Bundle
dsh-llmasking
Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.
yolorouter1
Browse
172 results
Bundle
dsh-plugin-gate
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources for malicious install scripts, credential theft, obfuscation, persistence and network callbacks before 'dsh plugin add', plus 12 destructive-command patterns and workspace-boundary checks against accidental deletion. | 安装安全闸门与数据保护闸：60 条静态签名规则（31 高危/24 中危/5 低危）扫描插件恶意行为、持久化与外传，12 种危险命令模式与边界检查拦截误删。
8636833481
Bundle
dsh-secret-guard
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
JohnXu227861
Bundle
dsh-capcheck
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
heming-gmh1
Bundle
@agentvalet/dsh
Governed platform access for DeepSeek Harness — no credential on the machine
AgentValet1
Bundle
dsh-xray-plugin
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
unStone1
Bundle
@ddtcorex/dsh-maestro-guard
Maestro Guard — waterfall tools/pre-execute approval + blocklist stub (Phase A scaffold)
ddtcorex1
Bundle
dsh-ccs-security
Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.
DSHCorrectover1
Bundle
dsh-security-scan
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
ben7am1n1
Bundle
dsh-plugin-code-review
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
YYTbit1
Bundle
dsh-capsule
OS-isolated capability capsules for third-party DeepSeek Harness plugins
2-c-q1
Bundle
dsh-auto-classifier
Autonomous (auto) mode permission classifier for DeepSeek Harness: a Claude-Code-auto-mode-like classifier over tools/pre-execute and approval/request, a selectable 'auto' permission preset, LLM semantic judge, git checkpointing, agent discipline guidance, and a web control page in Settings → Plugins.
PAKIKNOWLEDGE1
Bundle
dsh-provenance
Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.
Darren-Tang1
Bundle
dsh-depguard
DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".
DeLightor1
Bundle
@tyler9061/dsh-auth
dsh web 认证插件：登录保护、空闲自动登出、认证有效期、设置界面、`dsh web p` 重置密码
optttt1
Bundle
dsh-cloud-gateway
Login wall and public gateway for DeepSeek Harness cloud deploys.
MrLukezy1
Bundle
dsh-code-scan
DeepSeek Harness 插件：为 Agent 增加 code_scan 工具，用 semgrep 扫描代码并输出按文件/行号/严重级别分组的中文报告
xiaohuang-zaianlian1
Bundle
dsh-rgate
Remote access login gate for the DeepSeek Harness Web UI: a password wall in front of non-loopback access, session cookies, an injected browser-side gate, and a Remote Access settings section. The /api RPC surface is authenticated by dsh itself.
raomaiping-hash1
Bundle
dsh-vulnsec-bridge
VulnClaw + DeepSec 桥接插件：AI 安全 CLI（授权渗透测试 / Shield 代码审计）→ dsh 工具 + 设置页安全工具台 UI
MariNanari1
Bundle
dsh-llm-injection-filter
DSH LLM response-stream injection/pollution filter: hard-block rare Unicode scripts (Track A) and score-based disposal of control chars / protocol markers / script mixing / spam keywords (Track B) on the llm/stream waterfall.
XiaoYuOvO1
Bundle
dsh-secure-remote
Security and connection-stability overlay for DeepSeek Harness SSH workspaces
startGalway1
Bundle
dsh-login
Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.
ravenli0591
Bundle
dsh-dep-vuln-scan
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
988hj7tczd-oss1
Bundle
dsh-mcp-security
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
z-y-q1