my-dsh-plugin/readonly-security-audit

README excerpt

readonly-security-audit A new built-in read-only security audit mode for DeepSeek Harness. It appears in the agent-preset picker beside Standard, PTC, Minimal, and Creator: 只读安全审计 / Read-only audit mode . The assistant may read and analyze code, dependencies, and configuration, while every file mutation is rejected by the system unless the user approves one exact write. 中文：README.zh.md What it does - The readonly-audit agent preset starts the session already in audit mode ( active: true ); no slash command is required to enter it. - /readonly-audit off leaves the mode for the current session and restores its previous sandbox/approval policy; /readonly-audit on and /readonly-audit status are also available. - Entering the mode writes sandbox/mode: read-only , so the harness's existing filesystem and process sandboxes reject file writes ( write , edit , bash commands that touch files) at the enforcement layer, not by prompt good will. - The plugin also registers an outermost tools/pre-execute gate. In audit mode every tool call must be an allowlisted reader ( read , read image , glob , grep , str replace editor view , sandboxed bash / pwsh , web read/search, ask tools) or an explicit…

Category