政策
信任、安全与伦理
DeepSeek Harness 是 local-first 的 coding agent runtime。本页复述官方 Safe Use Policy 与 SAFETY 说明，不改其含义。
合法使用政策
During download and use of DeepSeek Harness you must not use the software or its derivatives for military purposes; for cyberattacks or chemical or biological attacks; for harmful manipulation of people; for exploiting or harming others; for generating or spreading verified false information intended to harm; for content that violates applicable rules; for generating or spreading personal data without authorization; for defaming or harassing others; or for any use that violates applicable law or third-party rights.
If you believe a use violates those restrictions, the official policy asks you to report it through the repository contact [email protected]. This website does not operate that inbox.
伦理使用
The agent can run code and act on your machine. Prompt injection remains a risk when the runtime reads the network or other untrusted data. Official precautions:
- Use a dedicated virtual machine or container with limited privileges.
- Review generated code and tests before you keep them.
- Avoid giving the agent sensitive or confidential information.
- Require human approval for operations that change important systems.
- Split complex instructions so a single bad command has a smaller blast radius.
- Install only reviewed plugins, MCP servers, Skills, Hooks, and dependencies.
源码透明
0.1.x is MIT-licensed. The official tree is deepseek-ai/deepseek-harness. The published CLI is @deepseek-ai/dsh. Third-party notices ship in THIRD_PARTY_NOTICES.md. npm publishes shasums and signatures per version; numbers are listed on SHA 与签名说明.
Community plugin indexes are not the official contract. A topic tag is discovery, not endorsement.
无恶意软件说明
The published CLI is source-inspectable npm software. This site does not ship an unsigned Windows installer and does not bundle advertising modules. Heuristic antivirus flags on Node plus shell spawn are expected noise, not a finding by themselves.
That statement is not a security audit. Third-party plugins can execute with the same OS user. A same-user process can read credential files even under workspace-write. You review what you install.
用户责任
Use DeepSeek Harness at your own risk. The software is provided without warranty under the MIT License. To the maximum extent permitted by law, authors and copyright holders are not responsible for damage to computers, loss or disclosure of data, loss of files, or other harm from use of the project.
Do not rely on DeepSeek Harness as the sole security control for untrusted workloads. File-effect modes, approval prompts, and Seatbelt / bwrap / Windows ACL backends reduce risk. They do not isolate the host.
首次运行实践 and the safety FAQ repeat the same bounds in shorter form.