Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 451 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-team-cost1569126506-sudo/dsh-team-costCatalog AnalyzedTeam cost captain: meters every model call (subagents included), attributes each call to a member by workspace rules, prices it with the built-in DeepSeek 2026-09 catalog (peak/off-peak, CNY/USD) or user overrides, and appends it to a local JSONL ledger. Adds hot-reloadable member budgets, 80%/100% webhook alerts, optional over-budget enforcement, a team_cost_report tool with CSV export, and a settings-page team dashboard served over a Typert RPC service.Usage & BillingGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-guardwalliiiweiii/dsh-guardwallCatalog AnalyzedVets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-egress-guardtancheng33/dsh-egress-guardCatalog AnalyzedRuntime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-dsbalflyingfishzxf/dsh-dsbalCatalog AnalyzedShows the DeepSeek API account balance in the DSH Web sidebar with 30s auto-refresh, click-to-refresh, hover details, and low-balance threshold warnings.Usage & BillingGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-hub#packages/dsh-web-file-preview@wingsky-1/dsh-web-file-previewCatalog AnalyzedTurns "open with the default application" file requests inside the conversation into the built-in right-Sidebar preview: the browser intercepts `POST /api/present.open` and calls `ctx.sidebarRight.openResource` with the official resource address grammar, so nothing is sent over the network and no renderer ships with the plugin; "show in file manager" is deliberately left untouched.Tools & CapabilitiesnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.4dsh-riskproofdsh-riskproofCatalog AnalyzedLive security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0dsh-write-gatedsh-write-gateCatalog AnalyzedCommitment write-gate: operator-authored rules enforced before a tool call runs — a deterministic guard tier plus an LLM-judge tier, fail-closed by default, every block written to a contradictions log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-risk-guarddsh-risk-guardCatalog AnalyzedZero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.0dsh-quota-paneldsh-quota-panelCatalog AnalyzedBottom-right quota capsule that auto-discovers every configured provider (DeepSeek, OpenRouter, SiliconFlow, GLM, one-api/new-api, coding plans) and shows balance or rolling 5-hour and weekly usage, with per-provider visibility, alert thresholds and proxy support; also queries Volcengine Ark Agent Plan / Coding Plan usage via AK/SK-signed OpenAPI, and ChatGPT Plus/Pro subscription usage via in-plugin device-code login or the Codex CLI auth file.Usage & BillingnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.9.1dsh-tradingmaddogfinance/dsh-tradingCatalog AnalyzedResearch-only trading workbench bundle: typed market-data provider seam with a CSV reference provider, multi-timeframe indicator regime snapshot and OHLCV tools, interactive chart cards in dsh web with provenance-gated model annotations, and a risk-guard denying execution-shaped tool calls at tools/pre-execute.Tools & CapabilitiesGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-security-guarddsh-security-guardCatalog AnalyzedStatic and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web panel, and allowlist.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact0.1.0-rc.7weiwen-law-dshShaky77/weiwen-law-dshCatalog AnalyzedWhite-box causal guardrail for dsh: every tool call is adjudicated before execution along a deterministic causal logic chain — blocks destructive and credential-file operations, escalates repeated boundary violations, cuts faulting links until verified-fixed, and gives risk verdicts on un-auditable execution; runs fully local with zero API cost, plus 6 white-box self-check tools.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedybkk-AIOS01men/ybkk-AIOSCatalog AnalyzedEnterprise AI resource platform as a 22-plugin cordis bundle: org/account/role IAM, OIDC provider and App SSO, MCP server management with the platform itself exposed as an MCP server, NAS asset storage, skill hub, agent and app registries, SaaS connector management, enterprise portal data channel, department agent workbench panel, DingTalk group bridging for message and approval push, one-click remote dsh enrollment with tool proxying, usage metering, wallet billing, model gateway, audit with alerts, self-update, and a reviewed third-party plugin marketplace — 70+ ops tools become callable by the dsh agent.Plugin Markets & ManagersGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-anchor@yeastcloud/dsh-anchorCatalog AnalyzedSession instruction anchor for DeepSeek Harness: the first step of a new session injects a freely composed instruction block as a plugin-sourced message, and it is re-anchored after a summarizing compaction, every N turns, or when metered context pressure crosses a threshold. An /anchor command re-anchors on demand without a model call; a settings page manages the paged preset library, injection order, re-anchor source and character limits.Sessions & MessagesnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact0.11.0dsh-grafana-querydsh-grafana-queryCatalog AnalyzedRead-only Grafana tools that query metrics through the data source proxy: instance health, data source listing, instant and range PromQL queries, current alert state, and provisioned alert rules. Range queries downsample to a point budget; an explicitly supplied step that would exceed it is rejected rather than silently changed, so the model never receives data at a resolution it did not ask for.Tools & CapabilitiesnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-plugins#dsh-guarddsh-plugins-guardCatalog AnalyzedSecurity and governance for dsh: rule-based tool denial, full tool-call audit trail, and governance reports.Tools & CapabilitiesnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.0.1dsh-plugin-security-reviewateen18/dsh-plugin-security-reviewCatalog AnalyzedPre-install static security review and runtime guard for dsh plugins: deobfuscation decoding, supply-chain checks, web one-click review/install/uninstall, and optional runtime tool-call guard.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-guardiancdxiaodong/dsh-guardianCatalog AnalyzedAgent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation