Plugin directory / Security / dsh-dependency-firewall
dsh-dependency-firewall
Verified · install-tested on dsh MkaliezZ
What it does
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
Works — verified, early-stage project
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution. It installs cleanly and boots without issues in our testing. It's early-stage but functional.
“Verified” means our automated CI actually ran dsh plugin add in a clean profile and it booted — nothing more. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
dsh-dependency-firewall
Domain-specific dependency-installation guard for DeepSeek Harness.
v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.
High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.
Non-claims
- no package is installed by this plugin;
- no online reputation or CVE lookup in v0.1;
- classification is bounded and deterministic, not complete supply-chain security.
Development
npm install
npm test
MIT
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-dependency-firewall for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:MkaliezZ/dsh-dependency-firewallHeadless (CLI) profile:
dsh plugin --profile headless add github:MkaliezZ/dsh-dependency-firewallTest report
Verified: L1 install + L2 load + L3 runtime from GitHub source on dsh 0.1.0-rc.6.
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-dependency-firewall/)<a href="https://dshbase.com/plugins/dsh-dependency-firewall/"><img src="https://dshbase.com/badges/dsh-dependency-firewall.svg" alt="dshbase install-tested"></a>