面向 DeepSeek Harness 的 mcp__omni__parse 加固护栏:tools/pre-execute 监听器拒绝私网/保留主机(SSRF),施加白名单或 ask(同意),allowedRoots 为空时 fail-closed。
curl -fsSL https://www.dshhub.co/install.sh -o dshhub-install.sh && bash dshhub-install.shAlready have DSH? Skip the wizard and install the market directly:dsh plugin --profile web add dshhub-market
This plugin installs only from the plugin side.