DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

Plugins Presets Docs News

Community

Publish a plugin Contact Report an issue

Resources

Plugin Hub on GitHub DeepSeek Harness System status Privacy notice

© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories

All plugins Agents & Orchestration715 Memory & Context850 Coding & Developer Tools1.9k UI & Customization2.5k Integrations & Communication1.3k Vision & Media459 Search & Research620 Security & Access857 Models & Usage1.1k Productivity & Workflow1.5k

All plugins

857 plugins

Pocket

Put DeepSeek Harness in your pocket: one package, one settings page, and scan a QR code on your phone to access DSH on your computer in sync (LAN + public network, real-time screen mirroring).

↓ 3.3k★ 1.2k

Updated 9/20/2026

@toddzheng024/dscode-bundle

DSCODEClaimed

A complete DeepSeek coding agent with persistent shell, Ultra collaboration and automatic permission review.

↓ 3.3k★ 100

Updated 9/20/2026

dsh-auto-review

Auto Review

Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.

Updated 9/20/2026

dsh-permission-rules

Permission Rules

Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on

↓ 1.3k★ 113

Updated 9/20/2026

Agy Link

Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.

Updated 9/20/2026✓ Scan passed

@mstar-harness/dsh

@mstar-harness/dsh

Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.

Updated 9/20/2026✓ Scan passed

dsh-mcp-panel

Mcp Panel

MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (append-only profile-patch fragments, approval-gated writes with automatic backups), a

Updated 9/20/2026

dsh-mcp-connector

Mcp Connector

DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.

Updated 9/20/2026✓ Scan passed

deepseek-harness-wallet

Deepseek Harness Wallet

Local-first DeepSeek Harness control center for balance monitoring, usage accounting, time-aware custom third-party API pricing, a 365-day local token ledger, Z.ai Coding Plan quotas, official pricing sync, encrypted multi-account switching, reminders, re

Updated 9/20/2026✓ Scan passed

Vault

Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.

Updated 9/20/2026✓ Scan passed

@linxin666/dsh-doctor

Doctor

Transactional rescue mode for DSH profiles with a supervised launcher, isolated recovery capsule, deterministic repairs, health monitoring, and a local Web recovery console

🔥 ↓ 27.7k★ 0

Updated 9/20/2026✓ Scan passed

Agy

Google Antigravity (agy) OAuth auth + model access plugin for DeepSeek Harness: multi-account pool, 429 rotation, device fingerprinting, CLI and web login.

Updated 9/20/2026✓ Scan passed

@xgone/dsh-remote

Remote

Remote access & authentication for the DeepSeek Harness web UI: login gate, MFA (TOTP), signed session cookies, role-based access, in-browser directory picker, account management settings. Fully localized (zh/en).

Updated 9/20/2026✓ Scan passed

dsh-lark-link

Lark Link

High-reliability Feishu/Lark bridge for DeepSeek Harness — QR one-click auth, multi-mode agents, card-based commands, zero-loss outbox, media in/out, session logs, reusable DSH Web GUI

Updated 9/20/2026✓ Scan passed

@shgroup/dsh-serenity-hooks

Serenity Hooks

宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：11 个工具（container_fs/container_trajectory/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/im-bridge/acc-diag）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 工作日志与原地重建 + 网页登录入口/微信桥/子角色

Updated 9/20/2026✓ Scan passed

dsh-cmdgo-provider

Cmdgo Provider

CommandCode Go package provider: /alpha/generate CLI gateway (official CLI fingerprint emulation) with DSH model list integration + OAuth login (multi-account pool rotation/failover) + per-account 5-hour/weekly/monthly quota display + session upper-right quota HUD (combined total for all accounts +

Updated 9/20/2026✓ Scan passed

dsh-auth-gate

Auth Gate

Application-layer authentication plugin for the dsh web surface

Updated 9/20/2026✓ Scan passed

Defend

Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets

Updated 9/20/2026

@wingsky-1/dsh-lan-proxy

Lan Proxy

Access the dsh web UI over a local network: listen on 0.0.0.0:<port> and forward HTTP/HTTPS and WebSocket/wss traffic to the loopback web server (127.0.0.1:3080 by default). Rewrite Host/Origin to pass the browser trust boundary for /api, accepting only IP literals or localhost in the Host header (D

Updated 9/20/2026✓ Scan passed

Spec Wave

SpecWave — multi-host coding CLI (Cursor / Claude Code / DSH / agents) + P0 gates & Harness process track. Spec-driven discipline: mechanical gates (exit 2), S2 audit trail, hat roles. Formerly SpecGate / dsh-coding-kit. npx spec-wave

Updated 9/20/2026✓ Scan passed

@gehennawu/dsh-service

Service

DSH Web operations panel: safe restarts, health monitoring, backups, and Linux permission maintenance.

Updated 9/20/2026✓ Scan passed

@perrylink/dsh-github

Github

Official-grade GitHub CI for DeepSeek Harness: composite action (review PRs / fix CI / report), polling PR review bot with idempotent inline comments, a status-check gate, and approval-gated PR/issue/repo/file tools

Updated 9/20/2026✓ Scan passed

dsh-pentester

Pentester

Minimal Root-Orchestrator PTES pentesting plugin for DeepSeek Harness

Updated 9/20/2026

@agent_forge/forge-dsh

Forge Dsh

Forge quality gates for DeepSeek Harness (dsh): task gates, read-before-edit, bash hazard interception and quality scoring, driven by the forge CLI through DSH's typed interception points.

Updated 9/20/2026✓ Scan passed

@goodandready/dsh-key-rotation

Key Rotation

Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.

Updated 9/20/2026✓ Scan passed

dsh-remote-mobile

Remote Mobile

DeepSeek Harness 远程与移动端安全网关插件：零修改 DSH 底层代码安全开放局域网与 Tailscale 连接 | DeepSeek Harness (DSH) Remote & Mobile Security Guard: safely opens Tailscale/LAN with zero core modifications, QR scan auth, RSA encryption & brute-force defense.

Updated 9/20/2026✓ Scan passed

dsh-plugin-sandbox-escalation-fix

Plugin Sandbox Escalation Fix

Normalize non-widening sandbox requests and missing justifications in DeepSeek Harness tools

Updated 9/20/2026✓ Scan passed

deepseek-harness-auth

Deepseek Harness Auth

Fail-closed password authentication proxy bundle for the DeepSeek Harness Web profile

Updated 9/20/2026✓ Scan passed

Mask

PII masking middleware for DeepSeek Harness: regex-detect and replace phones, emails, ID cards, bank cards, keys, and (opt-in) IPs with placeholders before they reach the model, keep the restore table host-side (memory plus a controlled storage domain, ne

Updated 9/20/2026✓ Scan passed

dsh-lan-access

Lan Access

DSH plugin: bind the Web GUI to 0.0.0.0 for LAN access and polyfill crypto.randomUUID for non-secure (LAN HTTP) contexts. Trusted networks only.

Updated 9/20/2026✓ Scan passed

1 2 3…29 Next →

DeepSeek Harness Plugin Hub

Profiles Plugins Categories News Docs Sign in Manage Profiles

Profiles Plugins Categories News Docs Sign in