dsh-win-toolkit
适用于 DeepSeek Harness (dsh) 的 Windows 原生功能包：剪贴板、通知、hosts 文件、网络诊断等——为 Windows 用户提供由 PowerShell 支持的安全工具。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Edge-Echo/dsh-win-toolkit#2373ff03ee7bd9e076b5e29e91864c89be3a9cfd
Win Toolkit 以 dsh-win-toolkit 发布，当前版本为 0.1.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Part of the dsh-toolkit family: dsh-mcp-bridge · dsh-win-toolkit · dsh-netassist · dsh-driftwatch
Windows-native capability pack for DeepSeek Harness (dsh).
Gives your dsh agent real Windows superpowers — clipboard, system notifications, hosts file inspection, and network diagnostics — backed by safe, parameterized PowerShell. No extra installs, no admin rights required for the current toolset.
中文文档见 README.zh.md。
dsh-win-toolkit doctor
```n
It verifies the platform, PowerShell, execution policy, clipboard access, WScript.Shell COM and hosts readability — everything the tools rely on.
## Requirements
| | |
|---|---|
| OS | **Windows 10 or 11** — the tools call `powershell.exe` |
| PowerShell | **5.1+** (the default on Windows 10/11); PowerShell 7 works as well but is not required |
| Privileges | none for the current tools — everything is read-only except clipboard write and the notification popup |
| Node | 22+ (for the plugin host) |
Run `dsh-win-toolkit doctor` to verify all of the above on your machine before blaming the plugin.
## Tools
| Tool | What it does |
|---|---|
| `win_clipboard_read` | Read the current clipboard text |
| `win_clipboard_write` | Write text to the clipboard |
| `win_notify` | Show a system popup notification (auto-closes) |
| `win_hosts_list` | Read the Windows hosts file |
| `win_netdiag` | DNS resolution + TCP port test for any host |
## Install
```sh
dsh plugin --profile web add dsh-win-toolkit
dsh web # restart
Then just ask your agent, e.g.:
win_netdiagwin_clipboard_writewin_notifyEvery tool runs a short PowerShell snippet through powershell.exe -NoProfile -NonInteractive. All user input crosses the script boundary as Base64 — never string-interpolated — so argument injection is structurally impossible.
psTimeoutMs (default 20000) — per-call PowerShell timeout, settable in your profile's cordis.patch.yml under the win-toolkit entry.win_hosts_edit (admin-gated hosts entries), win_env, win_service, win_window, win_task, win_netdiag deep mode (proxy check, DNS server, traceroute).-NoProfile -NonInteractive but policy still applies. Check Get-ExecutionPolicy; the plugin does not require RemoteSigned.src/index.ts.