Skip to content
dsh.fish

Browse

108 results

Bundle

dsh-readonly-security-audit

【实验性】只读安全审计模式插件（自动只读、工具级白名单、强制交付选择）· EXPERIMENTAL plugin for the read-only security audit mode (auto read-only, tool allowlist gate, mandatory delivery choice)；日常使用推荐 dsh-presets 仓库的原生纯预设版。

my-dsh-plugin1
Bundle

dsh-security-guard

Static and runtime security guard for the DeepSeek Harness: scans plugins and workspaces for malicious code, context injection and token waste (block/warn/clean), intercepts dangerous runtime tool calls and prompt steps, and exposes /scan, plugin_scan, the scan web panel and a user-managed allowlist. Fully static analysis — never executes scanned code.

bigclawd1
Bundle

dsh-auto-approve

Auto-approve mode for DeepSeek Harness: auto-grants approval requests (sandbox escalations, or everything) and adds an "自动审批" (auto-approve) option to the permission selector. Install with `dsh plugin --profile <name> add <path-or-package>`.

Hanihahaha1
Bundle

windows-bash

Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.

bainianlaoyao1
Bundle

dsh-model-redactor

Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams

zerodegress1
Bundle

dsh-failure-lens

Deterministic DeepSeek Harness Web client plugin that explains the Windows-sandbox `spawn EPERM` failure as a distinct Conversation Node.

ArmyWas1
Bundle

agent-discipline

Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.

FranklinZaneDurant1
Bundle

dsh-vault

Persistent credential vault for DeepSeek Harness (DSH): manage API tokens, server logins, and site credentials in one settings panel. Secrets live in the DSH credential store and are consumed by the model via vault_status / vault_get tools.

njjpro1
Bundle

dsh-secret-scrub

Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests

jkt-check1
Bundle

dsh-release-guardian

Local, deterministic release risk checks for DeepSeek Harness.

XiaoSong1223
Bundle

dsh-security-audit

Read-only security & compliance toolkit for DeepSeek Harness: prompt-injection detection (rule engine with a pluggable model classifier), Chinese-PII redaction, and a local configuration security audit that emits redacted, reproducible risk reports.

PensiveFei
Bundle

dsh-tool-docx

Model-facing MS Word (.docx) tools: read documents as Markdown or structured blocks, create documents from Markdown, and edit documents round-trip; ships binary fs providers (writeBytes, incl. a sandbox-preserving one) for hosts without it

BroBFG
Bundle

@deepseek-ai/dsh-escalation-tolerance

Tolerate redundant sandbox_permissions requests: a tool call asking to escalate to a mode that is not strictly wider than the session's standing mode runs as-is at the standing mode instead of failing with "not strictly wider". Genuine escalations still route through the approval flow.

ericleoo
Bundle

@fonlan/dsh-apply-patch

DSH plugin: a codex-style apply_patch tool (*** Begin Patch / *** Update File / *** Add File / *** Delete File) injected into the model toolset through DSH's built-in sandbox, with a settings card to choose injection scope (off / GPT models only / all models).

fonlan
Bundle

correctover

AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.

Guigui Wang
Bundle

dsh-pentest-bugtrace

BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.

elliseang0000-lang
Bundle

dsh-path-anonymizer

DSH plugin: anonymize workspace-external file paths before model requests with user confirmation

yzhangjy
Bundle

dsh-plan-preset

Plan 模式心智映射:read-only 权限显示为 "Plan",审批策略 never(拒绝即最终,不准申请权限),文件只读 + 网络搜索可用。

23aisfvb
Bundle

dsh-plugin-judge

Plugin value auditor for DeepSeek Harness: judge a plugin before install and audit installed ones — heuristic scan + LLM judge, with model-switch re-audit reminders. · DSH 插件价值裁判：装前判断值不值得装，装后审计是否还该留，模型切换时提醒复核。

pengxuding
Bundle

dsh-lan-gate

Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁

maxesisnclaw
Bundle

dsh-netguard

Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records

CharlotteN7