dsh-loopback-bridge
Unlock DSH Web settings and credentials when you open the UI from a LAN IP or public hostname
85 results
Unlock DSH Web settings and credentials when you open the UI from a LAN IP or public hostname
DeepSeek Harness plugin for remote access: a token-gated reverse proxy keeps settings, credentials, and file access working over public tunnels and on other devices instead of returning 403. Per-device sessions.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Registers a kimi-coding web search provider (api.kimi.com/coding/v1/search) into ctx.web, zero-config via the local kimi-coding credentials.
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
Feishu (Lark) bot bridge for DeepSeek Harness: two-way chat with your agent over the Feishu long connection, with a settings page for bot credentials and workspace routing. · 飞书机器人 ↔ DeepSeek Harness 双向聊天桥:飞书消息直达 DSH 智能体,回复自动回到飞书;设置页可换机器人凭证、切换工作区。
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.
Governed platform access for DeepSeek Harness — no credential on the machine
Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff), structured reports (gate_report), 12 destructive-command patterns and workspace-boundary checks.
Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.
Local tool-call failsafe and DWGR-8 personal governance proxy gate for DSH: blocks high-risk shell patterns, credential leaks, and enforces declarative param-level boundaries with hash-linked JSONL audit logs and optional Gateway.
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
DSH plugin that replaces the official Models settings page: provider management, per-model reasoning effort, retry overrides, drag reorder, credential status, upstream model sync, and fixed model deletion
DeepSeek Harness (dsh) bundle plugin: vision_analyze tool lets text-only LLM agents read images via SenseNova VLM, with Schemastery config and single-source credentials
OpenAI Codex (ChatGPT Plus/Pro subscription) provider for DeepSeek Harness with DSH Web OAuth, device code, and shared Codex CLI credentials
DSH host tool bundle: manage glab / gh authorization and SSH keys
Multiple API keys per provider for DeepSeek Harness: keep a pool of keys with notes, switch the active key right from Settings → API 密钥, and every switch really takes effect on the next model call.
Offline content-addressed proof for supplied credential-retirement closure
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
Native Gmail integration for the DeepSeek Harness: Google OAuth 2.0 (PKCE) over the DSH credential store, native gmail_* tools, approval-gated send and label operations, the /gmail command, and a cache-safe model context section.
Show Volcengine Ark Coding Plan / Agent Plan quota in the DSH Web GUI: a side float panel + settings page, persistent credentials on disk, and periodic auto-refresh.