Plugin directory / Security / dsh-agent-gate
dsh-agent-gate
Verified · install-tested on dsh xingyingyuzhui
What it does
Claw/session permission gate and audit for DeepSeek Harness. 拦截、审批、审计。
Works — verified, early-stage project
Claw/session permission gate and audit for DeepSeek Harness. 拦截、审批、审计。 It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
dsh-agent-gate · 权限闸
按分层权限拦截工具（tools/pre-execute + tools.guard），需要时走官方一次性审批，并在 ~/.dsh/agent-gate/audit.jsonl 记一笔。Claw 会话的官方沙箱由 dsh-session-permissions 钉成 read-only / workspace-write。设置里有 审计 页：按时间、结果、工具类型、Claw Agent 筛选，并可导出当前筛选结果。
Agent 技能拒绝名单会从该会话的官方技能目录和 / 选单里拿掉，不只拦 skill 工具。未授权的 MCP 服务同样会拒绝，并在会话开始时从模型可见工具里拿掉。
策略计算复用同目录的 dsh-session-permissions（官方 ∩ Agent ∩ 会话）。闸只拦 Claw 会话；工作区会话只走官方权限。闸可以单独卸：拦截会停，官方文件沙箱只要权限插件还在就会继续钉。
安装
dsh plugin --profile web add github:xingyingyuzhui/dsh-agent-gate
建议同时安装 dsh-session-permissions。装完重启 dsh web。
本地开发：
dsh plugin --profile web add link:/abs/path/to/dsh-agent-gate
卸载
dsh plugin --profile web remove dsh-agent-gate
卸掉后不再拦截新调用。官方文件沙箱由权限插件继续钉，不会因为卸闸而变宽。
License
MIT
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-agent-gate for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:xingyingyuzhui/dsh-agent-gateHeadless (CLI) profile:
dsh plugin --profile headless add github:xingyingyuzhui/dsh-agent-gateTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-agent-gate/)<a href="https://dshbase.com/plugins/dsh-agent-gate/"><img src="https://dshbase.com/badges/dsh-agent-gate.svg" alt="dshbase install-tested"></a>