Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1198 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-almazom-approve-escalatealmazom/dsh-almazom-approve-escalateCatalog AnalyzedOne-click Approve & escalate on the approval card: answers the pending request and switches the live session to a permission preset.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-agent-sentinelokaditya84/dsh-agent-sentinelCatalog AnalyzedSecurity guard plugin for DeepSeek Harness: secret redaction, a shell command denylist, prompt-injection scanning, and syntax verification.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedrex-harnessRexYoung000/rex-harnessCatalog AnalyzedDeepSeek Harness plugin authoring workspace. First plugin: UI design workflow (@rex-harness/ui-workflow).Workflow & AutomationGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedFlowboardUntidy-cocoabutter173/FlowboardCatalog AnalyzedAlign your team goals, meetings, agents, and documents in one workflow—Flowboard turns DeepSeek Harness into a natural hub for work without task management overhead.Workflow & AutomationGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddshpkgExaggarate/dshpkgCatalog AnalyzedSecurity & health audit CLI for DeepSeek Harness (DSH) plugins — npm audit for the everything-is-a-plugin era. Search, info, security-scan, doctor. stdlib-only.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-docx-mcphelibeiqi/dsh-docx-mcpCatalog AnalyzedZero-dependency MCP stdio server that generates real .docx files from a JSON spec — Chinese office-automation vertical for DeepSeek Harness.Workflow & AutomationGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-secret-scanuckkk/dsh-secret-scanCatalog Analyzed@{name=dsh-secret-scan; version=0.1.0; description=敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查Security; type=module; main=lib/index.js; exports=; files=System.Object[]; dsh=; keywords=System.Object[]; author=istone <ad571@qq.com>; license=MIT; peerDependencies=}.descriptionSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-approval-firstjoao-paulo-santos/dsh-approval-firstCatalog AnalyzedApproval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedtask-chimeAbel-86/task-chimeCatalog AnalyzedDSH task chime: play local sounds for approval/permission requests and task completion, configurable from the Web GUI. DSH 任务提示音PluginSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedskill-sentrywhaojie797-design/skill-sentryCatalog AnalyzedStatic, local, explainable pre-install security audit for Agent Skills. Scans SKILL.md/scripts/config for destructive commands, hidden network calls, secret reads, obfuscation, prompt injection, persistence. CLI + 36 fixtures + GitHub Actions.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedDSH-Plugin-DoctorXrainsmile/DSH-Plugin-DoctorCatalog AnalyzedCompatibility, security, isolated install, and rollback doctor for DeepSeek Harness plugin bundlesSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-gateyoukongling/dsh-plugin-gateCatalog AnalyzedStandalone pre-install security gate for DeepSeek Harness plugins, with npm, Git, and local source review.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-devFabian-698/dsh-plugin-devCatalog AnalyzedDeepSeek Harness (DSH) plugin development agent skill: 6 form typology, verify-plugin.mjs P1-P13 gate, scaffold generator, security discipline, and curated ecosystem backfills. An Agent Skill (SKILL.md), not an npm bundle.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-graphgptBrucePayton/dsh-plugin-graphgptCatalog AnalyzedRun validated GraphGPT workflows as native DeepSeek Harness toolsWorkflow & AutomationGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-escalation-toleranceericleoo/dsh-escalation-toleranceCatalog AnalyzedTolerate redundant sandbox_permissions requests: a Cordis plugin that turns hard failures into harmless no-ops when a tool asks for a permission mode that is already active.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-matt-skills-flowhollis-openlab/dsh-matt-skills-flowCatalog AnalyzedMatt Skills engineering workflow plugin for DeepSeek HarnessWorkflow & AutomationGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-guardMangShe3-0/dsh-plugin-guardCatalog AnalyzedOffline-first security scanner for DeepSeek Harness plugins: prompt injection, ransomware, exfiltration, and supply-chain risks.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-skill-managerS-AN-Shu/dsh-skill-managerCatalog AnalyzedSecurity-bounded Agent Skill management and GitHub marketplace plugin for DeepSeek Harness and DSH DesktopSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation