Skip to content
dsh.fish

Browse

88 results

Bundle

dsh-workflow-isolate

QuickJS/WASM-isolated WorkflowEngine for running model-written DeepSeek Harness orchestration with bounded resource controls.

Linxiushen2
Bundle

dsh-auto-approval-plugin

A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.

StyxNether2
Bundle

dsh-guardwall

Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.

iiiweiii2
Skill

skill-security-guard

Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.

rrrrrredy2
Bundle

dsh-instruction-audit

Privacy-minimal provenance receipts for DeepSeek Harness workspace instructions

10523263111
Bundle

dsh-seatbelt-sandbox

Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required

drscrewdriver1
Bundle

dsh-prompt-shield

A runtime prompt-injection shield for DeepSeek Harness tool results.

a1swg1159-pixel1
Bundle

dsh-auto-guard

DSH Auto Guard: a Claude Code Auto Mode-like command approval mechanism that adds an LLM safety net on top of full access, with rules, caches, file tracker, and sensitive path gates.

Ayle56781
Bundle

dsh-tiered-approval

Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.

Elaina-real1
Bundle

dsh-plugin-observatory

Static DSH plugin compatibility audit before installation, plus bounded Loader lifecycle observation

CMSKL1
Bundle

dsh-airbag

Non-intrusive safety belt for DeepSeek Harness: blocks API keys pasted to the agent, blocks secret writes, tracks leak events, and offers a workspace health scan. 非侵入式安全护栏:拦截粘贴给 Agent 的 API 密钥、写入拦截、泄露追踪与工作区安全体检。

uwu90391
Bundle

@deepseek-ai/dsh-sandbox-micro

DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction

omdsh-dev1
Bundle

review-gate

A DeepSeek Harness (dsh) bundle that turns code review into a hard gate: deterministic severity rules, LLM-assisted findings, team approval quorum and a compliance audit trail.

JohnXu227861
Bundle

dsh-pentest-bugtrace

BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.

elliseang0000-lang1
Bundle

dsh-ccs-security

Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.

DSHCorrectover1
Bundle

dsh-provenance

Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.

Darren-Tang1
Bundle

dsh-mcp-security

Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.

z-y-q1
Bundle

dsh-disk-audit

Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.

zoahdev1
Bundle

dsh-plugin-auth-guard

Enterprise-grade Zero-Trust Authentication, LAN/Public Access Control & Security Gate Plugin for DeepSeek Harness (DSH).

lijx1221
Bundle

windows-bash

Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.

bainianlaoyao1
Bundle

dsh-bailinghub

Let a local DeepSeek Harness Agent use BailingHub to query data, update records, and run permitted actions in your online store, SaaS, or other admin system.

bailinghub1
Bundle

dsh-headless-json

Structured, machine-readable CI output for DeepSeek Harness (dsh): session event capture with JSON/NDJSON reports, JUnit XML, semantic exit codes, artifact collection and privacy redaction. Ships as a dsh profile bundle and a standalone CLI.

JohnXu227861
Bundle

dsh-hermes-security-audit

Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1

axelfreeman1