dsh-workflow-isolate
Run the following command in DeepSeek Harness:
dsh plugin install Linxiushen/dsh-workflow-isolate
Paste the following prompt into your AI chat to install this plugin:
To install this plugin, run dsh plugin install Linxiushen/dsh-workflow-isolate using the full source code at https://github.com/Linxiushen/dsh-workflow-isolate.
About this plugin
In DeepSeek Harness, scripts written by models typically run within the default Node.js environment, introducing significant security risks. dsh-workflow-isolate addresses this issue by providing a drop-in alternative that isolates model code within a completely independent JavaScript runtime. By leveraging QuickJS/WASM, this plugin establishes a robust language boundary, ensuring that models cannot access dangerous resources like the file system, network, or processes.
Its core capabilities lie in fine-grained resource control, featuring bounded guest memory, stack limits, and configurable execution deadlines to prevent resource exhaustion. By exposing only essential metadata and logging interfaces, developers can safely orchestrate multiple agents without worrying about unauthorized side effects. This makes it an ideal solution for developers managing untrusted code or building high-security automated workflows.
Use Cases
- Deploying untrusted model orchestration scripts
- Building high-security automated workflows
- Restricting system resource access for model scripts
Best For
- DeepSeek Harness developers prioritizing security boundaries
- Architects needing isolated execution environments for model code
- Engineers managing multi-agent collaborative workflows
Related Plugins
A method pack that makes AI coding agents plan against your real baseline, prove completion with fresh evidence, and reduce reworks and unsafe changes.
Turns the DeepSeek Harness session into a captain that builds a durable sub-agent team, splits goals into dependency-aware tasks, and coordinates work via direct messages and a live Web UI.
Gives coding agents design judgment, letting Claude Code, Cursor, and 70+ agents generate and iterate high-quality UI, presentations, and graphics right from the terminal.
Run the Pi ecosystem's plugins on DeepSeek Harness, unmodified, via a compatibility layer that implements Pi's public extension ABI on DSH's native services.