@xiamu-ssr/dsh-wind-aifin
确保凭据安全的 Wind AIFin MCP 和 Alice 与 DeepSeek Harness 的集成。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Xiamu-ssr/snowmountain-market#0a05c84b8d631d3672e1857dd807691eee0150d0Wind Aifin 以 @xiamu-ssr/dsh-wind-aifin 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Credential-safe Wind AIFin integration for DeepSeek Harness (DSH).
@deepseek-ai/dsh-mcp-client and exposed as native tools:
wind_stock, wind_fund, wind_index, wind_bond, wind_docs,
wind_economic, and wind_analytics.wind_alice invokes Wind Alice's professional financial-analysis workflows,
including fact checking, company one-pagers, earnings reviews, screening,
macro, bond, credit, fund, market-sizing, and comparable-company analysis.WIND_API_KEY as a DSH credential reference.DSH intentionally removes credential-shaped environment variables from
model-visible shell processes. Putting WIND_API_KEY in the host environment
therefore does not make the official Wind CLI available to an Agent's Bash
tool—and copying the key into the workspace would defeat the boundary.
This plugin resolves the credential inside the trusted host process. Wind MCP traffic passes through a random, loopback-only adapter that injects the Bearer token and then delegates protocol handling and tool registration to DSH's MCP client. Alice resolves the same credential per operation. The key is never returned to the model, stored in plugin configuration, or exposed to ordinary Bash commands.
DSH 0.1.0-rc.8 or newer is recommended.
dsh plugin --profile web add github:Xiamu-ssr/snowmountain-market
Restart the profile after installation. Install into another profile by
replacing web with that profile's name.
Create a Wind AIFin API key at the
Wind developer portal, then
store it as the DSH credential reference WIND_API_KEY using the Credentials
page. A deployment may instead provide WIND_API_KEY in the trusted DSH launch
environment.
Do not put the key in a workspace file, Skill file, prompt, MCP headers in
cordis.patch.yml, or a model-visible shell profile.
MCP tools follow DSH's standard qualified naming convention:
| Domain | Prefix |
|---|---|
| Stocks | mcp__wind_stock__ |
| Funds and ETFs | mcp__wind_fund__ |
| Indices and sectors | mcp__wind_index__ |
| Bonds | mcp__wind_bond__ |
| Filings and financial news | mcp__wind_docs__ |
| Macro and industry indicators | mcp__wind_economic__ |
| Cross-asset analytics | mcp__wind_analytics__ |
Wind Alice is exposed as wind_alice and accepts a prompt plus an optional
professional workflow name.
127.0.0.1 and uses an unguessable
per-process route.In version 0.1.0, Alice's final textual/data artifact is returned to the
Agent; Alice-generated downloadable files are not automatically copied into the
DSH workspace.
npm install
npm test
npm pack --dry-run
See SECURITY.md for vulnerability reporting and the trust boundary. This is a community adapter and is not an official Wind product.