CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
687 plugins
dsh-plugin-diraudPlugin Diraud
Audit the DeepSeek Harness plugin list by origin (official vs self-installed): a /plugin-audit command plus a Source tab in Web Settings
dsh-maskMask
PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer, keep the restore table only in memory and a controlled storage domain, never log plaintext, and expo
dsh-swarmdropSwarmdrop
Send files from your DeepSeek Harness agent straight to your phone, and reference what your phone sent back — no account, no public IP, end-to-end encrypted.
@xuanling-rs/xuanling-dsh-skillsXuanling Dsh Skills
DeepSeek Harness bundle: mounts isolated XuanLing workflow skills and the strict MCP overwrite policy.
@dttxorg/deepseekeyesDeepseekeyes
Auditable vision and cross-platform Computer Use runtime for DeepSeek Harness with source-preserving evidence.
dsh-plugin-auditPlugin Audit
Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins
@khorsheed/dsh-ankh-guardAnkh Guard
Hard gate for self-modification restarts: a green-build credential bound to the git HEAD, checked before any restart of the running instance
dsh-sqlSql
DSH engineer-grade database plugin: four tools—sql_list/query/exec/schema—supporting SQLite/MySQL/PostgreSQL, multiple connections, read-only mode with a write-operation approval gate, lexical-level read-only protection, streaming row-count limits, and configurable query/write timeouts.
dsh-plugin-subscriptionsPlugin Subscriptions
Use ChatGPT (Codex), Claude, Grok (X Premium), and GitHub Copilot subscriptions as DeepSeek Harness LLM providers, with OAuth login from the web Settings page
dsh-scoreScore
Multi-dimensional quality scoring for DeepSeek Harness plugins: scores one repo or npm package across install success (consuming dsh-test-drive results), maintenance activity, documentation completeness, security scan, and protocol compliance 鈥?every conclusion backed by real CLI evidence with audit
dsh-llm-api-poolLlm Api Pool
API pool designed for opencode go: dynamically switch between different API keys based on balance, with official usage/balance queries and graphical management in the settings page.
@infinitepersistence/dsh-serial-consoleSerial Console
Auditable serial console for DeepSeek Harness with shared user and AI access
dsh-edit-approvalEdit Approval
DeepSeek Harness plugin: per-edit approval with a red/green line diff before write/edit/str_replace_editor — approve once or reject (Claude Code behavior).
dsh-auto-approveAuto Approve
为 DeepSeek Harness 增加介于 Workspace Write 与 Full access 之间的自动批准权限档：例行沙箱升级由分类模型一次性放行，危险或不确定的操作仍转人工审批。An auto-approval permission preset for DeepSeek Harness between workspace-write and full access: routine sandbox escalations are granted once by a classifier
ds-harness-remoteDs Harness Remote
End-to-end encrypted remote access to DeepSeek Harness and experimental Codex workspaces from desktop, web, and Android, with dsh-TUI Host support.
@m1khal3v/dsh-llm-key-rotationLlm Key Rotation
Seamless API-key rotation for DeepSeek Harness LLM providers when subscription limits are hit
@wnjxyk/dsh-codex-oauthCodex Oauth
Unified OpenAI Codex subscription plugin for DeepSeek Harness: GPT models, OAuth, quota, image generation, and web search.
dsh-test-driveTest Drive
Isolated install-and-smoke test drives for DeepSeek Harness plugins: installs a repo or npm package into a throwaway DSH_HOME profile, verifies the bundle patch layer and boot logs, records a structured pass/fail result matrix (JSON/Markdown) for scoring pipelines, and quarantines every temp directo
dsh-plugin-product-subagentsPlugin Product Subagents
Role-based Codex / Claude Code / ACP subagent providers for the DeepSeek Harness: continuable children, durable session recovery, per-role product permissions, delegation with a permission ceiling, and a declarative role library.
dsh-hub-oauth-gatewayHub Oauth Gateway
Local-first usage, cost, quota, account, and forecast analytics for DeepSeek Harness Web, with coding-subscription OAuth sign-in (Grok Build, Codex, Kimi Code, Claude Code), an optional loopback API gateway, and opt-in local auth/usage monitoring
@npm-safe/dsh-tool-npm-safeTool Npm Safe
DeepSeek Harness plugin that blocks risky npm installs with metadata and deep supply-chain scans
dsh-plugin-sandbox-escalation-fixPlugin Sandbox Escalation Fix
Normalize non-widening sandbox requests and missing justifications in DeepSeek Harness tools
dsh-plugin-git-bashPlugin Git Bash
Use Git for Windows Bash as the default DSH shell with restricted-mode support
deepseek-harness-sentinelDeepseek Harness Sentinel
🛡️ 给 DeepSeek Harness 插件拍 X 光 —— DSH 插件安全体检与健康检查。静态启发式审计:代码执行、凭据访问、外传端点、混淆、安装脚本、bundle 清单合规,输出 0-100 风险分与裁决。Plugin security & health scanner for DeepSeek Harness: heuristic static audit (code execution, credential access, exfiltration, obfuscation, insta
dsh-tokensforceTokensforce
DeepSeek Harness plugin: tokensforce gateway integration — login onboarding, provider profiles, and the usage dashboard tab
@shendeguize/dsh-agent-sidecarAgent Sidecar
Agent Sidecar as a native DSH plugin: cross-agent monitoring, injection and bypass analysis / 跨 agent 监控、注入与旁路分析
@yyyq0325/dsh-webgateWebgate
Login gate for the DeepSeek Harness web GUI: username/password entry page (DeepSeek style), 12-hour session tokens, slash commands for user management. Background tasks keep running while logged out.
dsh-builtin-togglesBuiltin Toggles
Evidence-backed built-in capability inspector with fail-closed controls for DeepSeek Harness Web.
dsh-continueContinue
Safe unattended network recovery and continuation policies for DeepSeek Harness.
dsh-capmark-gateCapmark Gate
Hold a DeepSeek Harness agent to a capmark capability manifest: mask its tools and judge every call.