DeepSeek Harness is a locally-first, extensible Coding Agent and agent development/runtime environment. To ensure the security of the tool itself and to prevent its misuse for any dangerous or harmful purposes, this Use Policy is hereby established.
1. Security Recommendations
DeepSeek Harness is capable of accessing various systems and performing operations on your local computer on your behalf. Please note that because Harness has the ability to run code and execute actions on your machine, it introduces unique security risks. Although most foundation models include basic safeguards against prompt injection, inherent risks remain when using DeepSeek Harness to interact with the internet or operate through other untrusted data sources. To mitigate these risks to the greatest extent possible, we recommend the following precautions:
- Use a dedicated virtual machine or container with limited privileges. This helps reduce the risk of local system attacks or accidental access to critical system resources.
- Always carefully review the code and test content generated by the Agent to ensure its accuracy.
- Avoid providing sensitive or confidential information to the Agent to prevent information disclosure.
- Always require human approval for any system or operation that could result in significant changes.
- When possible, break complex Agent instructions into smaller, isolated operations. This helps reduce the risk that a single erroneous command affects multiple parts of the system simultaneously and facilitates the detection of abnormal behavior.
- Only install and run plugins, MCP servers, Skills, Hooks, and their dependencies that come from trusted sources and have been reviewed.
- In some cases, the Agent may execute commands embedded in content, even if those commands conflict with the assigned task. We recommend adopting the above precautions to limit the risks posed by prompt injection.
By taking these steps, you can reduce the potential security risks associated with the Agent and better protect your systems and users. If you discover a security vulnerability, we recommend that you report it privately through the repository's harness-privacy@deepseek.com.
2. Use Restrictions
During the download and use of DeepSeek Harness, you must not use the software or its derivatives for the following purposes:
- For military purposes in any manner;
- For cyberattacks, or for chemical or biological attacks, in any manner;
- For harmful manipulation of other individuals or groups in any manner;
- For exploiting, harming, or attempting to exploit or harm others in any manner;
- For generating or disseminating information that has been verified as false and/or content intended to harm others;
- For generating or disseminating inappropriate content that violates applicable regulatory requirements;
- For generating or disseminating personally identifiable information without proper authorization or for unreasonable use purposes;
- For defaming, disparaging, or otherwise harassing others;
- For use in any manner that violates any applicable national or international laws or regulations, or infringes upon the lawful rights and interests of any third party.
If, during your use of the software, you discover any situation that you believe may violate these Use Restrictions, please report it through the harness-privacy@deepseek.com.
Additionally, please use DeepSeek's commercial logos and brand materials in accordance with the DeepSeek Brand Asset Usage Guidelines.