Bundle
managed-agents
Local-first, self-hosted AI agent runtime with Claude Managed Agents-style APIs, sandboxed sessions, memory, tools, audit, replay, and a local Console.
sandbaseai641
Browse
38 results
Bundle
@dsh-external/dsh-redteam-model
DSH redteam security research modes and runtime plugins, managed from one settings page: deploy the nine presets, install, update and uninstall the seventeen runtime plugins for the current profile.
SeaOf0397
Bundle
@mingozhou/dsh-replay
Session replay, fork-tree, audit & compare visualization for DeepSeek Harness — time machine for your agent sessions
MingoZhou12
Bundle
dsh-plugin-audit
Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins
jkrandom-sudo5
Bundle
dsh-correctover
Correctover runtime security for DeepSeek Harness (DSH): CCS 7-dimension verification, command-injection/SSRF/credential-exfil blocking, Ed25519 receipts, audit-first. Install with `dsh plugin add dsh-correctover`.
Correctover45
Bundle
github-explore
Discovery + management wrappers around the gh CLI for AI coding agents. Ships as a standard agent skill, an Agent Plugins 1.0 plugin (plugin.json + skills/), and a dsh plugin (dsh.bundle.patch registers the skill at runtime).
Fectivnfy1123574
Bundle
@jieai/dsh-plugin-vet
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
wulun8113
Bundle
dsh-plugin-observatory
Static DSH plugin compatibility audit before installation, plus bounded Loader lifecycle observation
CMSKL2
Bundle
dsh-disk-audit
Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.
zoahdev2
Skill
skill-security-guard
Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.
rrrrrredy2
Bundle
dsh-blocker-notify
Real-time attention alerts for DeepSeek Harness: a global banner plus flashing workspace entries when the agent is blocked (approval request / sandbox denial), with an audible chime and OS-level notifications for new blockers.
Frost-Reed2
Bundle
dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
zoahdev2
Bundle
dsh-guardwall
Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.
iiiweiii2
Bundle
dsh-plugin-security-review
Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.
ateen182
Bundle
dsh-prompt-shield
A runtime prompt-injection shield for DeepSeek Harness tool results.
a1swg1159-pixel1
Bundle
dsh-plugin-sentinel
DSH 插件安检机 — install-time static security auditor for DeepSeek Harness plugin bundles. Zero dependencies, zero install scripts, zero build step.
BotonJ1
Bundle
dsh-ccs-security
Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.
DSHCorrectover1
Bundle
dsh-mcp-security
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
z-y-q1
Bundle
dsh-config-watch
Config drift detective for DSH: snapshots profile/plugin state on startup, records diffs, exposes a read-only history tool. Zero runtime deps, no custom events.
Equinox73791
Bundle
dsh-qapproval-timeout
Approval timeout for DeepSeek Harness: when a sandbox/escalation approval is not answered within a configurable period, the request is automatically rejected instead of waiting forever.
21286272671
Bundle
dsh-security-guard
Static and runtime security guard for the DeepSeek Harness: scans plugins and workspaces for malicious code, context injection and token waste (block/warn/clean), intercepts dangerous runtime tool calls and prompt steps, and exposes /scan, plugin_scan, the scan web panel and a user-managed allowlist. Fully static analysis — never executes scanned code.
bigclawd1
Bundle
windows-bash
Make Git Bash the only terminal tool for DeepSeek Harness on Windows: enables the bash executor and tool on win32, disables PowerShell (pwsh) everywhere, ships standard-bash/code-bash/cordis-bash agent presets, and sets the sandbox/approval defaults Git Bash's cygwin runtime needs.
bainianlaoyao1
Bundle
dsh-time-travel
DeepSeek Harness (DSH) 插件：可逆时间旅行与审计。为工具副作用建立「前状态快照 → 执行 → 补偿」链路，提供 rewindTo(turnId) 按轮次倒序恢复工作区，内置审计规则引擎。
helibeiqi
Bundle
dsh-unplug
Plug/unplug any DeepSeek Harness plugin cleanly: list every mounted layer, disable/enable without deleting, remove bundles + patch rows + dependencies in one pass, and audit for orphaned/dangling plugin state. Zero runtime dependencies; read-only by defau