Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1052 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-pentesthowmp/dsh-pentestCatalog AnalyzedAuthorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-verification-receiptdsh-verification-receiptCatalog AnalyzedWrites local JSONL summaries of per-turn tool counts and coarse verification signals without storing prompts, tool arguments, or result text.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0user-management@weibaohui/user-managementCatalog AnalyzedLogin gate for the dsh web UI: unauthenticated visitors get a login/register page and the first registrant becomes admin; includes user and role management plus login and access audit logs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.9.5qiushi-dsh-evidence-auditqiushi-dsh-evidence-auditCatalog AnalyzedAppends local hash-chained JSONL receipts for tool results and session events without storing prompts, tool arguments, result text, or raw session IDs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-yolo-modedsh-yolo-modeCatalog AnalyzedLLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.0dsh-always-require-tools-approval@j0ss077/dsh-always-require-tools-approvalCatalog AnalyzedRequires one-shot user approval before configured tools (default bash, pwsh) execute — gated tools pause and ask, everything else delegates, and a missing approval channel fails closed.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.1.1dsh-telemetry-redactordsh-telemetry-redactorCatalog AnalyzedRedacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-auto-approve@dnalec/dsh-auto-approveCatalog AnalyzedAutomatic approval and review for tool calls that need approval: keyword buckets match red lines without context, then a judge model classifies what was requested and sends it to allow, reject or a human according to the matching row and risk level; a judgment that never ran always goes to a human, and rejections tell the model why.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.1dsh-write-protectdsh-write-protectCatalog AnalyzedProtect declared workspace subpaths such as .git from writes, and optionally grant extra writable roots under workspace-write.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-dros-vajraclawdsh-plugin-vajraclawCatalog AnalyzedLocal tool-call failsafe for DSH: blocks a fixed list of high-risk shell patterns and credential-file reads before execution, with a per-session hash-linked JSONL audit log, and an optional external Gateway for centralized policy.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.0dsh-provenancedsh-provenanceCatalog AnalyzedPre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-smart-approvaldsh-smart-approvalCatalog AnalyzedFail-closed LLM-assisted approval reviewer for DeepSeek HarnessSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-rc.11dsh-kubectl-guarddsh-kubectl-guardCatalog AnalyzedPolicy plugin that gates kubectl by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.1dsh-dlpdsh-dlpCatalog AnalyzedData-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redactionSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.10.0codex-guardAkimiya-z/codex-guardCatalog AnalyzedQuality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-pentesterdsh-pentesterCatalog AnalyzedPTES-based penetration testing plugin with Root-Orchestrator architecture for DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact4.0.0dsh-completion-guarddsh-completion-guardCatalog AnalyzedKeeps DSH agents from forgetting your requirements during long tasks. It saves important conditions and completion evidence locally, brings them back after context compaction or session resume, and stops partial work from being reported as the whole task done.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.7.1dsh-ocsf-forwarderdsh-ocsf-forwarderCatalog AnalyzedRead-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships itSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.8.0Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation