my-dsh-plugin/readonly-security-audit ↗★ 0
dsh-readonly-security-audit
DSH 只读安全审计模式插件，提供系统级只读拦截、逐次写入审批和强制报告交付选择，适用于任意 Harness 检出或分支。
AI 分析
核心用途是为 DSH 运行环境提供严格的安全审计与只读保护。适合在敏感或生产环境中运行 AI 代理，需要防止未经授权的文件修改的用户。
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:my-dsh-plugin/readonly-security-audit说明文档
阅读完整 README ↗Configuration (optional)
The bundle patch inserts the plugin disabled on the host plane; the readonly-audit preset mounts it with active: true. Users can override the report path or allowlist deployment-specific readers in the preset file or in their profile cordis.patch.yml:
- id: readonly-security-audit
name: dsh-readonly-security-audit
config:
active: true
reportPath: reports/audit.md
extraReadOnlyTools: []
extraMutatingTools: []
reportPath must be relative and stay inside the session workspace. To enable the slash-command host instance in other presets, enable the readonly-security-audit row in the profile patch.