Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 565 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-repeat-stop173787247/dsh-repeat-stopCatalog AnalyzedHard-stop consecutive identical tool calls after a configurable streak so the agent cannot spin in place.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedpromptwallChhlafiu4312/promptwallCatalog AnalyzedLocal prompt-injection and secret-exfiltration firewall for DeepSeek Harness.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-secret-pastezhujiaqi/dsh-secret-pasteCatalog AnalyzedDeepSeek Harness plugin: detect pasted secrets, store them in the credentials seam, and send [secret:REF] placeholders to the model.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-credential-handoffxiaohj233/dsh-credential-handoffCatalog AnalyzedConversation-local credential handoff for DSH that writes through the credential service without exposing the secret.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-cve-auditSARTHAK2511/dsh-cve-auditCatalog AnalyzedLive CVE/supply-chain audit for your workspace's own project dependencies (npm/pip/go), backed by OSV.dev, with a `cve_audit` tool plus optional automatic re-scan on lockfile changes.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-guardrailjypjypjypjyp/dsh-guardrailCatalog AnalyzedString-matches tool-call input arguments, blocks dangerous tool calls (deny) or allows them with an injected warning (warn), and ships a full rules-management panel.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-pluginsDamonKoy/dsh-pluginsCatalog AnalyzedCodex-inspired enhancement plugin family for DeepSeek Harness: secret-redactor / approve-for-me / mcp-client-v2 / memories / system-proxy / usage-costSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedsandbox-nonoomdsh-dev/sandbox-nonoCatalog AnalyzedSupport for the nono sandbox backend.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugins#dsh-approve-for-meDamonKoy/dsh-pluginsCatalog AnalyzedAutomated approval review: auto-approve read-only tools, auto-deny dangerous commands, fail-closed policy engine.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-full-access-switchxtd1145/dsh-full-access-switchCatalog AnalyzedOne-time Full access switch for DeepSeek Harness: new sessions (workspaces and conversations) start with danger-full-access and skip the per-session Full access confirmation; installable as a dsh bundle or via patch scripts.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedsandbox-mxcomdsh-dev/sandbox-mxcCatalog AnalyzedMicrosoft cross-platform sandbox support.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedfaultseed#dshJW53222/faultseedCatalog AnalyzedHonesty guardrails on the tool pipeline: blocks a coding agent from weakening tests, swallowing errors, stubbing type checks, or deleting tests through the shell — nine deterministic hooks, each backed by a planted-failure test proving the guard can fail.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugins#dsh-secret-redactorDamonKoy/dsh-pluginsCatalog AnalyzedAutomatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-safeguardZhijiangTang/dsh-safeguardCatalog AnalyzedDSH plugin: block dangerous shell commands and secret leakage before execution (tools/pre-execute veto)Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-turn-approvalarrow949/dsh-turn-approvalCatalog AnalyzedTurn-scoped “Allow for this task” approvals: automatically allow matching `danger-full-access` escalations only for the current task, then expire.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-mcpguardChenLaoshiYF/dsh-mcpguardCatalog AnalyzedScans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell, and credential leaks.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-redactdingge001/dsh-redactCatalog AnalyzedDSH / DeepSeek Harness plugin: runtime secret & PII redaction with mask, reversible vault and execution-time substitutionSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-trustlensMengshang-spec/dsh-plugin-trustlensCatalog AnalyzedRead-only DSH plugin auditor with static scanning, current-session model review, and confirmation gates.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation