DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins — Page 12

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories

All pluginsAgents & Orchestration710Memory & Context853Coding & Developer Tools1.9kUI & Customization2.5kIntegrations & Communication1.3kVision & Media465Search & Research619Security & Access864Models & Usage1.1kProductivity & Workflow1.5k

All plugins

865 plugins
Cv0.1.2
dsh-context-provenance

Context Provenance

Observe-only provenance ledger over public DeepSeek Harness runtime evidence

↓ 0★ 3
Updated 9/3/2026
Av0.2.4
dsh-autogate

Autogate

DeepSeek Harness auto-approval plugin: Adds an Auto mode on top of the workspace-write sandbox—deterministic rules allow or deny, ambiguous operations are adjudicated by the LLM, and dangerous operations are escalated to a human. Preserves the workspace sandbox boundary without widening it to full-a

↓ 0
★ 3
Updated 9/3/2026
Ov0.8.0
dsh-omp-advisor

Omp Advisor

Ward Council — oh-my-pi advisor subsystem ported to DeepSeek Harness: independent reviewer models watch your agent's live transcript, investigate with read-only tools, and advise it. Advisors guide. The ward protects. The model executes.

↓ 0★ 3
Updated 9/2/2026
v0.3.11
dsh-safemode-profile

Safemode Profile

Safemode profile enforcer: force-restores ~/.dsh/profiles/safemode to a clean whitelist (dsh-base + dsh-web-app) on start and continuously guards it against modification, so `dsh --profile safemode` always boots with zero third-party plugins. No build scripts: the bundle row does all work.

↓ 0★ 3
Updated 9/1/2026
Rv0.2.0
dsh-route-resilience

Route Resilience

Multi-route high availability, fault isolation and observability for DeepSeek Harness. Route groups fail over between authorized provider routes on rate limits (429 / Retry-After), transport errors and auth/quota failures, with per-route quarantine (exponential backoff) and disablement.

↓ 0★ 3
Updated 8/29/2026
Hv0.1.0-rc.5
@deepseek-ai/dsh-host-telegram

Host Telegram

Telegram remote-control surface for dsh sessions: whitelisted chats list, read, prompt, and stop dsh sessions through the host ApiProxy

↓ 0★ 3
Updated 8/28/2026
Av0.1.1
agent-guard-dsh

Agent Guard Dsh

Destructive-action reliability layer for AI agents on DeepSeek Harness: intercepts Bash before execution, quarantines deletions to .agent-trash/ with a restorable manifest, snapshots git before overwrites, and escalates compound shapes to the human (Decision Protocol: ALLOW / RELOCATE / SNAPSHOT / A

↓ 0★ 3
Updated 8/25/2026
Tv0.2.0
dsh-tool-policy

Tool Policy

Allow, ask, or deny DeepSeek Harness tool calls before execution

↓ 0★ 3
Updated 8/21/2026
Lv0.1.0
dsh-lark-web-auth

Lark Web Auth

Multi-tenant Feishu/Lark OAuth login and per-user session isolation for the DeepSeek Harness Web GUI

↓ 0★ 3
Updated 8/21/2026
Gv0.1.0
dsh-governed-workflow

Governed Workflow

Policy-enforced, evidence-first governed workflows for DeepSeek Harness agents — installable community plugin (governance core + authority provider)

↓ 0★ 3
Updated 8/21/2026
Pv0.4.2
@deepseek-ai/dsh-plugin-vm-sandbox

Plugin Vm Sandbox

OrbStack VM sandbox v0.4.0: Building on v0.3 (security/reliability), adds A1 interactive terminal, A3 scenario-based one-click creation, A4 deletion undo + completion notifications, A5 at-a-glance quota visibility, A6 collaboration groups, B1 security baseline vm_harden, B2 secret store vm_secret, C

↓ 0★ 3
Updated 8/20/2026
Pv1.0.3
@dsh-community/dsh-plugin-container

Plugin Container

Deployment-grade Docker container sandbox plugin for DeepSeek Harness (feature parity with dsh-plugin-vm-sandbox): 39 docker_* model tools, snapshots/rollback, file transfer, port forwarding, background tasks, auditing, sharing/quotas/reclamation, network policies, parallel execution across multiple

↓ 0★ 3
Updated 8/20/2026
Cv0.1.2
dsh-capability-discovery

Capability Discovery

A DSH Bundle that registers a multi-source capability discovery and risk inspection Skill.

↓ 0★ 3
Updated 8/20/2026
Cv1.5.0
dsh-capability-toggle-plugin

Capability Toggle Plugin

DSH WebUI capability controls for skills, MCP servers, tools, prompt injections, approvals, and safety guards at session, project, and global levels.

↓ 0★ 2
Updated 9/19/2026
Rv0.2.2
dsh-reasoning-support

Reasoning Support

DSV4.1 reasoning support with multimodal context and bounded artifact acceptance for DeepSeek Harness

↓ 0★ 2
Updated 9/18/2026
Gv1.0.6
dsh-grok-provider

Grok Provider

Clean-room Grok Build provider for DeepSeek Harness with official CLI browser authentication

↓ 0★ 2
Updated 9/18/2026
Cv0.7.0
dsh-clinepass

Clinepass

Cline Pass for DeepSeek Harness: an OpenAI-compatible provider route whose requests are pinned to the DeepSeek upstream channel, with the API key entered on Settings → Models.

↓ 0★ 2
Updated 9/16/2026
Sv0.1.0
dsh-security

Security

DSH security audit plugin: find, validate, and report vulnerabilities (equivalent rebuild of codex-security methodology, skills + workflow capsules only).

↓ 0★ 2
Updated 9/15/2026
Hv0.1.5-rc.2
dsh-https-fix

Https Fix

DeepSeek Harness 插件:内置 HTTPS 反向代理与统一配置管理。在 设置→插件配置→Https Fix 中配置关闭 http 外网访问、http/https 端口、域名、TLS 证书密钥路径,并提供校验与保存。Built-in HTTPS reverse proxy for dsh Web GUI with in-app configuration (block external http, http/https ports, domain, TLS cert/key) plus validate & save actions.

↓ 0★ 2
Updated 9/14/2026
v0.3.0
dsh-write-rule-guard

Write Rule Guard

Prevents characters matching a regular expression from being used in content written by edit/write. extraTools can be configured to intercept additional tools. Regular expressions and error messages can be configured in the cordis configuration file. Standalone host.

↓ 0★ 2
Updated 9/14/2026
Bv0.4.0
browserrig

Browserrig

Open-source local browser driver for trusted agents that controls your existing signed-in Chromium browser.

↓ 0★ 2
Updated 9/12/2026
Sv0.1.6
dsh-session-vault

Session Vault

Secure session management plugin for DSH rc.7: archive restoration, unlimited recycle bin, batch operations, and permanent deletion.

↓ 0★ 2
Updated 9/12/2026
Mv0.2.54
muretai-dsh-skill

Muretai Dsh Skill

Join the Muretai agent network from DeepSeek Harness: own identity, invite-based introductions, signed end-to-end encrypted agent-to-agent messaging, inbound-mail wake.

↓ 0★ 2
Updated 9/11/2026
Wv0.1.0
dsh-web-fetch-enhanced

Web Fetch Enhanced

Configurable non-public address allowlists for DeepSeek Harness web_fetch

↓ 0★ 2
Updated 9/11/2026
Cv0.3.0
dsh-citation-auditor

Citation Auditor

Citation Auditor — Review citation sources in AI responses: scan, score, generate reports, and configure blocking policies

↓ 0★ 2
Updated 9/11/2026
Pv0.2.10
dsh-perm-guard

Perm Guard

Auto automatic approval plugin: DSH medium-tier permissions—automatically allow actions within trusted directories, manually confirm dangerous operations (adjustable category toggles)

↓ 0★ 2
Updated 9/10/2026
v0.3.2
dsh-git-credentials

Git Credentials

Out-of-tree dsh plugin: GitLab, GitHub, Gitee, Gitea, and Bitbucket tokens stay out of the model context, stored encrypted (AES-256-GCM) in a plugin-owned file; the model calls forge API tools on demand, and the web settings page manages sites and tokens.

↓ 0★ 2
Updated 9/9/2026
Gv0.0.1
@jypjypjypjyp/dsh-guardrail

Guardrail

Tool call policy guard: Performs string matching on agent tool call parameters, blocks matches for dangerous behavior and injects a reason (deny), or allows them while injecting a warning (warn), with a rule management panel

↓ 0★ 2
Updated 9/8/2026
Av0.6.1
dsh-audit-mode

Audit Mode

Fifth DeepSeek Harness mode with configurable Codex, Claude Code, or DSH audits, user-approved remediation turns, progressive Cordis/skill elevation, safety pauses, and Web/TUI review controls.

↓ 0★ 2
Updated 9/7/2026
Pv0.2.1
dsh-profile-lock-proof

Profile Lock Proof

Content-addressed proof that a DeepSeek Harness profile declaration, pnpm lock and installed bundles agree

↓ 0★ 2
Updated 9/7/2026
← Previous1…1011121314…29Next →
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in