CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
688 pluginsdsh-guardwallGuardwall
Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.
dsh-plugin-login-gatePlugin Login Gate
Password-protected HTTPS login gate + LAN cross-device fix for the DeepSeek Harness (dsh) Web UI. 局域网登录闸门插件：为 dsh Web UI 增加密码登录、HTTPS 反向代理，并自动修复跨设备（局域网）访问时的设置页 403 / settings unavailable 问题。
dsh-local-shareLocal Share
Select and locally share one or more DeepSeek Harness conversation turns as Markdown, self-contained HTML, or a long PNG, with privacy-first redaction and no uploads
dsh-plugin-guardPlugin Guard
DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.
dsh-proxyProxy
Custom HTTP/HTTPS proxy for DeepSeek Harness: routes every host-side fetch (LLM requests, model discovery, market, web search) through your proxy (Clash/mihomo/v2ray) without TUN mode, with a settings card for live host/port edits. 为 DeepSeek Harness 注入自定义 HTTP 代理，无需 TUN 模式，设置页可直接修改地址与端口。
project-cybersyn-dsh-pluginProject Cybersyn Dsh Plugin
Human-supervised discrete-event assurance controller and visual workspace for DeepSeek Harness
dsh-sandbox-allowlistSandbox Allowlist
DSH sandbox extension: configurable trusted writable roots outside the workspace, for both sandboxed CLI commands and the write/edit tools. 为 DSH 默认沙箱增加可配置的「沙箱授权目录」，允许工作区外的受信修改。
dsh-gateway-pluginGateway Plugin
Access-password gateway plugin for DeepSeek Harness Web: every request on the gateway port requires authentication (no unauthenticated surface besides the login/setup page), first visit sets the password, and it can be rotated from the dedicated Security settings page.
dsh-grok-authGrok Auth
DeepSeek Harness plugin that reuses the official Grok CLI login (SuperGrok / X Premium OAuth) for an xai LLM route
dsh-githubGithub
GitHub authentication and local Git workflow plugin for the dsh web GUI: accounts, repository browsing, clone, pull, push, status, commit, and a settings panel. Token is stored in ~/.dsh/dsh-github.json (0600, atomic write); push is disabled by default. Standalone Cordis plugin — mounted via cordis.
skills-summarize-audit-skillSkills Summarize Audit Skill
DeepSeek Harness bundle that registers the skills-summarize-audit skill pack on ctx.skills.
dsh-fetch-third-partyFetch Third Party
Safe third-party web fetch for dsh: delegates page retrieval to a user-configured third-party service (Tavily / Jina / Firecrawl / custom crawler via contract v1) so the local machine never connects to arbitrary URLs (no SSRF surface). API key lives only in the managed credentials store; per-session
dsh-completion-gateCompletion Gate
Evidence-backed production-readiness completion barrier for DeepSeek Harness with persistent operator-configurable control center.
dsh-guarded-bot-orchestratorGuarded Bot Orchestrator
Plugin Cordis para o DeepSeek Harness v0.1: interceta a camada HTTP (auth barrier sobre o fallback da Web UI) e orquestra subprocessos de longa duracao com ciclo de vida reversivel.
dsh-access-modeAccess Mode
Standalone DeepSeek Harness access-mode plugin with Default, No Edit, and Auto modes
dsh-ptc-hardeningPtc Hardening
Fail-closed DeepSeek Harness PTC hardening for DeepSeek V4 Flash 0731 and SuperDeepseek V4 Flash Abliterated MQ
@dsh-external/dsh-plugin-marketPlugin Market
DSH Plugin Marketplace: Browse, search, view details, and install GitHub plugins with GitHub login, proxy, and quota display. Plugin Marketplace for DeepSeek Harness.
dsh-codex-shared-poolCodex Shared Pool
Community DeepSeek Harness bundle for Codex account-pool integration
dsh-perm-guardPerm Guard
Auto automatic approval plugin: DSH medium-tier permissions—automatically allow actions within trusted directories, manually confirm dangerous operations (adjustable category toggles)
dsh-keyringKeyring
DeepSeek Harness key vault plugin: automatic key redaction, automatic organization, password book settings page, persistence across restarts (official profile bundle)
dsh-https-fixHttps Fix
DeepSeek Harness 插件:内置 HTTPS 反向代理与统一配置管理。在 设置→插件配置→Https Fix 中配置关闭 http 外网访问、http/https 端口、域名、TLS 证书密钥路径,并提供校验与保存。Built-in HTTPS reverse proxy for dsh Web GUI with in-app configuration (block external http, http/https ports, domain, TLS cert/key) plus validate & save actions.
dsh-strip-sandbox-permissionsStrip Sandbox Permissions
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
dsh-providersProviders
Model providers for DeepSeek Harness: sign in with OAuth or an API key, and keep every provider's model catalog current
dsh-balance-localBalance Local
Local-only DeepSeek API balance plugin for dsh: queries https://api.deepseek.com/user/balance on the Host side; the API key never leaves the server process.
@dsh-hardware-buddy/dsh-hardware-buddyHardware Buddy
DeepSeek Harness host plugin that mirrors agent state to a CodeBuddy StickS3 pet over USB CDC and routes physical A/B approval back into the approval waterfall.
dsh-output-custody-proofOutput Custody Proof
Content-addressed proof for body-free DSH tool-result custody stages
dsh-security-doctorSecurity Doctor
One-click local security checkup for the DeepSeek Harness Web UI: a sidebar button that runs read-only checks (!!js config, third-party plugins, credential file permissions, instruction files, endpoint config, protection services) and shows a severity-graded report, plus an experimental opt-in guard
dsh-decision-effect-proofDecision Effect Proof
Content-addressed proof that recorded DSH authorization decisions and effects agree
@yukari316/dsh-toolcall-compatToolcall Compat
DSH tool-call compatibility: strips sandbox_permissions/justification from tool-call arguments for third-party models (GPT etc.), and lets the user skip possibly-stuck tool calls with an LLM-facing notice.
dsh-llm-chatgpt-oauthLlm Chatgpt Oauth
ChatGPT Plus/Pro OAuth model provider for DeepSeek Harness, backed by pi-ai's openai-codex route.