CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
687 plugins
dsh-cmdgo-providerCmdgo Provider
CommandCode Go package provider: /alpha/generate CLI gateway (official CLI fingerprint impersonation) integrating the DSH model list + OAuth login (multi-account pool rotation/failover)
@goodandready/dsh-subscriptionsSubscriptions
Use ChatGPT Codex, Claude, Grok, and Antigravity subscriptions as DeepSeek Harness LLM providers via OAuth.
dsh-codex-authCodex Auth
One DeepSeek Harness Codex capability bundle for ChatGPT login, LLM access, Web Search, and durable Image Creation
deepseek-harness-authDeepseek Harness Auth
Fail-closed password authentication proxy bundle for the DeepSeek Harness Web profile
dsh-movein-permissionsMovein Permissions
Fine grained per tool permission rules for DeepSeek Harness (DSH). deny/ask lists in Claude Code rule syntax, enforced at the tools/pre-execute gate. Works standalone.
relay-dsh-plugin-codexRelay Dsh Plugin Codex
Codex conversation backend for DeepSeek Harness, powered by the Codex App Server with approvals and DSH tool support.
dsh-approve-for-meApprove For Me
Rule-gated automatic approval for DeepSeek Harness sandbox escalations with an optional LLM reviewer and native human fallback.
dsh-rule-engineRule Engine
DSH Rule Execution Engine v3: Container Parser for AGENTS.md + Interpreter + Matcher + Execution Framework
dsh-plugin-mobile-gatewayPlugin Mobile Gateway
Secure mobile gateway for DeepSeek Harness with realtime sessions, tasks, goals, commands, approvals, and file transfers
@wingsky-1/dsh-lan-proxyLan Proxy
Access the dsh web UI over a local network: listen on 0.0.0.0:<port> and forward HTTP/HTTPS and WebSocket/wss traffic to the loopback web server (127.0.0.1:3080 by default). Rewrite Host/Origin to pass the browser trust boundary for /api, accepting only IP literals or localhost in the Host header (D
dsh-acp-enhancedAcp Enhanced
Enhanced ACP server for DeepSeek Harness: block-level streaming, usage/stat telemetry (cache hit rate, token speed, input/output tokens, context length, turns, tool timing), model & reasoning-effort switching, and permission-preset control over the ACP wi
dsh-desktop-safe-marketDesktop Safe Market
A safety-first plugin marketplace for the DeepSeek Harness web GUI: a curated community shortlist, and an install that starts with a security review
@lemoncat7/dsh-sshSsh
Secure SSH, FTP/FTPS/SFTP file transfer, browser terminals, proxies, port forwarding, and session-scoped AI access for DeepSeek Harness
@agent_forge/forge-dshForge Dsh
Forge quality gates for DeepSeek Harness (dsh): task gates, read-before-edit, bash hazard interception and quality scoring, driven by the forge CLI through DSH's typed interception points.
@perrylink/dsh-skill-pack-security-providerSkill Pack Security Provider
Provider plugin for dsh-skill-pack-security: registers the pack's skills/ (zh) or skills-en/ (en) edition on ctx.skills AND the plugin_vet supply-chain gate tool on ctx.tools (license/SBOM/commit-lock/malware scans + five-dimension risk card). Ships both
@jieai/dsh-plugin-vetPlugin Vet
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks c
dsh-xrayXray
X-ray for your DeepSeek Harness — see what's actually loaded, why, and what it costs you.
dsh-multi-tenantMulti Tenant
A DSH-native multi-tenant plugin with trusted Principal contexts, Principal-scoped Agent resources, durable local ownership, and Agent-scoped MCP capabilities.
@omdp/dsh-key-fallbackKey Fallback
API Key fallback rotation plugin: multiple key pools + automatic rotation (configurable trigger codes, including the complete set of LlmError standard codes) + environment secret editing + plaintext reveal + short ref migration. Settings → API Key fallback UI. v6.1.
@sparkelf/dsh-mobile-bridgeMobile Bridge
DeepSeek Harness plugin: an outbound E2EE tunnel, mobile presentation, and first-class Mobile Bridge settings section.
dsh-miopiik-executorMiopiik Executor
Controlled one-shot executor subagents with persona, tool allowlist, timeout and cancellation. 受控一次性执行层子代理（persona + 工具白名单 + 超时取消）
dsh-defendDefend
Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets, gating user messages on agent/pre-step, too
dsh-miopiik-model-authMiopiik Model Auth
Model authorization gate: subagent model/provider pulls must be in the user-controlled allowlist. 模型授权闸：子代理拉模型必须 ∈ 用户 allowlist
agents-gitflow-guardAgents Gitflow Guard
A configurable branch-role guard for AI coding agents (DSH / Claude Code / Codex / OpenCode / Antigravity / Pi / CodeBuddy / ZCode) — zero-config defaults (develop+main) out of the box, deep-merge override, per-client native hooks via gitflow-guard wire/s
dsh-relayRelay
Authenticated remote access for a DeepSeek Harness web profile: TLS, QR/passcode device pairing, password sign-in, and per-device revocation in front of an untouched loopback harness.
dsh-gatewayGateway
HTTPS + login gateway for the DeepSeek Harness web surface: securely access your DSH Web UI from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-only listener, no accounts until configured); setup and
@log.li/dsh-automodeAutomode
CC-style auto mode for DeepSeek Harness: deterministic deny/allow rules + pre-execute gate + model-agnostic two-stage classifier. Two-state (allow/reject) classifier since 0.8.0. TypeScript rewrite merging dsh-auto-mode v0.4.1 with Nuo-cl/dsh-auto-mode na
@duke-dsh-plugins/dsh-agent-approvalAgent Approval
Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval subagent judges every sandbox escalation (risky operations are rejected), with a configurable approval model and an audit log in Settings.
dsh-privmaskPrivmask
DeepSeek Harness local de-identification plugin: intercepts requests sent to cloud-based large language models at the llm/stream outbound stage, replacing secrets, PII, and Chinese entities (names, national ID numbers, companies, government agencies, addresses, etc.) with placeholders before transmi
@perrylink/dsh-githubGithub
Official-grade GitHub CI for DeepSeek Harness: composite action (review PRs / fix CI / report), polling PR review bot with idempotent inline comments, a status-check gate, and approval-gated PR/issue/repo/file tools