What it does
Trusted Auto: a middle permission tier for DeepSeek Harness between workspace-write and danger-full-access, auto-approving harmless commands and trusted-area targets
Installation
dsh plugin --profile web add dsh-auto-approval-pluginInstall method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.
f3b83b319b372026-08-16f3b83b319b37The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (9 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 3
- infoMakes network requests (fetch / axios)client.js:108return fetch(CONFIG_PATH, { headers: { accept: 'application/json' } }).then(responseJson)
- infoMakes network requests (fetch / axios)client.js:112return fetch(STATUS_PATH, { headers: { accept: 'application/json' } }).then(responseJson)
- infoMakes network requests (fetch / axios)client.js:116return fetch(CONFIG_PATH, {
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-14 · activity: Active
• Repo created: 2026-08-16
• Stars: ★ 3 · Forks: 1
• Health: Active — committed within last 30 days