J0ss077/dsh-always-require-tools-approval ↗★ 0
@j0ss077/dsh-always-require-tools-approval
在配置的工具执行前强制进行单次用户审批的 DSH 插件
AI 分析
核心用途是为高风险工具（如bash、pwsh）强制引入执行前的人工审批步骤。适合对系统安全要求极高、需要严格限制Agent自主执行命令权限的用户。
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:J0ss077/dsh-always-require-tools-approval说明文档
阅读完整 README ↗Configuration
There is exactly one option:
| Key | Type | Default | Meaning |
|---|---|---|---|
tools | string[] | ["bash", "pwsh"] | Tool names that require approval before they run. |
Changing the list at runtime
tools is registered as the user-settings namespace always-require-tools-approval, so you can override it without reinstalling. Edit $DSH_HOME/settings.yaml (defaults to ~/.dsh/settings.yaml when $DSH_HOME is unset):
always-require-tools-approval:
tools: ["bash", "pwsh"]
Your settings file takes precedence over the value baked into the bundle.
Examples