CATEGORY
Verified manifests and exact versions in this category.
dsh-frp
DeepSeek Harness plugin: adopt/install frps on server, install/configure frpc on clients. Does not overwrite existing frps token or foreign tunnels.
dsh-deploy-nginx
DeepSeek Harness plugin: nginx site base, TLS status, safe reload for the ops portal domain.
dsh-egress-gate
Deterministic network egress gate for DeepSeek Harness: web fetches and searches are checked against a destination allowlist before they run — content scanning guards what agents read, this guards where data may flow
dsh-manage-server
DeepSeek Harness plugin: server inventory, health alerts, read-only security baseline.
dsh-freeze
Hermetic composition lock for DeepSeek Harness: fingerprints the profile's plugin set, lockfile, and patch layer; a session that boots on a drifted composition says so loudly — the vendor-skills --frozen thesis, applied to the whole agent
dsh-plugin-oss-backup
DeepSeek Harness plugin: Back up workspace files to S3-compatible object storage (RustFS / Alibaba Cloud OSS / AWS S3). AK/SK are read only from environment variables and are never written to disk or included in logs.
dsh-pr-gate
Deterministic write gate for DeepSeek Harness: scope policy + residue scan on every file the agent writes, live in the session — the CI gate moved to the moment of the write
dsh-attest
Signed chain-of-custody for DeepSeek Harness sessions: every watched tool result appends a hash-chained, ed25519-signed record — what the agent did, provable after the fact
dsh-backdoor-guard
DeepSeek Harness plugin: detects trained-in backdoor payloads (silent/memorized tool execution, credential exfiltration) and stops the agent before tools execute. Backend-agnostic; optional token-entropy detection when logprobs are available.
dsh-security-audit
Autonomous six-phase security audit engine for DSH: vendored cloudflare/security-audit-skill + sandboxed execution + subagent orchestration
@guojin-ai/dsh-plugin-guard
Plugin security inspector for the DeepSeek Harness web GUI: statically audits installed plugins (dangerous API patterns + dependency review), layers an AI (default-model) online audit, and renders a green/yellow/red report panel.
dsh-jsnu-model
Jiangsu Normal University Large Model Plaza (model.jsnu.edu.cn, New API) DSH plugin: host-side management of 15-minute Bearer tokens and HttpOnly renewal cookies, with balance/workbench usage panels, and passes the balance to dsh-whale-widget.
dsh-ops-guard
DeepSeek Harness plugin: route downloads through aria2 and file search through Everything, by denying the built-in alternatives at the tool pre-execute hook and returning the exact replacement command. 强制下载走 aria2、文件搜索走 Everything 的 DSH 插件。
dsh-public-origin
Lets loopback-assuming DSH plugins (bili, reasoning-effort, skill-explorer) work when the Web UI is served on a public domain behind a reverse proxy, gated by dsh's own login.
dsh-trae-relay
Managed TRAE CN relay and account console for DeepSeek Harness
@was35/dsh-reclaim
Audit DeepSeek Harness disk usage (sessions, attachments, rebuildable caches), classify it by risk, and move anything you choose to delete into the plugin's own recoverable trash. The model can query, never delete.
@yukieiji/dsh-command-permission
DSH plugin: one-click session/workspace command allow patterns on approval prompts, plus per-workspace allow/deny lists edited from the sidebar right-click menu.
dsh-auto-review-default
Put DeepSeek Harness sessions into the built-in Auto review permission preset: new sessions at creation, existing root sessions when they are restored.
dsh-zmtgzt
DeepSeek Harness plugin that brings the Easel social-content agent into dsh. Bundles an Easel snapshot (114 skills plus the SOUL.md / AGENTS.md contract) so no clone is required, releasing it to a writable workspace on first run. Registers 24 zmtgzt_* tools and adds a Creator Workbench (自媒体工作台) entr
dsh-whale-guard
Whale-chan safety plugin: turns low-level accidents like “killing yourself” into hard tool-level blocks — the safe_kill tool (automatically excludes itself and its ancestor process chain) + bash command preflight checks (self-matching pkill / sudo -S hijacking heredoc / rm -rf /, etc.) + an extensib
dsh-plumb-identity
Per-agent plumb session identity for DeepSeek Harness: stamps and declares a stable plumb session id for every DSH conversation and subagent sharing one plumb MCP connection.
dsh-grantwrite-patch
Windows sandbox ACL-repair plugin for DeepSeek Harness (dsh) — fix the grantWrite failure (SetNamedSecurityInfoW Win32 5) and retry the command invisibly
onekey-models
OneKey-Models — one-click access to the 108 latest models on TokenDance inside DeepSeek Harness: OAuth sign-in stores the API key for you, the model catalog syncs live, and you choose which models are visible, including image generation, Jev typed decisions and multimodal input. API support powered
dsh-sandbox-console-fix
DeepSeek Harness Windows bundle: gives the ACL sandbox runner a console so confined pwsh/cmd/powershell start again under workspace-write (read-only was never affected). Merges one `Everyone` full-access ACE into the runner process token Default DACL (the same ACE the shipped read-only path already
dsh-feyagate
FeyaGate Gateway × DSH — Host the FeyaGate MCP engine (local service) in DSH and provide a visual settings interface for services, authorization, accounts, and open APIs.
dsh-plugin-compat-guard
最大的兼容性保护 (The Biggest Compatibility Protection) for DeepSeek Harness: when this profile mounts any third-party plugin, the guard writes a verdict and a crash log, then ends the process. A joke plugin — do not install it on a machine you are working on.
dsh-glm-web-search
Z.AI (GLM) web search, web reader and vision for DeepSeek Harness, authenticated by a Z.AI email (OAuth) login instead of an API key.
dsh-agents-in-the-loop
DSH agent coordination: named session messaging, persistent spawning, authenticated MCP access, external poll/ack inboxes, and session-backed workspace identities. Optional capabilities ship disabled.
@alaxrpg/dsh-sensenova-provider
Unofficial DeepSeek Harness LLM provider plugin for SenseNova (OpenAI-compatible). Registers the 'sensenova' provider route with multi-account API-key rotation, a Models-page card, and a live model catalog.
dsh-api-heal
Automatically fixes “Invalid API Key” errors by monitoring credential-related failures, calling the respective renewal entry points for qoder / workbuddy / our-free-model, and resending requests. Also provides the heal_api tool and status routes. Self-healing credentials for DeepSeek Harness.
