DeepSeek Harness Plugin

hhuangpanda/dsh-tool-deny

Category Tools & Capabilities Added 2026-11-10

Hides or disables specific tools for a customized list of agent presets, such as tools another plugin adds to every preset. Hidden tools are removed from the tool list and use no tokens, denied tools have calls refused. Can also blank system prompts added by other plugins. Configured in YAML. Does nothing until you add a config row.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:hhuangpanda/dsh-tool-deny

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.