Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 565 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
codex-guardAkimiya-z/codex-guardCatalog AnalyzedQuality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-pentesterdsh-pentesterCatalog AnalyzedPTES-based penetration testing plugin with Root-Orchestrator architecture for DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact4.0.0dsh-completion-guarddsh-completion-guardCatalog AnalyzedKeeps DSH agents from forgetting your requirements during long tasks. It saves important conditions and completion evidence locally, brings them back after context compaction or session resume, and stops partial work from being reported as the whole task done.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.7.1dsh-ocsf-forwarderdsh-ocsf-forwarderCatalog AnalyzedRead-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships itSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.8.0dsh-write-gatedsh-write-gateCatalog AnalyzedCommitment write-gate: operator-authored rules enforced before a tool call runs — a deterministic guard tier plus an LLM-judge tier, fail-closed by default, every block written to a contradictions log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-vault-walldsh-vault-wallCatalog Analyzed保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙Plugin（隔离墙 + 人在回路审批 + 执行后验证 + 循环纠正 + 可回滚规则）Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0dsh-ai-teamdsh-ai-teamCatalog AnalyzedDSH plugin: an unattended AI software team. Feed it a bare Linux server, a set of secrets (env-var references only) and a git remote, and the plugin-driven AI team drives the whole project lifecycle — environment bootstrap, scaffolding, task decompositionSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.7.0@xiaobanli/dsh-enterprise-compliance@xiaobanli/dsh-enterprise-complianceCatalog AnalyzedEnterprise compliance for DeepSeek Harness — SOC2/GDPR automated checks, sensitive-info redaction, and a redacted tool audit trail. · DSH 企业级合规Plugin：SOC2/GDPR 自动化合规自检、敏感信息拦截与脱敏、Action日志审计追溯。Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.1.4dsh-agent-loop-guard@goodandready/dsh-agent-loop-guardCatalog AnalyzedFail-closed runtime tool-call loop guard for DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.14dsh-secret-scrubdsh-secret-scrubCatalog AnalyzedIrreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-capmark-gatedsh-capmark-gateCatalog AnalyzedHold a DeepSeek Harness agent to a capmark capability manifest: mask its tools and judge every call.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.3.1dsh-cloudflare-accessdsh-cloudflare-accessCatalog AnalyzedRe-validates Cloudflare Access JWTs at the DSH origin so Settings, Credentials, Agent Preset management, and model discovery work from a remote hostname.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.0.0dsh-approval-reviewdsh-approval-reviewCatalog AnalyzedAdds an "approve for me" access mode whose approval requests are answered by an independent reviewer model instead of a person: the reviewer can read the workspace read-only, a reviewer that cannot run hands the request back to the human, and every decision is recorded with its rationale in an Approvals tab.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.1dsh-risk-guarddsh-risk-guardCatalog AnalyzedZero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.0@yyfather/dsh-token-vault@yyfather/dsh-token-vaultCatalog AnalyzedSecure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.0.3@npm-safe/dsh-tool-npm-safe@npm-safe/dsh-tool-npm-safeCatalog AnalyzedDeepSeek Harness plugin that blocks risky npm installs with metadata and deep supply-chain scansSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.4dsh-tool-approvaldsh-tool-approvalCatalog AnalyzedManual approval mode ("Manual Mode" / "Ask Mode").Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-safe-web-fetchdsh-safe-web-fetchCatalog AnalyzedSSRF-resistant HTTP(S) fetch provider for DeepSeek HarnessSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-next.0Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation