Check a plugin
HomeSandboxes & Runtime

Sandboxes & Runtime plugins

DSH sandbox and runtime plugins give DeepSeek Harness somewhere safe to execute code — containers, virtual machines, isolated interpreters, and the infrastructure that supervises them.

82 cataloged

Recommended projects

Cataloged projects

Repositories with traceable evidence of a DeepSeek Harness relationship. They have not been reviewed, install tested, or security checked — the signal below each one is the whole of what the registry currently knows.

How cataloging works
Cataloged

Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.

README documents a DSH install command Bundle manifest found in repository
677TypeScriptApache-2.0Run a check
Cataloged

Give DeepSeek Harness a real office environment. Univer Office Plugin brings spreadsheets, docs, slides, canvases, relational tables, and more into one runtime — with connected data, validation, versioned changes, and isolated worktrees for multi-agent collaboration.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
429TypeScriptApache-2.0Run a check
Cataloged

让 Agent 的工作方式可组合、可审查、可持续改进，最终实现 Agent Self Evoling。 DeepSeek Harness Web plugin with composable task controls and isolated, human-reviewed self-evolution.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
199TypeScriptMITRun a check
Cataloged

推荐组件（非必须）：DeepSeek Harness 运行时注入器；已随 dsh-routing-suite 单仓库化保留，本仓库继续维护/发布。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
165TypeScriptRun a check
Cataloged

Community Docker and Kubernetes packaging for DeepSeek Harness (@deepseek-ai/dsh), with a hardened image, Compose stack, Helm chart, Web UI, and headless CLI.

README documents a DSH install command
100ShellMITRun a check

dsh-passwords

slywalker2006
Cataloged

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
63TypeScriptGPL-3.0Run a check
Cataloged

Session-aware sandbox escalation compatibility plugin for DeepSeek Harness/DSH第三方模型会话沙箱升级兼容插件

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
56TypeScriptMITRun a check
Cataloged

Branch from any answer and keep branching at any depth. Recursively isolated follow-ups that leave the main DSH task untouched.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
49TypeScriptMITRun a check
Cataloged

基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for DeepSeek Harness with automated recon, vulnerability analysis, validation, reporting, and Docker/Kali toolbox

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
34TypeScriptNOASSERTIONRun a check
Cataloged

面向公网的多租户 DSH 托管平台 —— 部署到一台公网服务器后，多个用户注册并经管理员审核，各自获得一套相互隔离的 deepseek-harness（DSH）环境，随时通过域名安全访问。

Bundle manifest found in repository
28TypeScriptMITRun a check
Cataloged

Multi-tenant projects & users plugin for DeepSeek Harness (DSH): per-user symlinked workspaces, login gate, session isolation, workspace-write lock and system-prompt guard

README documents a DSH install command Package metadata declares a DSH dependency
24TypeScriptRun a check
Cataloged

Solo-style isolated brainstorm branches and Handoffs for DeepSeek Harness

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
23TypeScriptMITRun a check
Cataloged

DeepSeek Harness plugin for rule-gated automatic sandbox approval with optional LLM review, one-time grants, fixed high-risk checks, and native human fallback.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
18TypeScriptMITRun a check
Cataloged

DeepSeek Harness 插件：处理DSH沟槽的权限管理（full acess下传入同级或者降级的请求会报错，导致ai大战权限管理）

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
17JavaScriptMITRun a check

dsh-llm-hub

webkubor
Cataloged

给 DSH 模型页补上官方适配器缺的那半：网关可达性探测、模型目录拉取并勾选写回、余额/配额常驻、协议与接入地址可见。零运行时依赖，不改动 DSH 安装。

README documents a DSH install command Bundle manifest found in repository
15JavaScriptMITRun a check
Cataloged

DeepSeek Harness 会话修改审查插件：追踪会话内 write/edit，diff 对比展示，会话隔离/子代理聚合/SSE 实时推送/颜色自定义

README documents a DSH install command Package metadata declares a DSH dependency
14JavaScriptMITRun a check

agent-guard

mokuyoaxis
Cataloged

Make destructive AI-agent actions reversible by default — quarantine + audit + human escalation for rm/git destructive operations. Reliability infrastructure, not a sandbox.

Bundle manifest found in repository
13PythonMITRun a check
Cataloged

在 Windows 环境中为 DeepSeek Harness 提供 Git Bash 与 WSL 2 bash 工具,含 bwrap 沙箱、审批模式、后台任务

README documents a DSH install command Package metadata declares a DSH dependency
12JavaScriptMITRun a check
Cataloged

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Bundle manifest found in repository
12TypeScriptApache-2.0Run a check
Cataloged

Isolated install-and-smoke test drives for DeepSeek Harness plugins: installs a repo or npm package into a throwaway DSH_HOME profile, verifies the bundle patch layer and boot logs, records a structured pass/fail result matrix (JSON/Markdown) for scoring pipelines, and quarantines every temp directory it owns

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
10TypeScriptApache-2.0Run a check

dsh-login

islibaodong
Cataloged

Multi-user login gateway plugin for the DeepSeek Harness Web GUI: login wall, per-user conversation isolation, in-GUI user management

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
10TypeScriptMITRun a check

dsh-plugins

wsxwj123
Cataloged

Independent plugins for DeepSeek Harness, organized as isolated packages in one monorepo.

README documents a DSH install command
9JavaScriptMITRun a check

DSH-Encrypt

yauntyour
Cataloged

DeepSeek Harness 凭据加密插件，通过设置密码使用AES-256-GCM+SHA3-256实现的全流程加密+校验，运行时临时解密，内存安全。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
6TypeScriptMITRun a check
Cataloged

为 DSH 默认沙箱增加可配置的「沙箱授权目录」，允许工作区外的受信修改。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
6JavaScriptMITRun a check
Cataloged

DeepSeek Harness 中文汉化插件：运行时把所有系统提示词、工具描述与运行时上下文翻译成中文（system-prompt/assemble 瀑布钩子，零源码修改）

Package metadata declares a DSH dependency
6JavaScriptMITRun a check
Cataloged

A deepseek harness plugin for tensorlake sandbox

README documents a DSH install command Package metadata declares a DSH dependency
6TypeScriptMITRun a check

dsh-sandbox-tester

Sutera-Diffusus
Cataloged

DSH sandbox tester: process-isolated testing ground for DeepSeek Harness

Package metadata declares a DSH dependency
5JavaScriptMITRun a check
Cataloged

为 DeepSeek Harness(dsh) 新增 Net Access 模式，用于解决 Windows 沙箱内 curl.exe 无法访问 HTTPS 的问题，文件写保护不变。 / Adds a Net Access mode to DeepSeek Harness(dsh): curl.exe can access HTTPS inside the Windows sandbox again, with file-write protection unchanged.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
5JavaScriptNOASSERTIONRun a check

dsh-niu

caomengxuan666
Cataloged

Niubash runtime, sandbox, profile bundle, and Web UI plugin for DeepSeek Harness

README documents a DSH install command
5TypeScriptRun a check

dsh-plugin-audit

jkrandom-sudo
Cataloged

Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计：静态权限画像（附文件/行号证据）+ 运行时哨兵，触及凭证或向未知主机外发数据时先请你批准

README documents a DSH install command Bundle manifest found in repository
4TypeScriptMITRun a check
Cataloged

DSH model-routing plugin for keyword routing and isolated image generation / DSH 关键词路由与隔离生图插件

Bundle manifest found in repository Package metadata declares a DSH dependency
4TypeScriptMITRun a check

dsh-ffmpeg

STARDUSTLC666
Cataloged

DSH 视频处理插件：ffmpeg 探测、裁剪、拼接、压制、字幕、GIF、抽帧与调整，走官方 subprocess 服务，零运行时依赖。

README documents a DSH install command Bundle manifest found in repository
4JavaScriptMITRun a check
Cataloged

dsh-yolo-mode - an LLM-powered auto-approval plugin for DeepSeek Harness sandbox escalations (built-in presets + custom permission levels, fail-closed)

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
4JavaScriptMITRun a check
Cataloged

Docker 容器沙箱部署级插件(与 dsh-plugin-vm-sandbox 全能力对齐,无需 OrbStack):39 个 docker_* 模型工具、快照/回滚、文件传输、端口转发、后台任务、审计、共享/配额/回收、网络策略与华丽原生 UI。

README documents a DSH install command Bundle manifest found in repository
3JavaScriptApache-2.0Run a check

dsh-route-resilience

lokic7123-star
Cataloged

Multi-route high-availability, fault isolation and observability for DeepSeek Harness: model groups fail over between authorized provider routes on rate limits, retry-after, transport and auth failures.

Bundle manifest found in repository Package metadata declares a DSH dependency
3TypeScriptMITRun a check
Cataloged

DSH compatibility plugin for redundant same-mode sandbox escalation requests

Package metadata declares a DSH dependency
3JavaScriptMITRun a check

dsh-worlds

frozo-ai
Cataloged

Remote execution worlds for DeepSeek Harness: run the agent's Bash, terminals, LSP and file tools inside a container. Zero dependencies.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
3JavaScriptRun a check

dsh-docker

STARDUSTLC666
Cataloged

DSH 容器与镜像管理插件：走官方 subprocess 服务，argv 无 shell 注入，exec 与破坏性操作默认审批。

README documents a DSH install command Bundle manifest found in repository
3JavaScriptMITRun a check
Cataloged

防止模型改写工作区里的指定路径. 同时支持放开某些外部目录的写入而不必放开沙箱.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
3TypeScriptMITRun a check

dsh-loader

dsh-plugins
Cataloged

A version‑aware adapter registry that decouples third‑party Cordis plugins from dsh’s internal service names, paths, and RPC internals. 基于版本感知适配器注册表，为 dsh Cordis 插件提供运行时兼容层，使第三方插件与内部服务名、模块路径及 RPC 细节解耦。

Bundle manifest found in repository Package metadata declares a DSH dependency
3TypeScriptNOASSERTIONRun a check

dsh-autogate

wangxing-git
Cataloged

DeepSeek Harness 自动审批插件：在 workspace-write 沙箱之上叠加确定性规则 + LLM 安全审批，自动模式不放宽沙箱、fail-closed。 Safe auto-approval for DeepSeek Harness — deterministic rules + LLM review on top of the workspace-write sandbox. Auto mode without ever granting full-access.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
3TypeScriptMITRun a check
Cataloged

A self-evolving plugin for DeepSeek Harness (dsh). It observes how the agent runs, proposes improvements to its own assets via the LLM, validates each proposal inside a sandboxed trial agent, and applies only verified mutations — with a versioned ledger and automatic rollback on regression.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
3TypeScriptMITRun a check
Cataloged

原生UI界面。面向 DeepSeek Harness Web 的虚拟机沙箱插件：它基于 OrbStack 为每个会话提供独立的 debian/alpine 沙箱虚拟机，在会话视图环中新增「虚拟机」页签，支持查看/启动/休眠/删除和详细配置展示，同时为模型提供 `vm_list`、`vm_create`、`vm_exec`、`vm_delete` 工具，并内置全局运行上限、闲置自动休眠、归档/删除自动清理等资源治理能力。

Bundle manifest found in repository
3JavaScriptApache-2.0Run a check
Cataloged

DSH plugin developer sandbox: spawn isolated DeepSeek Harness web mirror instances (own DSH_HOME/port/profile) that mount the plugin under development, with optional host API/model inheritance. GUI panel + sandbox_* agent tools.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
2TypeScriptApache-2.0Run a check
Cataloged

Per-project runtime environments for DeepSeek Harness: auto-adopt or create a project-local Python venv (.venv_local/python) and wire in toolchains/env vars for the runtimes each project uses.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
2JavaScriptRun a check
Cataloged

DSH profile plugin: full-access (GPU-capable) sandbox with per-operation approval for writes outside the workspace or to protected files.

README documents a DSH install command Bundle manifest found in repository
2JavaScriptMITRun a check

dsh-agent-arena

LeemanCheung
Cataloged

Isolated multi-model coding matches with deterministic verification, scoring, and reports

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
2TypeScriptMITRun a check
Cataloged

Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents

README documents a DSH install command
2TypeScriptApache-2.0Run a check
Cataloged

QuickJS/WASM-isolated workflow engine for DeepSeek Harness with bounded resource controls

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
2TypeScriptMITRun a check

worktree-mgr

JohnXu22786
Cataloged

DSH 插件：为任务自动创建隔离的 git 工作区，管理创建/同步/收尾全生命周期 (task-isolated git worktrees for DeepSeek Harness)

README documents a DSH install command Bundle manifest found in repository
2JavaScriptMITRun a check
Cataloged

Zero-dependency verification standard for DeepSeek Harness (dsh) plugins — static structure gates (R), cordis contract checks (K), sandbox smoke (D), ecosystem-listing checks (CC). 零依赖 DSH 插件核验标准：静态结构门禁、cordis 契约扫描、无头沙箱冒烟与生态收录核验。

README documents a DSH install command Bundle manifest found in repository
2JavaScriptApache-2.0Run a check

kidai-snapshot-guard

NokorinNishikino
Cataloged

KSG 纪代备份：DSH 内部备份插件，关闭自动保存快照、开机确认、单 zip 备份导出导入恢复、隔离自动恢复、多主流备份插件文件兼容

README documents a DSH install command Bundle manifest found in repository
2JavaScriptMITRun a check
Cataloged

Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, with the minimal-win collective-thinking preset (we/let's chain)

README documents a DSH install command Bundle manifest found in repository
2JavaScriptMITRun a check
Cataloged

dsh-seatbelt 方面沙箱增强尝试使用非exec工具直接对接系统seatbelt相关api

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1TypeScriptBSD-3-ClauseRun a check
Cataloged

Complete Git worktree support for DeepSeek Harness: task-scoped isolated checkouts on their own branches, recorded in a per-repo manifest that survives sessions and restarts

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1JavaScriptMITRun a check
Cataloged

按路径与能力（read/write/create/delete/execute）授予 DSH shell 调用的文件权限，并在进程真正运行其下的 macOS Seatbelt profile 里强制；会话里的「审批」标签页显示每次判定是规则、自动复核还是人拍的板。 / Filesystem permissions for DSH shell calls, granted per path and capability instead of per command name, enforced in the process sandbox, with an Approvals tab showing which layer decided each call.

Bundle manifest found in repository
1JavaScriptMITRun a check
Cataloged

DSH 0.1.7 Windows ACL 沙箱在非系统盘工作区下全部命令 spawn 前失败的临时修复插件——不动任何系统 ACL，恢复 workspace-write。 | Temporary fix for the DSH 0.1.7 Windows ACL sandbox failing on non-system-drive workspaces (grantWrite / SetNamedSecurityInfoW Win32 5) — restores workspace-write without touching system ACLs. 支持 DSH 0.1.7-rc.1+。

README documents a DSH install command Bundle manifest found in repository
1JavaScriptMITRun a check
Cataloged

面向 DeepSeek Harness 的自动审批审查插件，借鉴 Codex 风格设计，结合原生沙盒与独立审查模型，提供风险审批、拒绝熔断及 WebUI/TUI 状态提示。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1TypeScriptMITRun a check

Sandboxes & Runtime plugins: common questions

What is a DSH sandbox plugin?
A plugin that runs generated code in an isolated environment instead of directly on your machine.
Why use a sandbox?
Because agent-generated code is untrusted by default. A sandbox limits what a mistake or an injection can reach.
Do sandboxes need Docker?
Some do, others use a language-level interpreter or a hosted runner. Each record documents its own requirement.