All plugins
1263 pluginsv0.5.2
@dsh-external/dsh-jev-lensJev Lens
Jev quality bench for DeepSeek Harness: shadow-accounted dangerous-command judging, injection screening for fetched content, canary A/B drills, and an optional gate mode — with the ledger, the report and the settings card needed to judge whether any of it is worth keeping.
v0.1.0
dsh-mermaid-fenceMermaid Fence
Render settled ```mermaid fences in the dsh Web GUI chat as SVG diagrams, with strict security and a safe code-block fallback.
v0.1.0
dsh-sidebar-pinsSidebar Pins
Codex-style pinned/recent sidebar panes with one full row menu for DeepSeek Harness — pins, per-row actions, file-manager reveal, and a guarded workspace delete route.
v0.1.0
dsh-session-isolationSession Isolation
DSH plugin: per-session working directories. A workspace marked with .dsh-isolate gives every new session its own session-<id> folder, so concurrent sessions cannot overwrite each other's files.
v0.1.4
dsh-official-group-guardOfficial Group Guard
Hide DeepSeek official model group in the dsh UI unless a Konami code is entered / 默认隐藏 dsh 官方模型分组，按 Konami 码显示
v1.0.0
@local/dsh-plugin-data-maskPlugin Data Mask
Paste-time data masking for the DeepSeek Harness Web composer: sensitive values are replaced before they ever reach the input box.
v0.1.7-alpha.1-auth.1
@dsh-external/dsh-auth-tailscaleAuth Tailscale
Tailscale Serve authentication adapter for dsh Connection
v0.1.0
dsh-credentials-adminCredentials Admin
Manage credentials (refs) in the dsh Web settings page: add, modify, or delete them; configured values are never displayed again.
v0.4.0
dsh-claude-subscriptionClaude Subscription
Claude Pro/Max subscription for DeepSeek Harness with official Anthropic OAuth login and automatic token refresh
v1.0.1
dsh-zcode-gitZcode Git
First-class Git tools for DeepSeek Harness agents: structured status/diff/log/branch/commit/stash whose output is immune to the user's pager, color, quotepath and alias configuration; every invocation is an argv array so no shell ever sees an argument; mutations go through the harness approval servi
v0.1.0
dsh-approval-explainApproval Explain
Explain what a pending dsh approval will actually do, with one LLM call: an Explain button beside Allow/Reject plus the Host /explain command behind it
v0.1.1
dsh-opencode-go-key-brokerOpencode Go Key Broker
DSH plugin: OpenCode Go API-key pool with quota-driven automatic switching, a Settings tab and a composer quota badge.
v0.3.0
spire-ctlSpire Ctl
A verified control surface for Slay the Spire 2: a JSON state contract, legal actions, and no-replay execution for any agent harness
v0.1.0
@dsh-external/dsh-voredteamVoredteam
dsh-voredteam — Single-mode (cybersecurity mode) DSH plugin collection: blackboard-style Fact/Intent/Hint engine + master controller dispatching specialized sub-agents + two panels, Operations and Settings + single access gate (DDoS prohibited / brute force prohibited / low-rate fuzzing).
v0.1.0
@dsh-external/voredteamVoredteamalt · @dsh-external
voredteam — Single-mode (cybersecurity mode) DSH plugin collection: blackboard Fact/Intent/Hint engine + central controller dispatching specialized sub-agents + two panels, Operations and Settings + sole gatekeeping rules (no DDoS/no brute-force/low-frequency fuzzing).
v1.0.0
dsh-casCas
DeepSeek Harness (dsh) 插件: 用于实现CAS SSO单点登录
v0.5.0
dsh-qoder-cliQoder Cli
Reuse the Qoder desktop app's sign-in or run the Qoder device login from the card to bring Qoder's models into DeepSeek Harness — 10 live-verified model keys over the Qoder model gateway, with an expandable settings card in the Web UI.
v0.2.2
@codebam/dsh-opensandboxOpensandbox
Run DeepSeek Harness command execution in OpenSandbox containers: an OpenSandbox-backed ctx.subprocess and container-world ctx.sandbox for dsh.
v0.1.0-rc.1
dsh-safekeepSafekeep
Unofficial Windows file recovery guard for unattended DeepSeek Harness workflows
v0.4.1
dsh-memory-jevMemory Jev
DSH memory plugin gated by the TypeSafe Jev decision model: mem_* tools whose every read/write is a typed judgement (choice/noul) — write gate, recall gate and a fail-closed injection gate with budget, audit log and restore/merge.
v0.1.0
dsh-pdf-signPdf Sign
PDF electronic signing for DeepSeek Harness: generate handwritten-style signature images, stamp them onto PDF pages, and apply PKCS#7 digital signatures with your own certificate. · DSH PDF 电子签名插件：生成签名图、PDF 盖章（可视化签名）、自签/自备证书的数字签名。
v0.1.0
limonene-dshLimonene Dsh
Read-only Amazon store investigations for DeepSeek Harness via Limonene MCP and browser OAuth.
v1.0.0
dsh-user-managerUser Manager
DeepSeek Harness (dsh) plugin: user management (database or LDAP) plus per-user session isolation. Adds a login gate, HTTP-level authorization of /api methods, and an admin user console.
v0.2.0
dsh-helper-plugin-command-askHelper Plugin Command Ask
dsh plugin: a Cursor-style /ask mode for DeepSeek Harness (dsh) — read-only Q&A for one turn, with an enforced read-only tool guard and durable state folded from the /ask command records. Installs via link: or github:.
v0.1.8
@perrylink/dsh-cert-mcpCert Mcp
Read-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-dimension evidence for DeepSeek Harness plugins.
v1.0.0
dsh-plugin-repo-snapshotPlugin Repo Snapshot
DeepSeek Harness plugin: encrypted workspace repo snapshots (including .git) backed up to your own local folder or Aliyun OSS, with a built-in settings page.
v0.1.1
dsh-subscription-loginSubscription Login
Subscription sign-in console for DeepSeek Harness: sign in to ChatGPT (Codex), Claude, GitHub Copilot and OpenRouter through DSH's own authorization flows, from one page that lists every registered flow instead of one provider.
v1.2.0
dsh-guard-sensitive-pathsGuard Sensitive Paths
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
v1.0.0
repo-autopilot-pluginRepo Autopilot Plugin
Package repo-autopilot itself as a DeepSeek Harness plugin: includes a prebuilt repo-autopilot with a per-file sha256 MANIFEST, read-only, and requiring no credentials.
v0.3.0
dsh-ssh-remote-tunnelSsh Remote Tunnel
DSH plugin: automatic SSH port-forward tunnel to a remote LLM/vLLM server (ping gate, any SSH client - OpenSSH ssh or PuTTY plink - with automatic password, health monitor) plus provider registration for subagent model selection. No plink required: OpenSSH ssh with password (SSH_ASKPASS/sshpass) or
