DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories

All pluginsAgents & Orchestration1.5kMemory & Context2.1kCoding & Developer Tools4kUI & Customization5.6kIntegrations & Communication3kVision & Media917Search & Research1.2kSecurity & Access1.8kModels & Usage2.5kProductivity & Workflow3.6k

All plugins

1816 plugins
Gv0.1.0
dsh-git-auth

Git Auth

DSH host tool bundle: manage glab / gh authorization and SSH keys

↓ 0★ 0
Updated 9/4/2026
Cv0.1.0
dsh-cloak

Cloak

Context firewall for DeepSeek Harness: detects credentials in tool results and replaces them with opaque placeholders before they reach the model — the secret never enters context, the task keeps going.

↓ 0★ 0
Updated 9/4/2026
Mv0.1.0
dsh-model-account-login

Model Account Login

Persistent DSH model-account authorization UI for ChatGPT, Claude, and other llm-pi-ai login flows

↓ 0★ 0
Updated 9/4/2026
Ov0.2.5
@omdsh-plugins/omdsh-remctrl

Omdsh Remctrl

Remote control for the DeepSeek Harness: puts its own interface on a public address behind a passcode, over a cloudflared tunnel by default, so the window you reach from a phone is the window you left open

↓ 0★ 0
Updated 9/3/2026
Cv0.1.0
dsh-claim-guard

Claim Guard

A deterministic pre-write claim guard for supported DeepSeek Harness file tools.

↓ 0★ 0
Updated 9/3/2026
Sv0.2.0
dsh-safe-delete

Safe Delete

Intercepts `rm` commands issued by any DSH agent session (GUI, automation runs, headless bridges) at the tools guard layer and moves the targets to the macOS Trash instead of deleting them. Switchable from the web GUI under Settings → General.

↓ 0★ 0
Updated 9/3/2026
v0.1.0
dsh-d1

D1

Cloudflare D1 tools for the DeepSeek Harness: d1_list/query/exec/schema/stats/health over the D1 HTTP API — read-only first, lexical read-only guard, write-approval gate, row clamping, CSV/JSON output.

↓ 0★ 0
Updated 9/3/2026
Rv0.4.0-beta.2
@musitoolbox/dsh-remote

Remote

Opt-in mobile access to DeepSeek Harness Web through QR pairing and a managed FRP tunnel.

↓ 0★ 0
Updated 9/3/2026
Sv0.1.0
dsh-security-guard

Security Guard

DSH runtime security guard plugin — loader import confinement, HTTP Host header validation, and sandbox service deny-list (QVD-2026-52631/57410/52644/52646). AI-assisted patch.

↓ 0★ 0
Updated 9/3/2026
Sv1.0.0
@deepdeck-apps/strudel-vis-builder

Strudel Vis Builder

The official Strudel REPL experience for DeepDeck with a sandboxed runtime and AI-assisted live coding

↓ 0★ 0
Updated 9/3/2026
Mv0.3.0
dsh-mcp-oauth-client

Mcp Oauth Client

General-purpose MCP manager and client bridge plugin for DeepSeek Harness

↓ 0★ 0
Updated 9/3/2026
v0.2.5
dsh-tool-folder

Tool Folder

Fold the DSH tool surface per request + ChainGuard firewall (high-risk block + exfil-chain detection + anti-obfuscation) + BM25/bge-m3 hybrid tools_search. Shrinks schema tokens 80-90% while keeping selection accuracy. v0.2.0 adds a semantic retrieval leg (local Ollama bge-m3, RRF hybrid) and ChainG

↓ 0★ 0
Updated 9/2/2026
Fv0.2.1
dsh-fs-allowlist

Fs Allowlist

Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批（write/edit + bash），设置页可视化调整。

↓ 0
Updated 9/2/2026
Cv0.1.0
dsh-circuit-breaker

Circuit Breaker

Stop runaway agent loops in DeepSeek Harness: denies repeated identical tool calls and enforces a per-agent call cap, outside the model where instructions cannot reach.

↓ 0★ 0
Updated 9/2/2026
Kv1.0.0
dsh-kimi-provider

Kimi Provider

Kimi (Kimi Code account) integration bundle for DeepSeek Harness: provider route, models, device-code login and auto token refresh (npm: dsh-kimi-provider)

↓ 0★ 0
Updated 9/2/2026
Dv1.0.0
dsh-default-workspace

Default Workspace

Cross-platform native DSH default workspace with complete read-only access to DSH resources, including sensitive state.

↓ 0★ 0
Updated 9/1/2026
Nv0.1.0-alpha.1
dsh-native-codex-oauth

Native Codex Oauth

Native ChatGPT OAuth controls for DeepSeek Harness's built-in OpenAI Codex provider

↓ 0★ 0
Updated 9/1/2026
v0.1.0
dsh-workspace-memory

Workspace Memory

Approval-gated workspace instructions and memory for DeepSeek Harness

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-preset-zombie-guard

Preset Zombie Guard

Preset-zombie guard for DeepSeek Harness: periodically scans session logs (zstd frame decoding) for sessions whose effective agent preset no longer exists in the roster; auto-archives blank zombies via the official workspaceRegistry API and deduplicates warnings for non-blank ones. Ships preset_guar

↓ 0★ 0
Updated 9/1/2026
Av0.1.0
dsh-authmux

Authmux

A DSH-native OAuth multiplexer for subscription-backed model providers

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-pentest-bugtrace

Pentest Bugtrace

BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.

↓ 0★ 0
Updated 9/1/2026
Dv0.1.0
dsh-danger-guard

Danger Guard

DSH Dangerous Command Guard: Uses the tools/pre-execute gate to intercept high-risk bash/pwsh commands (rm -rf /, mkfs, dd writing to devices, piping scripts for execution, git push --force, etc.), with tiered policies (extremely high risk always denied / medium risk follows the global deny/ask/log

↓ 0★ 0
Updated 9/1/2026
Dv1.4.0
deepseek-harness-ssh

Deepseek Harness Ssh

SSH remote control for DeepSeek Harness: run commands / compile and read-write files on a remote machine over SSH (works with reverse-SSH tunnels or Tailscale)

↓ 0★ 0
Updated 9/1/2026
Gv0.5.0
dsh-guardian-mode

Guardian Mode

Fifth DeepSeek Harness mode with configurable Codex, Claude Code, or DSH audits, user-approved remediation turns, progressive Cordis/skill elevation, safety pauses, and Web/TUI review controls.

↓ 0
Updated 9/1/2026
Sv0.3.1
dsh-session-allow

Session Allow

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)

↓ 0★ 0
Updated 8/31/2026
v0.1.1
@yangzhe1991/dsh-futu-mcp

Futu Mcp

DSH plugin: connect to Futu (富途) MCP via OAuth 2.1 and expose its tools to the agent; tokens persisted outside the workspace

↓ 0★ 0
Updated 8/31/2026
Lv0.1.0
dsh-loop-brake

Loop Brake

DeepSeek Harness plugin: a circuit breaker that denies the Nth identical tool call in a row, by exact hash of tool name and canonical arguments

↓ 0★ 0
Updated 8/31/2026
Cv0.1.0
dsh-canary

Canary

DeepSeek Harness plugin: plants a canary string in model-visible context and denies any tool argument or outbound URL that echoes it back

↓ 0★ 0
Updated 8/31/2026
Iv0.1.0
@short-arm-ape/dsh-intranet-browser

Intranet Browser

Bypasses the SSRF protection of @yeesy369/dsh-browser-playwright.

↓ 0★ 0
Updated 8/31/2026
Sv1.0.7
dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix

Sandbox Permissions Not Strictly Wider Justification Empty Fix

Fix no-op upgrade errors for the sandbox_permissions and justification fields in pwsh/bash/fs/dsh-sandbox. Prevent rejection when the session is already in danger-full-access mode and the model provides an empty justification or reasserts the same mode.

↓ 0★ 0
Updated 8/31/2026
← Previous1…5556575859…61Next →
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in