cue-skills-cue-omni-reader-guard
Hardening guard for mcp__omni__parse in DeepSeek Harness: a tools/pre-execute listener that denies private/reserved host URLs (SSRF), enforces an allow-list or ask (consent), and is fail-closed when allowedRoots is empty.
Install
dsh plugin --profile web add github:sensedeal/cue-skills#path:/dsh/cue-omni-reader-guard
For reproducible installs, append #commit to pin a specific revision.
Hardening guard for mcp__omni__parse in DeepSeek Harness: a tools/pre-execute listener that denies private/reserved host URLs (SSRF), enforces an allow-list or ask (consent), and is fail-closed when allowedRoots is empty.
No highlight list provided; see the repository README.
- Install and start DeepSeek Harness:
npx @deepseek-ai/dsh web - Run the install command above (the CLI resolves the plugin and verifies its source)
- Confirm with dsh plugins list; restart Harness if required
Plugins run with your dsh process permissions and may execute code during installation. Read the repository source and license first, and check for destructive commands or excessive access. This site only indexes; it does not vouch for third-party plugins.
| Repository | github.com/sensedeal/cue-skills#cue-omni-reader-guard |
| License | Not declared (see repo) |
| Primary language | — |
| Downloads | 4 |
| GitHub stars | 7 |
| Last push | — |
| Cataloged | 2026-08-24 |
| Category | Security & Permissions |
Facts come from a public catalog snapshot (2026-09-16); descriptions are rewritten by us.
Sources: the public DeepSeek Harness plugin catalog and each plugin's GitHub repository. This is an independent third-party directory with no affiliation to or endorsement from DeepSeek, High-Flyer, or the plugin authors.
