CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
688 plugins
dsh-ip-httpsIp Https
DeepSeek Harness plugin: remote settings + Let's Encrypt IP certificates. No domain, no login.
dsh-grok-providerGrok Provider
Clean-room Grok Build provider for DeepSeek Harness with official CLI browser authentication
dsh-llm-injection-filterLlm Injection Filter
DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.
dsh-dbhub-liveDbhub Live
DSH database MCP bridge plugin: zero-knowledge credential management (passwords never enter the model) + one-time process execution by source (no persistent service, inherently safe for concurrency and multiple instances) + automatic installation of dbhub and browser status card.
dsh-session-controlSession Control
Authorized, durable cross-session control for DeepSeek Harness
dsh-vault-wallVault Wall
保险区 Vault Wall — an isolation wall plugin that prevents DeepSeek Harness from perceiving or touching user-specified sensitive paths (isolation wall + temporary lending + access auditing + emergency circuit breaker)
dsh-rgateRgate
Remote access login gate for the DeepSeek Harness Web UI: a password wall in front of non-loopback access, session cookies, an injected browser-side gate, and a Remote Access settings section. The /api RPC surface is authenticated by dsh itself.
dsh-wsl-distroWsl Distro
distro_info: structured wsl -l -v, default vs current distro, UNC path safety.
dsh-wsl-credWsl Cred
Safe Git credential hints: GCM path, HTTPS vs SSH origin (never returns secrets).
@softspark/dsh-codexCodex
DeepSeek Harness provider plugin that delegates ChatGPT subscription access and agent execution to the locally authenticated Codex app server.
@ddtcorex/dsh-maestro-guardMaestro Guard
Maestro Guard — waterfall tools/pre-execute approval + blocklist stub (Phase A scaffold)
dsh-kimi-subscriptionKimi Subscription
Use a Kimi Code membership in DeepSeek Harness through a dedicated Kimi subscription model route
dsh-secure-remoteSecure Remote
Security and connection-stability overlay for DeepSeek Harness SSH workspaces
dsh-write-rule-guardWrite Rule Guard
Prohibits characters matching a configured regular expression from being included in content written by edit/write. The regular expression and error message can be configured in the cordis configuration file. The host-side interceptor blocks edit/write content before tool execution. Host-only implem
dsh-plugin-auto-reviewPlugin Auto Review
Provider-backed automatic approval review for DeepSeek Harness.
dsh-plugin-oh-my-enginePlugin Oh My Engine
An approval-gated OME engineering delivery agent preset for DeepSeek Harness
@ddtcorex/dsh-maestro-remoteMaestro Remote
Maestro remote — tunnel + remote-proxy + PIN + QR for DeepSeek Harness
dsh-peak-blockPeak Block
Liang Wenfeng time-based interception of official DeepSeek API requests: during Beijing-time weekday peak hours, 09:00–12:00 and 14:00–18:00, automatically intercepts model requests sent to the official provider `deepseek-official`. Requests can be switched to a third-party relay or a reserved local
dsh-mcp-securityMcp Security
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
dsh-write-create-onlyWrite Create Only
Prevent write from overwriting existing files: write is only allowed to create new files. If the target already exists, reject the request before tool execution and prompt the user to use edit instead. Applies to all sessions globally, preventing the model from overwriting existing content with writ
codex-subscription-oauth-pluginCodex Subscription Oauth Plugin
Out-of-tree DSH bundle for ChatGPT Codex subscription OAuth
dsh-llm-approve-for-meLlm Approve For Me
Sessionless LLM sandbox approval reviewer for DeepSeek Harness.
@fonlan/dsh-web-authWeb Auth
DSH web plugin: password-gate authentication (login page + HttpOnly signed cookie) for exposing dsh web behind a reverse proxy
dsh-evidence-ledgerEvidence Ledger
Local append-only evidence ledger for DeepSeek Harness
dsh-safe-launchSafe Launch
DSH 安全启动器：按上次成功配置启动、更新先试运行再采纳、插件先兼容性检查再安装。A DSH plugin for last-good boot config, canary-tested updates, and compatibility-checked plugin installation.
@dsh-external/dsh-client-connection-authzClient Connection Authz
Auth-capable drop-in replacement for the DeepSeek Harness web connection
dsh-qixin-insight-mcp-oauthQixin Insight Mcp Oauth
DeepSeek Harness plugin: one-click OAuth (PKCE) connect to the Qixin Insight MCP server, mounted as a single plugin entry
dsh-prompt-antivirusPrompt Antivirus
Global prompt injection / context virus defense plugin: scans tool parameters at tools/pre-execute, scans tool results at tools/post-execute, scans messages before they enter the model at agent/pre-step and injects a canary guard, and sanitizes outbound content at llm/stream; supports block / quaran
@dsh-external/dsh-auth-tailscaleAuth Tailscale
Tailscale Serve authentication adapter for dsh Connection
dsh-llm-call-inspectorLlm Call Inspector
Session-scoped LLM request and response inspector for DeepSeek Harness Web