runseal-labs/dsh-tool-runseal ↗★ 0
dsh-tool-runseal
基于 RunSeal 沙箱的 DSH 命令行与子进程安全执行插件
AI 分析
核心用途是通过 RunSeal RPC 对智能体执行的 Bash 命令行和子进程实施系统级安全策略(如只读、工作区限制)。适合对代码执行安全性有严格要求的安全敏感型任务。
安装
此插件尚未提供可验证的 bundle,或兼容性检查未通过。请先阅读仓库说明。 阅读完整 README ↗
说明文档
阅读完整 README ↗Configuration
| Field | Default | Meaning |
|---|---|---|
command | — (required) | The runseal executable: absolute path or PATH-resolved name. |
args | [] | Extra arguments before the rpc subcommand (no shell). |
networkMode | unmanaged | Network policy: unmanaged, disabled, or proxy. |
maxStdinBytes | 65536 | Maximum stdin bytes for the bytes mode (runseal cap). |
timeoutMs | 600000 | Default per-execution timeout in ms. |
autoSetup | true | On Windows, automatically run runseal setup windows-sandbox --elevate for the workspace when a confined execution fails because setup is missing, then retry once. The elevation prompts the user through UAC once. |