CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
687 pluginsdsh-vpn-opsVpn Ops
Safety-gated WireGuard and VLESS Reality operations for DeepSeek Harness
dsh-malware-auditMalware Audit
DeepSeek Harness (dsh) plugin: real AST-based scan of installed plugins for malicious-intent patterns, with an optional periodic schedule and auto-quarantine on critical findings. Advisory-by-default, not an antivirus signature database.
dsh-lan-proxyLan Proxy
dsh LAN/public reverse proxy plugin: IP whitelist + Basic Auth + access log, runs inside the dsh process. Dual-stack (IPv4/IPv6).
dsh-webhookWebhook
dsh webhook plugin: HTTP webhook -> fixed session delivery (async queue), for bank SMS auto-bookkeeping etc. Bearer token auth, per-hook workspace/session mapping.
dsh-permission-workspace-write-plusPermission Workspace Write Plus
DSH fully-pluggable Workspace Write Plus preset: workspace read/write + config-type files outside the workspace (no same-named workspace counterpart) + .dsh/profiles plugin writes + .dsh/skills writes + OS sleep/shutdown commands + full tool calls + merged cross-platform sleep guard (Windows/Linux/m
dsh-route-fence-linterRoute Fence Linter
Static linter: every plugin HTTP route must carry a browser-trust fence (loopback Host pin before Origin / sec-fetch-site).
dsh-api-relay-auditApi Relay Audit
DeepSeek Harness bundle for running API Relay Audit locally
@joshryandavis/dsh-llm-kiroLlm Kiro
Kiro (AWS CodeWhisperer/Q successor) provider for the DeepSeek Harness: ambient credential pickup, OAuth token refresh, and the Kiro runtime/management API
@fhxgs/dsh-providers-extensionProviders Extension
Host-anchored provider, authentication, catalog, policy, and model-selection extension for DeepSeek Harness.
dsh-remote-accessRemote Access
DeepSeek Harness Web GUI remote HTTPS access bundle: Cloudflare tunnel + local password proxy guidance, legacy-browser compatibility taps (AbortSignal polyfill, phone bootstrap), browse directory picker, and the bundled dsh-remote-access skill. Install once, use everywhere.
dsh-tailscale-remoteTailscale Remote
DeepSeek Harness Web GUI free & simple remote access via Tailscale Funnel: no domain purchase, no Cloudflare, no app needed on the phone. Bundle includes local password proxy guidance, legacy-browser compatibility taps (AbortSignal polyfill, phone bootstrap), browse directory picker, and the bundled
@xiaosenho/dsh-plugin-remote-accessPlugin Remote Access
Authenticated LAN and frpc tunnel access for the DeepSeek Harness Web UI
@deepseek-ai/dsh-sandbox-microsandboxSandbox Microsandbox
Fail-closed microsandbox microVM provider and model-facing guest tools
dsh-security-scanSecurity Scan
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
@jiesou/dsh-timeout-auto-rejectTimeout Auto Reject
Auto-reject unanswered permission requests with a model-visible timeout notice
dsh-tailscale-gatewayTailscale Gateway
Private Tailscale access for DeepSeek Harness Web: exact user allowlists, loopback-only gateway, and guarded Serve setup
dsh-openai-codexOpenai Codex
OpenAI Codex (ChatGPT subscription) authentication and LLM provider for deepseek-harness
dsh-chatgpt-oauthChatgpt Oauth
ChatGPT OAuth (PKCE) plugin for DeepSeek Harness and Cordis, using the openai-codex provider with ChatGPT Plus/Pro subscriptions; no API key required.
@deepseek-ai/dsh-tool-schemaTool Schema
DSH JSON Schema validation tool: validate, failure paths, static explain, default-only normalize; zero-network, zero-dynamic-code with resource limits and a pattern ReDoS worker budget
@deepseek-ai/dsh-security-auditSecurity Audit
DSH local security audit tool: read-only scans of config, credential metadata, plugin provenance, session structure and network exposure; redacted, reproducible, locatable risk reports
dsh-multi-userMulti User
Single-process multi-user workspace view partitioning for DeepSeek Harness: JWT-in-cookie login wall, per-user workspace/session filtering, and admin user management.
dsh-provider-qoderProvider Qoder
Qoder CN adapter plugin for DeepSeek Harness: COSY-signed, WAF-encoded streaming against gateway.qoder.com.cn
dsh-pass-strengthPass Strength
Password strength
dsh-privacy-checkPrivacy Check
Privacy self-check
dsh-session-integritySession Integrity
Diagnose DeepSeek Harness session integrity failures and continue from safe recovery boundaries
dsh-htb-skillsHtb Skills
HTB (Hack The Box) pentesting skill library plugin for DeepSeek Harness: 112 distilled technique cards (T1 routing / T2 deep-dive / T3 reference tiers, disable-model-invocation for hidden tiers) plus a generated htb-skill-index. Mounts a package-local skill provider via the dsh-skill-filesystem prov
dsh-chatgpt-subscriptionChatgpt Subscription
DeepSeek Harness (DSH) plugin: Use official OAuth to link a ChatGPT subscription (Codex) in one click, chat directly with ChatGPT models within DSH (using ChatGPT Plus/Pro subscription quota), and view the linked status and remaining quota on the “Subscription” page in the settings sidebar.