Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 565 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-security-guardruanhaodong-tt/dsh-security-guardCatalog AnalyzedRuntime security guard for DSH: loader import confinement, HTTP Host header validation, and source patch for VM sandbox escapes (4 CVEs). AI-assisted.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-permission-matrixzhang8019/dsh-permission-matrixCatalog AnalyzedTurns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedawesome-security-agent-harnessesEd-Marcavage/awesome-security-agent-harnessesCatalog AnalyzedAI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-security-managerKolos-alter/dsh-security-managerCatalog AnalyzedDescription：Security plugin manager for DeepSeek Harness: auto-discovery, npm/GitHub source location, snapshot-backed update & rollback.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-strip-sandbox-permissionsSharl210/dsh-strip-sandbox-permissionsCatalog AnalyzedStrip sandbox_permissions/justification from model tool-call arguments to avoid false sandbox escalation errorsSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-session-permissionsxingyingyuzhui/dsh-session-permissionsCatalog AnalyzedLayered session permissions for DeepSeek Harness. 官方 ∩ Agent ∩ 本会话。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-security-scanben7am1n/dsh-security-scanCatalog AnalyzedDSH plugin from ben7am1n/dsh-security-scanSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-mcp-securityz-y-q/dsh-mcp-securityCatalog Analyzeddsh-mcp-securitySecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-security-gatewj2514939573-ui/dsh-security-gateCatalog AnalyzedSecurityGate（Plugin安检门）— inspect DSH plugins before install: dual-dimension static scan + LLM AI review + runtime watch + community ratings & bug bounty.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedDSH-Skill-Security-Inspectorkakapengta/DSH-Skill-Security-InspectorCatalog Analyzed一个可直接链接到 DeepSeek Harness（DSH）Web profile 的独立Security检查Plugin。在安装或使用不受信任的 Skill 前，先执行浏览器本地粗检，再由用户决定是否调用 DSH 已配置的大模型进行结构化复核。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-security-audittruelove-dreamer/dsh-plugin-security-auditCatalog AnalyzedDeepSeek Harness plugin: run a live security health check on the deploymentSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedpermission-popupwxjgit/permission-popupCatalog Analyzed当前会话或后台会话正在等待Permissions审批时，Plugin会在页面角落显示审批卡片，让你无需切回原会话就能选择“允许一次”或“拒绝”。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-permission-workspace-write-plusWonjader/dsh-permission-workspace-write-plusCatalog Analyzeddeepseek harness中workspace writePermissions的增强Plugin。使用前请自行评估风险。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-sandbox-permissions-not-strictly-wider-justification-empty-fixyajiangandchenchen/dsh-sandbox-permissions-not-strictly-wider-justification-empty-fixCatalog Analyzed修复 sandbox_permissions 和 justification 字段在 pwsh/bash/fs/dsh-sandbox 中的 no-op 升级报错。当会话已是 danger-full-access 模式时，模型携带空 justification 或重申同一模式被拒的问题。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-security-reviewdsh-plugin-security-reviewCatalog AnalyzedStatic bundle form of the DSH plugin-install security gate: reviews cordis_define/cordis_run with a fail-safe policy, plus review/audit tools and a browser approval popup (agree / agree+whitelist / reject; agree+whitelist writes the plugin family into truBrowser & WebnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.8.1dsh-sandbox-permission-guardJachinShen/dsh-sandbox-permission-guardCatalog AnalyzedDSH Cordis plugin that prevents redundant sandbox escalation failuresSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-trust-checkdsh-trust-checkCatalog AnalyzedStatic capability disclosure for DeepSeek Harness plugins: a Settings page and CLI that list installed plugins' capabilities, literal destinations, install scripts, and injection shapes (prompt registrations, shipped skill text, bundle patch), each with file:line evidence. Code-determined, reproducible, zero-token. Disclosure only — not a security verdict, never a safety claim.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.14dsh-plugin-gatedsh-plugin-gateCatalog AnalyzedInstallation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.3.2Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation