插件目录 / Security / dsh-dependency-firewall
dsh-dependency-firewall
已验证 · 实测可装 MkaliezZ
功能简介
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
可用 — 实测通过，早期项目
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution. 实测能干净安装、正常启动。早期项目，但功能可用。
「已验证」表示我们的自动化 CI 在干净 profile 里实际执行了 dsh plugin add 并启动成功——仅此而已。功能描述与版本兼容性均为作者声明。这不是安全审计，也不代表对第三方代码的背书。
README
dsh-dependency-firewall
Domain-specific dependency-installation guard for DeepSeek Harness.
v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.
High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.
Non-claims
- no package is installed by this plugin;
- no online reputation or CVE lookup in v0.1;
- classification is bounded and deterministic, not complete supply-chain security.
Development
npm install
npm test
MIT
安装
装一次目录插件，之后本站所有插件都能让 DeepSeek Harness 自动找、自动装：
dsh plugin add dshbase-catalog然后对 agent 说「帮我装 dsh-dependency-firewall」，它会在目录里找到并自动安装。文档：dshbase-catalog · 已验证场景包。
该插件是 GitHub 源码（未发 npm）——直接从仓库装：
Web profile：
dsh plugin --profile web add github:MkaliezZ/dsh-dependency-firewallHeadless（CLI）profile：
dsh plugin --profile headless add github:MkaliezZ/dsh-dependency-firewall实测报告
验证通过：从 GitHub 源码完成 L1 安装 + L2 加载 + L3 运行（dsh 0.1.0-rc.6）。
分享徽章
把这枚徽章粘进 README——它会链回本页，实测状态变化时自动更新：
[](https://dshbase.com/zh/plugins/dsh-dependency-firewall/)<a href="https://dshbase.com/zh/plugins/dsh-dependency-firewall/"><img src="https://dshbase.com/badges/dsh-dependency-firewall.svg" alt="dshbase 实测可装"></a>