dsh-capsule
Run the following command in DeepSeek Harness:
dsh plugin install 2-c-q/dsh-capsule
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install 2-c-q/dsh-capsule inside DeepSeek Harness to install; the full source is available at https://github.com/2-c-q/dsh-capsule .
About this plugin
Loading a third-party DSH plugin into the host process silently grants it full network, filesystem, and subprocess authority—unacceptable in production. dsh-capsule takes a blunt stance: everything is a plugin, but ambient authority should not be. It confines untrusted guest code to a one-shot Linux Bubblewrap sandbox where the host only verifies a SHA-256 integrity digest and never trusts any runtime behavior.
Use Cases
- Loading third-party DSH tools in a production Profile without exposing host filesystem or network authority
- Injecting untrusted static prompt sections read-only into a session via sandbox
- Auditing guest capability boundaries: no persistent writes, no network, no subprocess spawning
Best For
- Linux platform engineers operating DSH in production environments
- Security admins who must isolate third-party code across multi-plugin Profiles
- Plugin authors developing DSH tools that run as capability-bound guests
Related Plugins
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.
Dockyard DSH is a native DeepSeek Harness plugin that unifies official OAuth/client sessions for Codex, Antigravity, Grok, Claude, and Cursor, providing account pool, model catalog, and quota status.