Bundle
dsh-worlds
Run the DeepSeek Harness agent's filesystem, bash and PTY terminals inside a Docker container, so execution state survives a harness restart.
frozo-ai3
Browse
149 results
Bundle
dsh-plugin-diraud
Audit the DeepSeek Harness plugin list by origin (official vs self-installed): a /plugin-audit command plus a Source tab in Web Settings
tttwh3
Bundle
@jieai/dsh-plugin-vet
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
wulun8113
Bundle
dsh-gpt-perm-strip
DSH plugin: strip GPT-family tool-call sandbox_permissions that are not strictly wider than the current session.
FengLingYaaa2
Bundle
@jyleaves/dsh-win-bash-fix
Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, plus the minimal-win collective-thinking preset (we/let's reasoning chain).
Jyleaves2
Bundle
dsh-secret-paste
DeepSeek Harness plugin: auto-detect secrets pasted into the composer, store them in the official credentials seam, and send [secret:REF] placeholders to the model instead of the value.
zhujiaqi2
Bundle
@deepseek-ai/dsh-sandbox-nono
nono (Landlock/Seatbelt) backend for the DeepSeek Harness sandbox seam with a vendored fail-closed executor
omdsh-dev2
Bundle
dsh-tool-underseal
Model-facing typed tools wrapping the frozen, reviewed underseal adapter for the DeepSeek Harness
Hyperionjust2
Bundle
@duke-dsh-plugins/dsh-agent-approval
Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval subagent judges every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.
MoonlitDropOfBlood2
Bundle
dsh-auto-approval-plugin
A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.
StyxNether2
Bundle
dsh-blocker-notify
Real-time attention alerts for DeepSeek Harness: a global banner plus flashing workspace entries when the agent is blocked (approval request / sandbox denial), with an audible chime and OS-level notifications for new blockers.
Frost-Reed2
Bundle
dsh-python-tempfile-shim
DeepSeek Harness plugin (temporary, pre-upstream-fix): automatically injects a CPython tempfile shim (PYTHONPATH -> sitecustomize) into every confined shell command on the Windows sandbox, so python/pytest tempfile use works with zero extra tools, zero model-context overhead, and zero escalation.
AngelosZou2
Bundle
dsh-plugin-finder
Find and audit DeepSeek Harness (DSH) plugins inside the agent — live `dsh-plugin` topic search + source audit with trial-to-production install plans.
meme-dog2
Bundle
dsh-multi-model-provider
Register models, assist with portraits, and select the Agent model from a secret-free catalog for DeepSeek Harness.
AlexKaiqi2
Bundle
dsh-seatbelt-sandbox
Seatbelt (libsandbox) sandbox provider for the DeepSeek Harness sandbox seam on macOS: a cordis plugin that replaces @deepseek-ai/dsh-sandbox-local's seatbelt rung via a prebuilt seatbelt-run launcher — no dsh source changes, no PR required
drscrewdriver1
Bundle
dsh-workspace-only-plugin
Workspace Only switch for DeepSeek Harness: confine file access of every sandbox mode to the session workspace
CsBpRd1
Bundle
@xiaoke8698/dsh-memory-forget
Forgetting engine for AI agents — memory TTL, decay, eviction, audit. The opposite of memory programming.
XIAOke86981
Bundle
dsh-tiered-approval
Tiered auto-review for DeepSeek Harness (DSH): static-rule safety net + LLM reviewer + human fallback. Auto-approve safe actions, auto-deny irreversible ones, ask a human for the rest. PURE VIBE CODING - not audited, use at your own risk.
Elaina-real1
Bundle
dsh-prolong-memory
PRO-LONG-style programmatic memory for DeepSeek Harness: appends every session event to a per-workspace log.txt that the agent retrieves with grep/python. Built-in write probe, /prolong status command and permission-deny counter.
ycr401
Bundle
dsh-mcpguard
Mingleng mcpguard for DeepSeek Harness 鈥?the first security plugin for DSH. Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell and credential leaks.
ChenLaoshiYF1
Bundle
dsh-airbag
Non-intrusive safety belt for DeepSeek Harness: blocks API keys pasted to the agent, blocks secret writes, tracks leak events, and offers a workspace health scan. 非侵入式安全护栏：拦截粘贴给 Agent 的 API 密钥、写入拦截、泄露追踪与工作区安全体检。
uwu90391
Bundle
dsh-pentest-bugtrace
BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.
elliseang0000-lang1
Bundle
@deepseek-ai/dsh-exit-bash
One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched
123625661
Bundle
dsh-llm-injection-filter
DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.
XiaoYuOvO1