@suagr_xl/dsh-safety
用于 DeepSeek Harness 的安全防护插件，提供受保护路径强制执行、带撤销的回收站式安全删除、配置快照、重启前检查及审计日志功能。
AI 分析
核心用途是为 DSH 运行环境提供文件系统写入保护和配置备份。适合担心 AI 误删重要文件、破坏系统配置，需要高安全防护和操作审计的生产环境用户。
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:sugarxl/dsh-safety说明文档
阅读完整 README ↗Configuration
Configure via the bundle row in a patch layer (e.g. the profile's
cordis.patch.yml):
- id: dsh-safety
config:
blockWriteRoots: ["C:\\extra\\protected"]
confirmDeleteRoots: ["D:\\data"]
snapshotExclude: ["settings.yaml", ".credentials.yaml"]
blockWrites: true
blockShellDestructive: true
audit: true
keepTrash: 200
keepSnapshots: 10
| Field | Default | Meaning |
|---|---|---|
blockWriteRoots | profile manifests/patches/lockfiles/node_modules, install dir, home patch/settings | no write/edit/delete |
confirmDeleteRoots | $HOME, profiles/*, .agent-presets | no delete without force (still trash-only) |
snapshotExclude | ["settings.yaml", ".credentials.yaml"] | files never copied into snapshots |
blockWrites | true | enable the write/edit guard |
blockShellDestructive | true | enable the shell-delete guard |
audit | true | journal destructive tool calls |
keepTrash / keepSnapshots | 200 / 10 | retention limits |