Bundle
dsh-llmasking
Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.
yolorouter1
Browse
49 results
Bundle
dsh-qbetter-config
Better config hub for DeepSeek Harness: one page showing sandbox mode, default model, workspaces, settings namespaces and copy-ready composition templates.
21286272671
Bundle
dsh-strip-sandbox-permissions
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
Sharl2101
Bundle
@bryan-cmf/dsh-infra-observability
DSH-Plugin: structural observability layer — real tool/skill usage recording (tools/result), skill-catalog audit, and a watchdog with health/error events. No model self-reporting.
Bryan-cmf1
Bundle
dsh-model-redactor
Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams
zerodegress1
Bundle
dsh-credential-handoff
Conversation-local credential handoff that writes through the DSH credential service without returning the secret to model context.
xiaohj2331
Bundle
dsh-security-audit
Read-only security & compliance toolkit for DeepSeek Harness: prompt-injection detection (rule engine with a pluggable model classifier), Chinese-PII redaction, and a local configuration security audit that emits redacted, reproducible risk reports.
PensiveFei
Bundle
@fonlan/dsh-apply-patch
DSH plugin: a codex-style apply_patch tool (*** Begin Patch / *** Update File / *** Add File / *** Delete File) injected into the model toolset through DSH's built-in sandbox, with a settings card to choose injection scope (off / GPT models only / all models).
fonlan
Bundle
correctover
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Guigui Wang
Bundle
dsh-path-anonymizer
DSH plugin: anonymize workspace-external file paths before model requests with user confirmation
yzhangjy
Bundle
dsh-plugin-judge
Plugin value auditor for DeepSeek Harness: judge a plugin before install and audit installed ones — heuristic scan + LLM judge, with model-switch re-audit reminders. · DSH 插件价值裁判：装前判断值不值得装，装后审计是否还该留，模型切换时提醒复核。
pengxuding
Bundle
dsh-canary
DeepSeek Harness plugin: plants a canary string in model-visible context and denies any tool argument or outbound URL that echoes it back
jwilson411
Bundle
dsh-egress-guard
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
LKRCharon
Bundle
winada-dsh-telegram-bridge
A DSH profile bundle that ships the Telegram ↔ DeepSeek Harness bridge as a model-callable install tool. Requires the session sandbox policy to allow subprocess TLS to api.telegram.org (danger-full-access in the default sandbox policy).
winada82
Bundle
@jiesou/dsh-timeout-auto-reject
Auto-reject unanswered permission requests with a model-visible timeout notice
jiesou
Bundle
dsh-consult
Cross-provider second-opinion advisor for dsh. v2 (simple-extensible-configurable-stable): DEFAULT ROUTE = official DeepSeek (deepseek-official/deepseek-v4-flash); model param optional everywhere; one-page visual settings panel; honest audit trail. Scout mode = official + live web_search. OpenAI-compatible endpoint + consult tool + DSH_MODEL rerouting.
1339190177
Bundle
dsh-tui-secret-guard
Blocks high-confidence secrets before dsh-TUI sends them to a model.
icyaaaww
Bundle
dsh-image-governor
Session image payload governor for DeepSeek Harness: audit which images a session still ships, pick the ones to keep, and move the rest out of the model context.
2432450223
Bundle
@guojin-ai/dsh-plugin-guard
Plugin security inspector for the DeepSeek Harness web GUI: statically audits installed plugins (dangerous API patterns + dependency review), layers an AI (default-model) online audit, and renders a green/yellow/red report panel.
Guojin0826
Bundle
@perrylink/dsh-cert-mcp
Read-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-dimension evidence for DeepSeek Harness plugins.
PerryLink
Bundle
dsh-review-squad
并行多角色代码评审小队：/review 一条命令派出安全/正确性/测试/风格四名只读评审员子代理（每人可单独指定模型与思考强度），汇总为按严重度分组的结构化报告。Parallel multi-role code review squad: /review dispatches security/correctness/tests/style reviewer subagents (each on its own model) and aggregates one severity-grouped report.
luomeii
Bundle
dsh-model-compat-guard
DSH compatibility guard: repairs compaction limits, fail-safe sandbox escalation, and missing tool descriptions for third-party models; capability lookups are cached and the deprecated prompt-injection path is off by default.
782042369
Bundle
dsh-model-probe
DeepSeek Harness plugin to audit and correct llm-pi-ai model capability declarations by probing the endpoint itself: out-of-range maxTokens, contextWindow, reasoning levels, image input.
xiaomao49
Bundle
dsh-security
DSH security audit mode: threat modeling, vulnerability scanning, and triage pipeline with Web visualization.
kiwings