports/exports and read-only/ask access modes.