Plugin directory / Security / @DWJZ/dsh-allow
@DWJZ/dsh-allow
Unverified
2Stars
SecurityCategory
GitHubSource
What it does
按路径与能力（read/write/create/delete/execute）授予 DSH shell 调用的文件权限，并在进程真正运行其下的 macOS Seatbelt profile 里强制；会话里的「审批」标签页显示每次判定是规则、自动复核还是人拍的板。 / Filesystem permissions for DSH shell calls, granted per path and capability instead of per command name, enforced in the process sandbox, with an Approvals tab showing which layer decided each call.
Our take
Unverified — not yet install-tested; try it in your own environment.
Unverified — not yet install-tested; try it in your own environment.
“Verified” means our CI ran dsh plugin add in a clean profile and it booted — not a security audit and not an endorsement of third-party code.
Install
🧩 Let your agent install it (recommended)
Install the catalog once, then ask DeepSeek Harness to find and install this plugin.
dsh plugin add dshbase-catalogWeb profile:
dsh plugin --profile web add github:dwjz/dsh-allow