CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
689 plugins
dsh-tiered-approvalTiered Approval
Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.
dsh-netguardNetguard
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
dsh-riskproofRiskproof
Provenance-aware execution security for DeepSeek Harness. Track sensitive data across tool calls and stop risky side effects before execution.
dsh-codex-keychainCodex Keychain
Unofficial ChatGPT OAuth provider for DeepSeek Harness with strict native OS keychain storage
dsh-secret-pasteSecret Paste
DeepSeek Harness plugin: auto-detect secrets pasted into the composer, store them in the official credentials seam, and send [secret:REF] placeholders to the model instead of the value.
dsh-anywhereAnywhere
Put a dsh (DeepSeek Harness) workspace on ANY machine. Two modes in one plugin: (1) fleet — enroll an off-site machine behind NAT into your dph via a one-time token + reverse tunnel to your own relay VPS, so it appears as a dsh-ssh host; (2) execution wor
dsh-mobile-pwaMobile Pwa
Complete mobile PWA for DeepSeek Harness (DSH): secure LAN/Tailscale remote access gateway + install-to-homescreen (manifest), offline-capable service worker, touch-first gestures, agent-done notifications, and dark compact mobile UI. 移动端 PWA 完整方案 for Dee
dsh-safe-web-fetchSafe Web Fetch
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
dsh-plugin-adaptive-agent-policyPlugin Adaptive Agent Policy
Adaptive task and risk routing, loop budgets, and progressive tool-result pruning for DeepSeek Harness
@tommyfang/gh-tea-npm-dshGh Tea Npm Dsh
DeepSeek Harness (dsh) plugin for GitHub (gh), Gitea (tea) and npm CLIs: detect/install, guided auth/config (incl. npm token rotation), issue and package tools.
@try-works/dsh-paper-designPaper Design
Paper Design MCP bridge as a DeepSeek Harness bundle: paper_* tools, image screenshot support, design skills, OAuth auth, and Cursor-parity design guidance.
dsh-almost-full-accessAlmost Full Access
dsh-Almost Full Access - A permission mode between workspace-write and Full access: each command is checked by deterministic rules and a sub-agent review before execution. Dangerous commands trigger a minimalist Style A approval panel (Allow/Deny/Remember for this session). Supports automatic approv
@wahu/dsh-mobileMobile
Secure mobile companion bundle for the DeepSeek Harness Web profile
onebox-dsh-bridgeOnebox Dsh Bridge
DeepSeek Harness plugin: bridge local dsh web to the OneBox Android app over the public internet (scan-to-pair, E2E encrypted tunnel). 万宝盒 App 的 DSH 云端中继桥插件。
dsh-safety-netSafety Net
Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting
@kevensun/dsh-oai-oauthOai Oauth
ChatGPT Plus/Pro OAuth and GPT model provider for DeepSeek Harness
dsh-redactRedact
Fail-closed canonical tool-output tokenization for DeepSeek Harness
dsh-openai-codex-authOpenai Codex Auth
Unofficial OpenAI Codex provider for DeepSeek Harness with ChatGPT subscription sign-in.
dsh-accountsAccounts
DSH multi-tenant account and authorization plugin: PostgreSQL storage + admin management API + an independent working directory for each account (standalone plugin, does not modify DSH core)
dsh-lan-passLan Pass
DSH LAN password gate: enter a key on a phone/tablet to connect directly to 3080, with a built-in randomUUID polyfill and mobile login page.
dsh-aicc-zhunaoAicc Zhunao
A public DeepSeek Harness preset for main-brain orchestration, execution gating, and reusable AI-LAW rules.
dsh-webgateWebgate
DSH remote access plugin: direct LAN connection (QR code), quick cloudflared tunnel, frp + reverse proxy through your own server (including login portal)
dsh-email-readerEmail Reader
OAuth2-capable IMAP email reader for DeepSeek Harness: list/read/search mail for accounts where password auth is disabled (Outlook post-2024), with automatic token refresh, app-password Gmail via optional proxy, and ol_email_* tools that coexist with the
@ohmydsh/runtimeRuntime
Lightweight OMDSH Runtime and Profile Pack toolkit for auditable DSH composition, signing, candidate installs, and rollback
@woyeshishen/dsh-lan-accessLan Access
Provides LAN access for DeepSeek Harness: binds 0.0.0.0 and injects the crypto.randomUUID polyfill, allowing the GUI and /api to work properly over plain HTTP LAN origins without modifying any original code.
@starpivot/dsh-agent-teamsAgent Teams
AgentTeams for DeepSeek Harness: durable teammates, task DAG, read-only role isolation
dsh-approval-notifyApproval Notify
DeepSeek Harness plugin: Windows toast notification with sound when a session requests elevation approval — shows which session, why, and what is being elevated
dsh-lan-gateLan Gate
Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁
@daweifu/capability-menuCapability Menu
Unified capability management for the DeepSeek Harness: catalog (ctx.capability) + meta_search/meta_invoke + Resident/On-demand/Disabled projection policy + 能力管理 settings tab, in one installable bundle (server + browser).
@dockyard-dsh/pluginPlugin
A macOS-only native account-pool and provider plugin for DeepSeek Harness.