AI Agent Hub
Back to plugins
🧩

dsh-capsule

admin-security Updated 2026.08.25

Run the following command in DeepSeek Harness:

dsh plugin install 2-c-q/dsh-capsule

Paste the following prompt into your AI chat to install this plugin:

Run dsh plugin install 2-c-q/dsh-capsule inside DeepSeek Harness to install; the full source is available at https://github.com/2-c-q/dsh-capsule .

About this plugin

Loading a third-party DSH plugin into the host process silently grants it full network, filesystem, and subprocess authority—unacceptable in production. dsh-capsule takes a blunt stance: everything is a plugin, but ambient authority should not be. It confines untrusted guest code to a one-shot Linux Bubblewrap sandbox where the host only verifies a SHA-256 integrity digest and never trusts any runtime behavior.

Use Cases

  • Loading third-party DSH tools in a production Profile without exposing host filesystem or network authority
  • Injecting untrusted static prompt sections read-only into a session via sandbox
  • Auditing guest capability boundaries: no persistent writes, no network, no subprocess spawning

Best For

  • Linux platform engineers operating DSH in production environments
  • Security admins who must isolate third-party code across multi-plugin Profiles
  • Plugin authors developing DSH tools that run as capability-bound guests