DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Code Scan — DSH Plugin for DeepSeek Harness
← Plugins

dsh-code-scan

Code Scan

DeepSeek Harness plugin: Adds a code_scan tool to the Agent, uses semgrep to scan code, and outputs a Chinese report grouped by file, line number, and severity level

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add dsh-code-scan@0.1.0
READMECompatibilityVersions

Compatibility and provenance

Code Scan is published as dsh-code-scan and currently resolves to version 0.1.0. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
any
Release source
npm
Registry updated
9/20/2026

Versions

0.1.0stable
8/17/2026

Related plugins

Loading related plugins…

Latest
0.1.0
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
10.7 kB
Files
6
Surface
any
License
MIT
Source
npm
GitHub
★ 1
Weekly downloads
40
Last push
8/17/2026
View source ↗Project homepage ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in

README

dsh-code-scan

给 DeepSeek Harness（DSH）的 Agent 增加 code_scan 工具：对指定目录运行 semgrep 代码安全扫描，输出按文件、行号、严重级别分组的中文 Markdown 报告。

功能

  • 单个工具 code_scan，传入目录路径即可扫描。
  • 报告按文件分组，含行号和严重级别（ERROR / WARNING / INFO）。
  • 结果按严重级别优先排序，默认最多显示 200 条，避免撑爆 Agent 上下文。
  • 未安装 semgrep 时返回友好的中文提示，不会崩溃。

安装前提

本机需安装 semgrep，并保证 semgrep 命令在 PATH 上。Windows 建议用独立虚拟环境安装，避免污染其他 Python 环境：

python -m venv C:\Users\<你>\semgrep-venv
C:\Users\<你>\semgrep-venv\Scripts\pip install semgrep
# 把 C:\Users\<你>\semgrep-venv\Scripts 加入用户 PATH

安装插件

dsh plugin --profile web add dsh-code-scan

安装完成后重启 dsh web 生效。

使用

在 DSH 对话中让 Agent 扫描某个目录，例如：

用 code_scan 工具扫描 C:\path\to\your\project

报告示例：

# semgrep 扫描报告

- 扫描目录：`C:\...\demo`
- 发现问题：共 4 处（ERROR 2 / WARNING 2 / INFO 0）

## C:\...\app.py（2 处）

- [ERROR] 第 8 行 · 规则 `...sqlalchemy-execute-raw-query`：Avoiding SQL string concatenation...
- [WARNING] 第 18 行 · 规则 `...eval-detected`：Detected the use of eval()...

工作原理

  1. 调用 semgrep scan --json <目录>。
  2. 解析 JSON，提取文件、行号、严重级别、规则 id、描述。
  3. 按严重级别优先排序，并截断到上限条数。
  4. 生成中文 Markdown 报告返回给 Agent。

License

MIT

Related plugins

More verified plugins in developer-tools.

Web App@deepseek-ai/dsh-web-appThe dsh browser-surface bundle: the web patch layer over dsh-base plus the runtime glue plugin (frontend dist serving, web-surface prompt, bash runtime variables, URL line)Sdk Minimal@deepseek-ai/dsh-sdk-minimalThe standalone minimal SDK profile bundle: JSON-RPC, one DeepSeek adapter, persistent shell, and JSONL sessionsSdk App@deepseek-ai/dsh-sdk-appThe dsh SDK profile bundle: stdio JSON-RPC serving and process lifecycle over dsh-baseSubagent Codex@deepseek-ai/dsh-subagent-codexOne-shot Codex subagent provider over the official app-server protocol