Tools & Capabilities

dsh-guard

kouyichi/dsh-plugins/dsh-guard · ★ 2

kouyichi

Security and governance for dsh: rule-based tool denial, full tool-call audit trail, and governance reports.

README body is shown in Chinese.

Repository Source

License: Unknown
Added: 2026-08-21
Maintenance: active
Install kind: github

No manifest check is available; listing does not imply compatibility or security review.

安装

dsh plugin --profile web add github:kouyichi/dsh-plugins#path:/dsh-guard

GitHub 源码安装：首次需按提示配置 allowBuilds 构建授权后重试

For install and environment setup, plus plugin development tutorials, see DSH community docs ↗

README

Source README · body: zh · Read Chinese README

生态空白：整个 security & governance 分类都是 0-3★ 萌芽。本插件把两个头部 agent 的安全模式移植到 dsh：

Codex「sandbox × approval」 → 声明式拒绝规则层（tools.guard() 官方 seam，单调拒绝、无规则即无操作）
Claude Code PreToolUse hook 审计（security-guidance）→ 全量工具调用审计 + 治理报告

工具

工具	功能
`guard_rules`	规则管理：add {tool, pattern, reason} / remove / list / toggle。tool 支持通配（bash*）
`guard_report`	治理报告：工具分布、错误率、被拒统计、危险命令命中
`guard_status`	插件状态
`guard_export`	审计导出 markdown
`guard_clear`	清空审计

存储：~/.dsh/guard/rules.json + ~/.dsh/guard/audit.jsonl

示例

guard_rules action=add tool=bash pattern="rm -rf /" reason="禁止删除根目录"
guard_rules action=add tool=web_search reason="本项目禁用联网搜索"
guard_report period_days=7

README

工具

示例

Related plugins

dsh-weknora

treg

dsh-anchored-standard

Deepseek-Harness-EAC

DSHA-dshapp

deepseek-harness-remote