Check a plugin
HomeSandboxes & Runtime

Sandboxes & Runtime plugins

DSH sandbox and runtime plugins give DeepSeek Harness somewhere safe to execute code — containers, virtual machines, isolated interpreters, and the infrastructure that supervises them.

67 cataloged

Recommended projects

Cataloged projects

Repositories with traceable evidence of a DeepSeek Harness relationship. They have not been reviewed, install tested, or security checked — the signal below each one is the whole of what the registry currently knows.

How cataloging works
Cataloged

dsh-seatbelt 方面沙箱增强尝试使用非exec工具直接对接系统seatbelt相关api

README documents a DSH install command Package metadata declares a DSH dependency
1TypeScriptBSD-3-ClauseRun a check
Cataloged

DSH web 插件：通过运行时 monkey-patch LocaleRuntime.lookup 注入第三语言（ja/ko/...）覆盖，保持 dsh active locale 不变；通过 DSH 设置页通用分区暴露切换 UI。 | DSH web plugin: injects third-language (ja/ko/...) overrides via a runtime monkey-patch of LocaleRuntime.lookup, leaving the dsh active locale unchanged; exposes a switcher UI through the DSH settings page (General section).

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1JavaScriptNOASSERTIONRun a check
Cataloged

在 DeepSeek Harness（dsh）中复用 WorkBuddy 专家市场：Web 输入框内嵌按会话的「专家选择器」，选中专家后将其人设注入该会话的系统提示词、并把该专家捆绑的技能开放给该会话使用（按会话隔离、无需为每个专家维护预设），选择状态跨刷新/重启持久化。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1TypeScriptRun a check
Cataloged

Strip sandbox_permissions/justification from model tool-call arguments to avoid false sandbox escalation errors

Bundle manifest found in repository
1JavaScriptMITRun a check

dsh-safety-net

Asuna486-desuwa
Cataloged

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1JavaScriptMITRun a check
Cataloged

Deterministic DeepSeek Harness plugin that explains Windows sandbox spawn EPERM failures in context

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
1TypeScriptApache-2.0Run a check
Cataloged

Version-scoped compatibility shims for DeepSeek Harness 0.1.0-rc.6: pi-ai compat, sandbox schema shim, keyboard guard.

README documents a DSH install command
1JavaScriptMITRun a check

Sandboxes & Runtime plugins: common questions

What is a DSH sandbox plugin?
A plugin that runs generated code in an isolated environment instead of directly on your machine.
Why use a sandbox?
Because agent-generated code is untrusted by default. A sandbox limits what a mistake or an injection can reach.
Do sandboxes need Docker?
Some do, others use a language-level interpreter or a hosted runner. Each record documents its own requirement.