dsh-always-require-tools-approval
在配置的工具（默认 bash、pwsh）执行前要求一次性用户审批：受控工具暂停并询问，其余委托执行，缺少审批渠道时默认拒绝。
Requires one-shot user approval before configured tools (default bash, pwsh) execute — gated tools pause and ask, everything else delegates, and a missing approval channel fails closed.
怎么安装
dsh plugin add @j0ss077/dsh-always-require-tools-approval 简介
@j0ss077/dsh-always-require-tools-approval **Stop. Confirm. Run.** A DeepSeek Harness plugin that pauses the tools on your watchlist and waits for your explicit approval before every execution. What it does DSH runs your agent in a sandbox that blocks file **writes** — but not commands. bash can still read files, launch programs, and reach the network. This plugin puts an **approval gate** between a tool and its execution. When the agent calls a tool on the watchlist, the harness pauses and asks before anything runs. Default watchlist: bash and pwsh. One approval = **one** execution. The next …
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 2
- 月下载
- –
- 最近更新
- 2026-08-26
- 创建于
- 2026-08-24
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- 主题标签
- deepseek-harness, dsh-plugin
同类推荐
dsh-auth-gateway
xbzbing/dsh-auth-gateway
为 dsh web 提供密码与 TOTP 双因素认证网关：登录前拦截全部 HTTP/WebSocket 请求，含按来源锁定、全局限流与一次性备份代码。
dsh-approval-llm
Letter2025/dsh-approval-llm
基于模型的权限审批：由独立审查模型自动应答 approval 权限请求。
dsh-auto-review
PerryLink/dsh-auto-review
审批链上的第二模型自动审查：只读审查子代理返回带理由的 allow/deny 结构化裁决，默认 fail-closed。
dsh-yolo-mode
SeverusZh/dsh-yolo-mode
沙箱升权申请的 LLM 自动审批：内置预设，fail-closed 兜底。