CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
672 pluginswork-charter-dshWork Charter Dsh
DSH-native Work Charter policy plugin backed by session-coordinator-dsh
@sysit/dsh-remote-accessRemote Access
Out-of-tree dsh web-profile bundle: serve the Web UI on all interfaces (env DSH_WEB_HOST) behind the built-in ?token= BrowserAuth and auto-print the LAN URL. Single webserver row — no auth fork, stays composable with built-in BrowserAuth.
dsh-gamepad-approvalGamepad Approval
Xbox controller hardware approval dsh plugin — Agent high-risk tool calls require physical button confirmation (A approve / B reject)
dsh-listenerListener
Secure local voice input plugin for DeepSeek Harness: a microphone button on the right side of the input box. After recording, transcription is performed through the same-origin host proxy (local SenseVoice-Small INT8 ONNX; audio never leaves the network). The backend binds only to 127.0.0.1 with a
dsh-nuke-pluginNuke Plugin
Powerful DSH plugin uninstallation — policy tiers · atomic batches · fingerprint snapshots · health checks · concurrency locks · oracle accountability · report export
dsh-outline-autoOutline Auto
DSH web plugin: search and read an Outline knowledge base from conversations, with approved, whitelist-guarded document writes.
dsh-opencliOpencli
Authenticated-session browser proxy: the browser_* tool family operates your already signed-in real Chrome/Edge; 170+ site adapters are immediately available through the site tool, and missing adapters can be created within the session; write commands require approval.
@openworkproof/dsh-pluginPlugin
Verifiable authorization, execution evidence, and offline delivery verification for DeepSeek Harness
@wuxie233/dsh-agent-teamsAgent Teams
AgentTeams for DSH (Wuxie233 fork): per-member model routing, read-only role deny lists
dsh-subscription-antigravitySubscription Antigravity
Google Antigravity subscription reuse for DeepSeek Harness: local multi-account pool with quota visibility and switching, PKCE sign-in, and a loopback Gemini/Claude/GPT-OSS proxy. Unofficial; no telemetry.
dsh-plugin-recycle-binPlugin Recycle Bin
Enforce recycle-bin-only deletion on Windows: block del/rm/Remove-Item and other disk-erase commands, forbid automatically emptying the recycle bin, and stop + ask the user when the recycle bin or disk is full.
@qipenglin/dsh-web-accessWeb Access
Optional loopback token and Cookie authentication for DeepSeek Harness Web profiles
@rycbartbad/dsh-key-managerKey Manager
Multiple API keys per provider for DeepSeek Harness: keep a pool of keys with notes, switch the active key right from Settings → API 密钥, and every switch really takes effect on the next model call.
dsh-provider-proxyProvider Proxy
Provider-scoped HTTP/HTTPS forward proxy middleware for DeepSeek Harness LLM requests
dsh-edit-guardianEdit Guardian
DSH plugin: file-change diff bar with keep/undo summary, and a dangerous-command approval gate with red highlighting for bash/pwsh
dsh-store-account-managerStore Account Manager
Local-first platform account and persistent browser-session manager for DeepSeek Harness
dsh-git-seamGit Seam
Structured git tools for DeepSeek Harness agents: deterministic porcelain parsing (Chinese/UTF-8 paths, Windows) plus a diff-before-commit policy gate that refuses blind commits.
dsh-plugin-windows-guardPlugin Windows Guard
DeepSeek Harness (dsh) Windows environment pitfall-prevention plugin: two pitfall-prevention skills (windows-enc/windows-sys: rules for preventing encoding, escaping, path, process, and garbled-text issues) + three layers of active protection (pwsh result garbled-text detection and alerts, dangerous
dsh-support-lifecycle-proofSupport Lifecycle Proof
Offline content-addressed proof for supplied support lifecycle closure
dsh-session-scopeSession Scope
Per-session workspace visibility scopes for DeepSeek Harness.
qrcode-hassle-freeQrcode Hassle Free
Remote hassle-free access for DeepSeek Harness: a cloudflared quick tunnel plus a scannable QR code and settings shown in the Settings → Plugins page. Zero runtime dependencies, no database, no Firebase.
xby-random-numberXby Random Number
Provides pseudorandom and cryptographically secure random number generation, including integers, floating-point numbers, weighted selection, list shuffling, and secure token generation.
xby-scan-codeXby Scan Code
CodeGuard MCP is a real-time AI code security scanning tool for detecting vulnerabilities, secrets, and compliance issues in AI-generated code, suitable for code security reviews in development environments.
xby-awslabs-cdkXby Awslabs Cdk
AWS CDK MCP Server is a tool that provides AWS Cloud Development Kit (CDK) best practices, infrastructure-as-code patterns, and CDK Nag security compliance guidance for developers building AWS applications.
xby-captchaXby Captcha
CAPTCHA recognition toolkit supporting the recognition of text, slider, rotation, selection, and other verification methods. Note: Always comply with the terms of use and applicable laws and regulations of the target website or system, and use it only where permitted.
xby-dbXby Db
MCP Database Server is a service that provides secure database access for AI assistants and LLM-based tools, supporting SQLite, PostgreSQL, MySQL, and MariaDB, with query validation, audit logging, and security controls.
@cooberped/dsh-evidenceEvidence
Independent community DeepSeek Harness plugin for secure multi-file upload, native images, local document retrieval, and coordinate-aware text/PDF/DOCX/XLSX/PPTX reading.
@dsh-external/dsh-ssh-controlSsh Control
Unified SSH control center for DeepSeek Harness with stateless multi-host dispatch, direct SSH pipes, and zero-intrusive local development.
dsh-attentionAttention
DeepSeek Harness plugin: Shows an actionable Windows Toast during approval/questions and wakes to reconnect after the browser tab goes to sleep, preventing elevation cards from getting stuck.
dsh-super-subscriptionsSuper Subscriptions
Supercharged subscription-based LLM provider aggregator for DeepSeek Harness (ChatGPT/Codex, Grok, Google AntiGravity, Claude, Copilot) with unified auth, quota pooling, and zero-config defaults.