EliteOtaku/Guarded-Full-Access

README 摘要

Guarded Full Access / 受守护的全权限 DSH (DeepSeek Harness) plugin that adds a destructive command guard on top of danger-full-access . DSH (DeepSeek Harness) 插件：在 danger-full-access 基础上加一层“破坏性命令护栏”。 - More open than workspace-write : filesystem / shell still keep Full Access. 比 workspace-write 更开放：文件系统 / shell 仍保持 Full Access。 - Safer than danger-full-access : batch delete, format, disk wipe, forced git operations, mass permission changes are blocked or require approval by default. 比 danger-full-access 更安全：批量删除、格式化、抹盘、强制 Git 操作、批量权限变更等默认 拦截或要求批准 。 ⚠️ This is a “guardrail / last reminder”, not an OS-level security boundary. Command-line text matching can be bypassed by variables, encoding, or indirect execution. Use a real sandbox or a dedicated permission account when you need strong isolation. ⚠️ 这是“减震器 / 最后一道提醒”，不是 OS 级安全边界。命令行文本匹配可能被变量、编码、间接执行绕过；真正需要强隔离时请使用系统沙箱或专用权限账号。 Features / 特性 - Full Access remains available for normal operations / 普通操作仍保持 Full Access。 - Destructive commands are intercepted before execution via the official tools/pre-execute seam / 通过官方 tools/pre-execute 扩展点在执行前拦截破坏性命令。 - Built-in audit log / 内置审计日志。 - Slash commands for runtime control / 提供运行时控制命令。 Modes / 模式 M…

分类