CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
689 plugins
dsh-plugin-bilibiliPlugin Bilibili
DeepSeek Harness plugin: Bilibili keyword video search, video metadata, subtitle transcripts, direct play URLs, and multimodal frame viewing (bilibili_search / bilibili_video / bilibili_subtitles / bilibili_playurl / bilibili_frames). Anonymous by default with risk-control bootstrapping; an optional
dsh-admin-gatewayAdmin Gateway
DeepSeek Harness admin authentication gateway plugin — starts a standalone HTTP gateway with password login, reverse proxying, and WebSocket/SSE passthrough to prevent unauthorized access
@agentvalet/dsh@agentvalet/dsh
Governed platform access for DeepSeek Harness — no credential on the machine
dsh-gpt-compatGpt Compat
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
dsh-auto-classifierAuto Classifier
Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance
dsh-harness-auditHarness Audit
Audit an agent harness against the harness-evaluation criteria, with machine-enforced evidence validation.
dsh-turn-budgetTurn Budget
Fail-closed per-turn step, tool-call, and provider-token budgets for DeepSeek Harness
dsh-purgePurge
DeepSeek Harness 破甲: Every model can be jailbroken, and different prompts can be used for different models; the default prompt is intended for the Chinese model 「小码酱」. Jailbreak for every model. Please star ⭐
dsh-llmaskingLlmasking
Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.
dsh-proxy-routesProxy Routes
DSH (DeepSeek Harness) plugin: route fetch() per-domain through a SOCKS5/HTTP proxy (e.g. Anthropic via proxy) while domestic APIs (Zhipu/DeepSeek) stay direct.
dsh-tool-gitTool Git
Structured, safe Git tool family for DeepSeek Harness: status/diff/log/branch/stage/commit/stash/show/fetch/pull/remote/checkout with a destructive-command guard.
dsh-plugin-browser-usePlugin Browser Use
Browser-automation tools for DeepSeek Harness (dsh): Chromium via playwright-core behind a security-first navigation policy re-checked on every action
dsh-insightInsight
Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)
dsh-yolo-modeYolo Mode
dsh-yolo-mode — DeepSeek Harness dual-package plugin: when a session is in writable sandbox mode and the approval policy is ask, it uses a large language model to automatically adjudicate sandbox privilege escalation requests. Supports built-in presets and custom permission levels, and provides host
dsh-trusted-host-proxy-403-fixTrusted Host Proxy 403 Fix
Fix privileged /api 403 when DeepSeek Harness Web UI is reached through a reverse proxy Host already listed in --trusted-host; make settings persistence work for those hosts too. Not an authentication layer.
dsh-agoraAgora
DSH skill bundle: the Agora skill (RTC, RTM, ConvoAI, CLI, Cloud Recording, tokens) synced verbatim from AgoraIO/skills at a pinned release tag. Install to add the `agora` skill to DeepSeek Harness.
dsh-write-gateWrite Gate
Commitment write-gate for AI coding agents: two-tier (deterministic + LLM judge) pre-execution policy. Engine-agnostic core with a DeepSeek Harness (dsh) adapter.
@greenonion/dsh-remote-accessRemote Access
DSH web plugin for LAN, Tailscale, and Cloudflare Tunnel remote access through Caddy with API access policies.
dsh-fs-deny-policyFs Deny Policy
DeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never touch - fences read, write, search, and shell tool calls at tools/pre-execute
@dsh-external/dsh-redteam-modelRedteam Model
DSH redteam security research modes and runtime plugins, managed from one settings page: deploy the nine presets, install, update and uninstall the fifteen runtime plugins for the current profile.
dsh-approval-llmApproval Llm
Model-based permission approval (approve-for-me) for DeepSeek Harness: an approval/request answerer backed by a separate reviewer model
dsh-tailscale-consoleTailscale Console
Tailscale remote access operations dashboard for DeepSeek Harness: health checks, HTTPS entry toggle, macOS proxy bypass, relay server operations, and ACL snippet generation.
dsh-auditAudit
Ecosystem-wide plugin health audit for DeepSeek Harness: syncs the GitHub dsh-plugin topic into a local catalog, probes npm, static-scans plugin files for security (v0.2), and scores every plugin (maintenance / docs / npm / ecosystem + security veto) with
@neevcloud/dsh-sandboxSandbox
NeevSandbox execution providers for DeepSeek Harness
dsh-risk-guardRisk Guard
Zero-interruption audit + fuse blocking for DeepSeek Harness. / 零打扰 Agent 审计与保险丝拦截插件。
@huxy/dsh-proxyProxy
Provides proxy services for access from a local area network or via Cloudflared Tunnel, Tailscale, and similar tools, with email verification code authentication to secure external access. Suitable for lightweight authentication in internal systems, admin panels, or team collaboration scenarios.
@securstack/dsh-pluginPlugin
DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.
dsh-plugin-code-reviewPlugin Code Review
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
@suagr_xl/dsh-safetySafety
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
dsh-dlpDlp
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction