Sandboxes & Runtime plugins

DSH sandbox and runtime plugins give DeepSeek Harness somewhere safe to execute code — containers, virtual machines, isolated interpreters, and the infrastructure that supervises them.

84 cataloged

Recommended projects

Cataloged projects

Repositories with traceable evidence of a DeepSeek Harness relationship. They have not been reviewed, install tested, or security checked — the signal below each one is the whole of what the registry currently knows.

How cataloging works
Cataloged

dsh 的安卓/Termux bash 能力提供者——显式 Termux 环境注入、探测诊断、诚实的应用域沙箱声明。

Package metadata declares a DSH dependency

dsh-loader

dsh-plugins
Cataloged

A version‑aware adapter registry that decouples third‑party Cordis plugins from dsh’s internal service names, paths, and RPC internals. 基于版本感知适配器注册表,为 dsh Cordis 插件提供运行时兼容层,使第三方插件与内部服务名、模块路径及 RPC 细节解耦。

Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

环境体检:在「设置 → 环境体检」加一个分页,展示当前 DSH 宿主进程的身份(pid / 入口 / 工作目录 / Node / 运行时长)与环境变量分组(总数、DSH_ 前缀组、凭证形态组),值一律不出宿主;同时给模型一个只读的 env_inspect 工具。

README documents a DSH install command Bundle manifest found in repository
Cataloged

DSH 提示词增强插件:输入框强化/还原图标,隔离子会话 agent 重写提示词

README documents a DSH install command Bundle manifest found in repository

vm-blackbox

yugejixian
Cataloged

Black-box GUI testing for DeepSeek Harness: an AI tester drives a real Windows VM with only screenshots and mouse/keyboard.

README documents a DSH install command Bundle manifest found in repository
Cataloged

DSH: W2M — one DeepSeek account, one instruction, every online Windows/macOS machine runs the same project. Rabbit relay + per-machine Localside + eight DSH tools. Accounts are isolated per fleet, devices sign with Ed25519 keys, and /run works from a WeChat window.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

Pi-style Code Mode for DeepSeek Harness (DSH): Programmatic Tool Calling via QuickJS-WASM sandbox

README documents a DSH install command Bundle manifest found in repository
Cataloged

按单命令前缀自动放行 DSH 沙箱提权请求, 含管道与链式的命令一律转人工审批.

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

LLM approval answerer for DeepSeek Harness: deterministic filter + clean-context LLM review for sandbox escalations (requires the patched core, patches included)

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

AgentENV/E2B microVM execution-world bundle for DeepSeek Harness

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

Plugin Guard for DeepSeek Harness (DSH): isolate broken plugins so the web UI never goes down, with one-click self-update from npm.

README documents a DSH install command Bundle manifest found in repository

powershell-fix

GuTianshuo
Cataloged

DeepSeek Harness (DSH) host-layer plugin: detect & auto-fix Windows PowerShell command syntax mistakes (bash constructs, broken continuations, pasted prompts), then execute under the normal sandbox/approval policy

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

DSH 系统监控侧边插件:概览/进程/Docker 只读监控

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

DeepSeek Harness(DSH)插件:Python 快捷执行工具,源码经 stdin 直灌 `python -X utf8 -u -`,一步返回结果,全链路 UTF-8,支持后台作业与沙箱提权。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency

dsh-harden

thissensen
Cataloged

DSH 运行时看护层:API 调用失败自动续接重试、工具调用失败被吞自动拉回、只输出思考的回合自动重试、新增对接 pwsh 的后台 job 工具、一键修复异常会话日志、区分子Agent并且可自定义内容的上下文自动压缩。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency
Cataloged

Sandboxed jq / yq / read-only sqlite3.

README documents a DSH install command Bundle manifest found in repository
Cataloged

LeetCode Hot 100 learning plugin for DeepSeek Harness (DSH): lessons, sandboxed judge, AI tutor, spaced review, and an AI agent that adds LeetCode problems from a plain description. 力扣热题 100 学习插件。

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency

dsh-system-monitor

weihaobin0818-lgtm
Cataloged

DSH 侧栏实时硬件监控:CPU / GPU / 内存 / 磁盘一页看完,每秒刷新,每个读数都能下钻到是哪个应用。支持容量与内存耗尽预测、阈值告警与 NDJSON 导出。纯 Node,零运行时依赖,完整功能仅 Windows。

Bundle manifest found in repository
Cataloged

dsh-seatbelt 方面沙箱增强尝试使用非exec工具直接对接系统seatbelt相关api

README documents a DSH install command Bundle manifest found in repository Package metadata declares a DSH dependency

dsh-history-up

invoker-bandit
Cataloged

一个 DeepSeek Harness 插件:记录每个会话里你提交过的输入,支持用 <kbd>↑</kbd> 方向键逐条回溯,也可以用 <kbd>/</kbd> 菜单挑一条填进输入框。按会话隔离的 shell 式输入历史。

Bundle manifest found in repository

dsh-stability-audit

chunfenxiazhi-collab
Cataloged

Scan installed dsh plugins and grade stability risk (hook surface, startup work, preflight, deps) with optional isolated install verification

README documents a DSH install command Bundle manifest found in repository

Strip placeholder tool-call arguments that DSH rejects: sandbox_permissions/justification (false sandbox escalation) and empty reasoning_effort (rejected subagent delegation).

Bundle manifest found in repository

dsh-plus

kaerf15
Cataloged

DSH+:给 DeepSeek Harness web 套原生桌面窗口的多应用容器(electron,macOS/Windows)

README documents a DSH install command
Cataloged

DeepSeek Harness native SSH terminal and SFTP workspace with direct agent tools and security sandboxing.

README documents a DSH install command Bundle manifest found in repository

Sandboxes & Runtime plugins: common questions

What is a DSH sandbox plugin?
A plugin that runs generated code in an isolated environment instead of directly on your machine.
Why use a sandbox?
Because agent-generated code is untrusted by default. A sandbox limits what a mistake or an injection can reach.
Do sandboxes need Docker?
Some do, others use a language-level interpreter or a hosted runner. Each record documents its own requirement.