A native dsh plugin giving safe auto-permissions: routine work auto-approved, risky actions reviewed and destructive critical-path access blocked before it runs.
DSH integration
Native runtime
Author-claimed
Safety audit
Unaudited
Last verified
2026-08-23
License
MIT
01What can it help you accomplish?
Get safe automatic permissions for DeepSeek Harness — routine work auto-approved, risky actions reviewed
Routine project work runs inside the workspace-write sandbox; semantic risks are classified by the DSH model and user instructions, ambiguous cases ask once, and destructive access to critical paths is denied before execution
DeepSeek Harness (dsh) users who want broad agent access without manually approving every step or granting full unrestricted access
02How to install into DeepSeek Harness
Prerequisites
- An existing DeepSeek Harness installation (the README says it requires an existing DeepSeek Harness installation)
- Tested with DeepSeek Harness 0.1.0-rc.6 (the README badge states this)
Installation steps
- 01
Run `dsh plugin --profile web add @nanmicoder/dsh-auto-mode`
$ dsh plugin --profile web add @nanmicoder/dsh-auto-mode
Verify the integration
Not specified by the author
Rollback
- Remove the plugin via the dsh plugin manager for the web profile (the README's update-from-source section was truncated, so a verbatim remove command is not stated)
03DSH integration and capability boundaries
Native dsh plugin installed into the `web` profile; keeps Auto mode on the official `workspace-write` OS file sandbox and adds risk review
Risk-bounded Auto mode
Routine project work and the current DSH model + user instructions→Auto-approved routine work inside workspace-write; classified semantic risks, one-time ask on ambiguity, pre-execution denial of destructive critical-path access
Does not implement a sandbox itself; relies on the official workspace-write OS file sandbox (the README states this explicitly)
04Who is it for? When not to use it?
Good for
- DeepSeek Harness (dsh) users who want broad agent access without manually approving every step or granting full unrestricted access
Not for
- The file sandbox does not restrict reads, network access, or external services; the Windows backend reports `partial` enforcement. Auto mode therefore cannot contain network or read-side risks.
05Compatibility, maintenance and safety notes
- The file sandbox does not restrict reads, network access, or external services; the Windows backend reports `partial` enforcement. Auto mode therefore cannot contain network or read-side risks.
MIT · no release yet (last push 2026-08-22)
06Frequently asked questions
How do I install dsh-auto-mode?
Run `dsh plugin --profile web add @nanmicoder/dsh-auto-mode` into the web profile. It requires an existing DeepSeek Harness installation and is tested with 0.1.0-rc.6.
Does it run inside DeepSeek Harness?
Yes — it is a native dsh plugin installed into the `web` profile. It sits on top of the official workspace-write sandbox rather than replacing the harness.
What does Auto mode actually allow or block?
Routine project work inside workspace-write runs automatically. Semantic risks outside that boundary are classified by the DSH model and your instructions; true ambiguity asks once; destructive access to critical paths is denied before execution.
Is everything sandboxed?
No. The README states the file sandbox does not restrict reads, network access, or external services, and the Windows backend reports `partial` enforcement. Auto mode cannot contain network or read-side risks.
07Related DSH workflows
openviking
by volcengine
Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.
colleague-skill
by titanwings
Turn memories and knowledge into warm, reusable agent skills — a skill generator for digital companions in the AI persona era.
nocobase
by nocobase
NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability.
archify
by tt-a1i
Agent skill for beautiful, verifiable architecture, workflow, sequence, data-flow, and lifecycle diagrams—self-contained HTML with motion and crisp export.
08Data and sources
`dsh-auto-mode` adds the missing middle ground. Routine project work runs directly inside the official `workspace-write`…
dsh plugin --profile web add @nanmicoder/dsh-auto-mode
This page is generated from the project’s public documentation, repository metadata and a structured parse of DSH Plugins; last verified on 2026-08-23. Found an error? Submit a correction.