Sandbox & Runtimedsh-plugin
dsh-approve-for-me
Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.
Stars
15
Forks
1
Open issues
0
Last push
Sep 12, 2026
Latest release
—
24h Growth
+0
7d Growth
+0
Installation
dsh plugin --profile web add dsh-approve-for-me@latestOverview
Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.
- Rule-gated automatic approval for Shell and PowerShell sandbox escalations.
- Optional tool-free LLM reviewer can only allow a matching candidate or return it to the user.
- Every successful decision grants one allowed-once; it never grants permanent access.
- Fixed high-risk checks run before user rules and the reviewer; a high-risk result returns to native human approval.
- Literal command-prefix rules for shell or pwsh; every segment of a compound command must match independently.
- Web settings card is optional; configuration can also be edited in settings.yaml.
- YAML mode can be rules-only or rules-and-llm; reviewer provider/model can be pinned or inherited from the session.
- Failure, timeout, invalid output, ambiguity, or mismatch returns to human approval.