Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 565 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
@jhckevin/dsh-auto-review@jhckevin/dsh-auto-reviewCatalog AnalyzedNative Auto Review for DeepSeek Harness with automatic host compatibility selectionSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.2-rc.1dsh-logindsh-loginCatalog AnalyzedPassword gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-totpdsh-totpCatalog AnalyzedTOTP-only access control for personal DeepSeek Harness Web instances, with in-app QR enrollment, single-use recovery codes, live protection controls and lock-all revocation of page access.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.0.4dsh-redaction#dsh-plugin-redactdsh-plugin-redactCatalog AnalyzedIn-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-redaction#dsh-plugin-content-policydsh-plugin-content-policyCatalog AnalyzedPreventive content policy for tool results: rewrites matched text, and drops or truncates whole fields by path before a result is normalised, rendered or persisted, so an unreviewed payload never enters it. Ships inert with no built-in category or domain blocklist.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.1dsh-plugin-cvescoutdsh-plugin-cvescoutCatalog AnalyzedDeepSeek Harness plugin for CVE impact retesting: fingerprint a target, judge it against a CVE's affected range, gather passive evidence, and report a verdict with confidence and limitations.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.2dsh-plugin-judgedsh-plugin-judgeCatalog AnalyzedPlugin value auditor: pre-install review (source scan + LLM judge) and post-install audit of installed bundles, with model-switch re-audit reminders.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-lan-passdsh-lan-passCatalog AnalyzedA LAN password gate for the Web UI: phones and tablets on the same network log in with a shared key and see the same sessions in real time, with a built-in randomUUID polyfill for plain-HTTP origins.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.0.1dsh-code-scandsh-code-scanCatalog AnalyzedDeepSeek Harness Plugin：为 Agent 增加 code_scan 工具，用 semgrep 扫描代码并输出按文件/行号/严重级别分组的中文报告Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0sofagent#cordis-plugin-sofagent-auditKongFangXun/sofagentCatalog AnalyzedCommit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 84 tools. Installable via dsh plugin add.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-airlockdsh-airlockCatalog AnalyzedProvenance-gated tool use for DeepSeek Harness (dsh) — labels every input, propagates the labels, and denies capabilities over labels instead of argument stringsSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-web-startup-authGDWhisper/dsh-web-startup-authCatalog AnalyzedReplaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-engineering-suitedsh-engineering-suiteCatalog AnalyzedOne install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-simple-authdsh-simple-authCatalog AnalyzedSingle-password authentication gate for the dsh web surface: configurable session validity, Ctrl+Shift+L lock, CLI password management, brute-force lockout, in-UI password controls.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.0.0dsh-session-scopedsh-session-scopeCatalog AnalyzedPer-session workspace visibility scopes for DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.0dsh-managed-approvaldsh-managed-approvalCatalog AnalyzedCodex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0-beta.5dsh-rule-enginedsh-rule-engineCatalog AnalyzedRules execution engine for dsh: parses AGENTS.md, hard-blocks rule-violating tool calls, text-based B/D rule auditing, /guard command, version-guard for versioned files, and free-zone support (engine skips free-zone sections).Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.5dsh-agent-approval@duke-dsh-plugins/dsh-agent-approvalCatalog AnalyzedAn independent approval subagent judges every sandbox escalation, with a configurable model and an audit log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.5.0Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation