CATEGORY
Security & Access DSH plugins
Verified manifests and exact versions in this category.
All plugins
688 plugins@huanlin/dsh-plugin-session-deletePlugin Session Delete
Delete sessions of a DeepSeek Harness profile from the UI: header danger button + session-row menu item with a risk-consent dialog; host endpoint + tool delete the log, projection cache and workspace accounting. Works in web and the desktop client alike.
dsh-opencode-zenOpencode Zen
OpenCode Zen free-tier models for DeepSeek Harness: zero-config public-key provider with quota-aware pacing.
dsh-one-gatewayOne Gateway
Private, zero-trust gateway for DeepSeek Harness Web: loopback-only proxy, exact principal allowlists, and provider-agnostic onboarding
dsh-client-masqueradeClient Masquerade
DeepSeek Harness plugin: make a custom llm-pi-ai provider route masquerade as Claude Code / Codex — spoofed client-identity headers, plus an opt-in request-body fingerprint for relays that gate on the body.
@smanx/dsh-proxyProxy
DSH plugin (scoped package @smanx/dsh-proxy, matching the repository): LAN reverse proxy with native Basic Auth and a settings page. Source lives in this repo's dsh-proxy/ subdirectory; this root package makes the plugin installable from the repository itself (git/github: specs install the root).
dsh-auth-gatewayAuth Gateway
Password login gateway plugin for dsh web: auto-generated initial password with forced onboarding, login, password change with real request interception, and OTP two-factor authentication.
dsh-unrestrictedUnrestricted
Toggleable unrestricted mode for the current DSH master: fuses execution rules into the active standard, ptc, cordis, minimal, and subagent prompts
dsh-skill-pack-securitySkill Pack Security
Automated plugin supply-chain security gate for DeepSeek Harness (dsh): eight agent skills in Chinese and English editions teach the audit methodology, and the plugin_vet tool executes the pre-install gate (license / SBOM / commit pinning / malicious patterns / five-dimension risk card) with finding
dsh-api-gatewayApi Gateway
Open-source plugin for DeepSeek Harness: an authenticated, fail-closed loopback proxy that exposes the harness /api surface (apiproxy) to remote clients.
dsh-webui-authWebui Auth
Persistent WebUI authentication plugin for DeepSeek Harness: configure an account/password in Settings, then accessing the WebUI requires login. Zero dependencies.
dsh-server-loginServer Login
Public-facing multi-tenant DSH hosting platform: login approval, per-user isolated DSH environments (primary + on-demand daemons), desktop and domain access.
dsh-web-remoteWeb Remote
DSH mobile and external network remote access plugin: configuration-free public network tunnel + direct HTTPS access on LAN + custom public URL/port + WeChat/Lark bots.
@shaoshi/dshscanScan
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
dsh-llm-newapiLlm Newapi
NewAPI (OpenAI-compatible gateway) chat-completions adapter for the DeepSeek Harness LLM seam. Provider route id 'newapi', display name 'NewAPI'. Dual-face: host half registers the LLM adapter and chat-only model discovery; browser half adds a NewAPI settings section to dsh web. The API key is confi
@quill507/dsh-auto-approval-llmAuto Approval Llm
LLM-assisted auto approval with timeout fallback for DeepSeek Harness
dsh-plugin-subhubPlugin Subhub
DeepSeek Harness third-party subscription integration plugin: Log in to a third-party subscription account to use the models included with the subscription (currently supports OpenAI / ChatGPT subscriptions; more subscription services planned; supports image understanding and image generation and ed
dsh-permgatePermgate
Permission gateway for DSH (DeepSeek Harness): reviews tool calls per category (directory/command/read/edit/subagent/doom loop) with global/project config, exceptions, quick-tool defaults, custom rules, bilingual approval modal and sandbox-upgrade flow. Config persisted at $DSH_HOME/dsh-permgate/con
dsh-antigravity-authAntigravity Auth
Private, single-account, unofficial Antigravity OAuth capability bundle for DeepSeek Harness
@nelsonlongxiang/dsh-open-a2a-netOpen A2a Net
Open A2A network plugin for DeepSeek Harness: signed agent cards, decentralized peer/zone discovery, direct routing model tools, and joinable session nodes with a sidebar control
dsh-llm-codex-app-serverLlm Codex App Server
DeepSeek Harness LLM provider backed by the locally authenticated Codex App Server
harness-larkHarness Lark
Lark/Feishu channel plugin for DeepSeek Harness: WebSocket event gateway, per-chat persistent agents, interactive cards, media, docs, bases, calendars, tasks, and user OAuth
dsh-approval-gateApproval Gate
DeepSeek Harness automated approval gate: Flash model pre-evaluates whether writes/commands are irreversible, automatically approves safe actions and routes dangerous ones to human review (fail-safe), minimizing human intervention and including a human review UI
dsh-workspace-hygieneWorkspace Hygiene
A DeepSeek Harness plugin that actively assesses artifact value and keeps agent workspaces organized, auditable, and recoverable.
dsh-cloudqCloudq
CloudQ integration for DeepSeek Harness with secure credential, workspace, and plugin-management surfaces
@deepseek-ai/dsh-client-ui-obsidianClient Ui Obsidian
Host-only Obsidian integration for DeepSeek Harness: 25 on-demand vault, knowledge, attachment, link, editor, and command tools with an authenticated local IPC companion.
dsh-browser-fsBrowser Fs
dsh plugin: let the agent list/read/write files inside a browser-authorized local directory (File System Access API) through a WebSocket relay
@chaggle/dsh-powershell-checkPowershell Check
Native DeepSeek Harness plugin: gates every pwsh tool call against the PowerShell pitfalls from the blog post 'PowerShell 实战踩坑大全' via the official tools/pre-execute interception point, and bundles the powershell-check skill.
dsh-session-repairSession Repair
DSH Web plugin for session diagnosis, trusted checkpoints, pre-repair backups, and safe repair.
dsh-github-connectGithub Connect
Portable GitHub connection plugin: with one click in the lower-left corner of the dialog, AI such as DeepSeek can connect to your GitHub account via OAuth device flow or Personal Access Token. Once connected, AI can directly operate your GitHub through the github_api tool.
dsh-auth-tunnelAuth Tunnel
Password-gated public access for the Web GUI via Cloudflare Tunnel: a loopback password gate (login page + HMAC cookie) in front of the webserver, published by spawning cloudflared in quick or named-tunnel mode - tells the shell and the model the public URL