dsh-subagent-grok

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

# dsh-subagent-grok

Install:

```sh
export DSH_HOME=/tmp/dsh-subagent-grok-home
dsh plugin --profile headless add dsh-subagent-grok
```

[中文](README.zh.md)

Uses the locally authenticated Grok CLI as the default one-shot DSH subagent provider. Each delegation runs one `grok -p  --output-format json` process in the parent session's working directory.

## Requirements

- Node.js 20 or newer
- `@deepseek-ai/dsh` 0.1.1 release-candidate line
- Grok CLI on `PATH`, already authenticated through its own local configuration

The plugin never logs in and never accepts or writes an API key. Missing CLI, missing authentication, invalid JSON, non-text input, and empty prompts produce an explicit failed delegation.

## Safety

The default command combines `--always-approve` with Grok's built-in `workspace` sandbox. The sandbox limits writes to the parent working directory, Grok's state directory, and temporary directories.

To use another restricted profile, patch the provider config:

```yaml
- id: subagent-grok
  name: dsh-subagent-grok
  config:
    providerName: grok
    sandbox: strict
```

Disabling the sandbox requires both `sandbox: off` and `allowUnconfined: true`. This explicit opt-in is intentionally unavailable in the bundled defaults.

## Verify

```sh
npm test
dsh --profile headless --dump-config
```

An ACP initialize handshake succeeds with Grok CLI 1.0.13 on macOS. ACP remains a possible v2 transport; v1 uses the documented one-shot JSON command.