DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins — Page 39

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories

All pluginsAgents & Orchestration1kMemory & Context1.3kCoding & Developer Tools2.8kUI & Customization3.7kIntegrations & Communication1.9kVision & Media615Search & Research864Security & Access1.3kModels & Usage1.7kProductivity & Workflow2.2k

All plugins

1263 plugins
v0.1.0
dsh-workspace-memory

Workspace Memory

Approval-gated workspace instructions and memory for DeepSeek Harness

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-preset-zombie-guard

Preset Zombie Guard

Preset-zombie guard for DeepSeek Harness: periodically scans session logs (zstd frame decoding) for sessions whose effective agent preset no longer exists in the roster; auto-archives blank zombies via the official workspaceRegistry API and deduplicates warnings for non-blank ones. Ships preset_guar

↓ 0★ 0
Updated 9/1/2026
Av0.1.0
dsh-authmux

Authmux

A DSH-native OAuth multiplexer for subscription-backed model providers

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-pentest-bugtrace

Pentest Bugtrace

BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.

↓ 0★ 0
Updated 9/1/2026
Dv0.1.0
dsh-danger-guard

Danger Guard

DSH Dangerous Command Guard: Uses the tools/pre-execute gate to intercept high-risk bash/pwsh commands (rm -rf /, mkfs, dd writing to devices, piping scripts for execution, git push --force, etc.), with tiered policies (extremely high risk always denied / medium risk follows the global deny/ask/log

↓ 0★ 0
Updated 9/1/2026
Sv0.1.0
dsh-safe-tool

Safe Tool

AI-powered command approval plugin for DeepSeek Harness — intercepts tool calls and routes them through a read-only review subagent

↓ 0★ 0
Updated 9/1/2026
Dv1.4.0
deepseek-harness-ssh

Deepseek Harness Ssh

SSH remote control for DeepSeek Harness: run commands / compile and read-write files on a remote machine over SSH (works with reverse-SSH tunnels or Tailscale)

↓ 0★ 0
Updated 9/1/2026
Sv0.1.0
dsh-secret-scrub

Secret Scrub

DeepSeek Harness plugin: redacts known secret shapes in tool arguments and results behind stable placeholders, and appends preimage-free JSONL incidents

↓ 0★ 0
Updated 9/1/2026
Gv0.5.0
dsh-guardian-mode

Guardian Mode

Fifth DeepSeek Harness mode with configurable Codex, Claude Code, or DSH audits, user-approved remediation turns, progressive Cordis/skill elevation, safety pauses, and Web/TUI review controls.

↓ 0
Updated 9/1/2026
Sv0.3.1
dsh-session-allow

Session Allow

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)

↓ 0★ 0
Updated 8/31/2026
v0.1.1
@yangzhe1991/dsh-futu-mcp

Futu Mcp

DSH plugin: connect to Futu (富途) MCP via OAuth 2.1 and expose its tools to the agent; tokens persisted outside the workspace

↓ 0★ 0
Updated 8/31/2026
Lv0.1.0
dsh-loop-brake

Loop Brake

DeepSeek Harness plugin: a circuit breaker that denies the Nth identical tool call in a row, by exact hash of tool name and canonical arguments

↓ 0★ 0
Updated 8/31/2026
Cv0.1.0
dsh-canary

Canary

DeepSeek Harness plugin: plants a canary string in model-visible context and denies any tool argument or outbound URL that echoes it back

↓ 0★ 0
Updated 8/31/2026
Iv0.1.0
@short-arm-ape/dsh-intranet-browser

Intranet Browser

Bypasses the SSRF protection of @yeesy369/dsh-browser-playwright.

↓ 0★ 0
Updated 8/31/2026
Sv1.0.7
dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix

Sandbox Permissions Not Strictly Wider Justification Empty Fix

Fix no-op upgrade errors for the sandbox_permissions and justification fields in pwsh/bash/fs/dsh-sandbox. Prevent rejection when the session is already in danger-full-access mode and the model provides an empty justification or reasserts the same mode.

↓ 0★ 0
Updated 8/31/2026
Bv0.1.0
dsh-browser-host

Browser Host

DSH host-side bridge for the DSH Browser Client extension: a token-authenticated /ext-api RPC proxy + /ext-events.mux WebSocket event stream + bidirectional /ext-api-control channel, so a browser extension page (which cannot pass the same-origin /api trust fence) can drive the harness from a floatin

↓ 0★ 0
Updated 8/31/2026
Ev0.1.0-alpha.2
dsh-execution-fidelity-guard

Execution Fidelity Guard

Execution-fidelity guard bundle for DeepSeek Harness

↓ 0★ 0
Updated 8/31/2026
Av0.1.0
@hrhgit/dsh-agent-manager

Agent Manager

Manage the declared tool policy of DeepSeek Harness agent presets

↓ 0★ 0
Updated 8/31/2026
Vv0.1.0
dsh-verification-meme

Verification Meme

Maliciously playful security verification: intercepts button clicks in the Harness interface and only allows them through after verification (confirmation/CAPTCHA/human verification/scenic slider/puzzle/9-grid image gallery/animal 9-grid), including a prank console

↓ 0★ 0
Updated 8/31/2026
Pv1.2.2
dsh-plugin-subs

Plugin Subs

DSH plugin: OAuth sign-in for Claude, Codex, Grok, Antigravity, OpenRouter, Agnes AI, Qwen, Spark, ERNIE — expose subscription LLMs as DeepSeek Harness providers

↓ 0★ 0
Updated 8/31/2026
Av0.1.0
dsh-auto-approver

Auto Approver

Configurable auto-approval for DeepSeek Harness: intercepts approval/request and answers allowed-once/rejected by policy (allow-all / allowlist / deny-always), with a full audit log — so the human is only asked when the policy says so.

↓ 0★ 0
Updated 8/31/2026
Nv0.1.0
dsh-net-proxy-plugin

Net Proxy Plugin

Fallback network proxy for DeepSeek Harness: detects system proxies, probes overseas connectivity (Google/GitHub), routes dsh outbound HTTP through a working local proxy when direct access fails.

↓ 0★ 0
Updated 8/30/2026
Av0.6.1
dsh-approval-first

Approval First

Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call. Regis

↓ 0★ 0
Updated 8/30/2026
Sv0.1.0
dsh-ssrf-guard

Ssrf Guard

DeepSeek Harness plugin: a fail-closed URL host and scheme allowlist checked before a request is opened, exposed as assertUrlAllowed and the ssrf_check tool

↓ 0★ 0
Updated 8/30/2026
Mv0.1.0
dsh-modelprint

Modelprint

DeepSeek Harness plugin: fingerprint the provider, model id, sampling, offered tool schemas, and system-prompt prefix of each request, and diff the live card against a pinned one through the modelprint_check tool

↓ 0★ 0
Updated 8/30/2026
v0.1.1
dsh-provider-login

Provider Login

Sign in to DeepSeek Harness model providers with a subscription: drives the OAuth flows the harness registers but never exposes.

↓ 0★ 0
Updated 8/30/2026
Rv0.1.1
@sysit/dsh-remote-access

Remote Access

Out-of-tree dsh web-profile bundle: serve the Web UI on all interfaces (env DSH_WEB_HOST) behind the built-in ?token= BrowserAuth and auto-print the LAN URL. Single webserver row — no auth fork, stays composable with built-in BrowserAuth.

↓ 0★ 0
Updated 8/30/2026
Gv0.1.5
dsh-gamepad-approval

Gamepad Approval

Xbox controller hardware approval dsh plugin — Agent high-risk tool calls require physical button confirmation (A approve / B reject)

↓ 0★ 0
Updated 8/30/2026
Lv0.1.0
dsh-listener

Listener

Secure local voice input plugin for DeepSeek Harness: a microphone button on the right side of the input box. After recording, transcription is performed through the same-origin host proxy (local SenseVoice-Small INT8 ONNX; audio never leaves the network). The backend binds only to 127.0.0.1 with a

↓ 0★ 0
Updated 8/30/2026
Nv5.9.0
dsh-nuke-plugin

Nuke Plugin

Powerful DSH plugin uninstallation — policy tiers · atomic batches · fingerprint snapshots · health checks · concurrency locks · oracle accountability · report export

↓ 0★ 0
Updated 8/30/2026
← Previous1…3738394041…43Next →
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in