coderdailyone/dsh-plugin-browser-use

README excerpt

Install · Tools · Security model · Configuration · 中文文档 A DeepSeek Harness plugin that gives the model a real browser — navigate, click, fill, read, screenshot, tabs, downloads — backed by Chromium through playwright-core . Its differentiator is a security-first design : every URL is re-checked against a host-label allowlist and a private-network block on every action and again after every navigation — including redirects, link clicks, popups, background loads, and downloads. And no tool ever accepts a filesystem path from the model: every file the plugin writes lands in a constrained directory under a name the plugin picked itself. Install A Chromium is required. The plugin resolves one in this order: 1. executablePath config 2. $DSH BROWSER EXECUTABLE 3. Well-known OS locations (Chrome / Chromium / Edge / Brave) 4. Playwright's own browser resolution ( npx playwright install chromium ) Configuration key type default meaning allowedHosts string[] [] Host-label allowlist. example.com matches example.com and .example.com ; matching is on host labels, never substrings. Empty = any public host. allowPrivateNetwork boolean false Permit loopback / private / link-local targets. Off by de…

Category