Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 565 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
noatmark-dsh-pluginylwl1997/noatmark-dsh-pluginCatalog AnalyzedText hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-tool-budget173787247/dsh-tool-budgetCatalog AnalyzedHard-stops further tool calls after a configurable per-session budget is reached.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-github-manageryuan-source-666/dsh-github-managerCatalog AnalyzedGitHub 仓库 AI 自动管理通道Plugin (DeepSeek Harness community bundle): 27 个工具（仓库/Issue/PR/分支/文件/标签/话题/Tags/Releases/搜索）+ Web 设置卡片 + dry-run 防护 + secret 令牌。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedsafety-netJohnXu22786/safety-netCatalog AnalyzedDestructive-command interception gate for dsh: parses shell semantics, judges risk against 41 built-in rules, and holds irreversible rm -rf, git reset --hard, and git push --force style commands at a confirmation gate.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-privacy-guardamwangfan/dsh-privacy-guardCatalog AnalyzedControl panel for a local credential-redaction gateway in DeepSeek Harness: gateway and model health, audit metrics, a dry-run leak tester, an exemption whitelist, encrypted key management, credential-protected model entries and deployment controls.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-prompt-antivirusQinpanWan/dsh-prompt-antivirusCatalog AnalyzedGlobal prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments, tool results, pre-model messages and the outbound stream; quarantine/block/monitor modes, canary trap, and an evolvable on-disk signature library with learn/import/export.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-secretsdsh-secretsCatalog AnalyzedSecrets handling for dsh agents - name reserved; first release in development.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact0.0.1dsh-egress-guardLKRCharon/dsh-egress-guardCatalog AnalyzedLocal, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-secret-guardMkaliezZ/dsh-secret-guardCatalog AnalyzedFail-closed secret-like payload guard for DSH tool calls: inspects model tool arguments at tools/pre-execute.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-credentials-vaulttancheng33/dsh-credentials-vaultCatalog AnalyzedHashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-operation reads so rotation needs no restart, and compare-and-swap writes.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-fs-allowlistwangzhaonan16/dsh-fs-allowlistCatalog AnalyzedApproval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-route-fence-linterVladimir-Kryshchenko/dsh-route-fence-linterCatalog AnalyzedAudits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-gov863683348/dsh-govCatalog AnalyzedAgent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-precheckBaqiF2/dsh-plugin-precheckCatalog AnalyzedPre-install compatibility gate for DSH plugins: locks the resolved version, checks peer/engines declarations, dry-installs into an isolated DSH_HOME and boots it with a timeout, blocks on any failure, and restores the profile if the real install fails. Optionally intercepts dsh-market install/update clicks.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-shell-kitxiayuhkust/dsh-shell-kitCatalog AnalyzedPlugins for DeepSeek Harness (dsh): secret-guard blocks reading secret/PII files, script-exec runs scripts via temp file to avoid Windows quoting pitfalls.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-safe-deleteNattoCB/dsh-safe-deleteCatalog AnalyzedTools guard that moves agent-issued `rm` targets to the macOS Trash instead of deleting, with a shell-aware lexer covering compound and disguised commands; a switch in Settings → General turns it off.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-risk-gateleetom314/dsh-risk-gateCatalog AnalyzedSemantic risk grading and progressive authorization: classifies tool calls into safe/risky/redline, asks before irreversible actions, auto-allows only approved-and-succeeded signatures.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-stackweivwang/dsh-stackCatalog AnalyzedReproducible DeepSeek Harness environments in one portable, secret-safe Stackfile.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation