Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1086 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
deepseek-harness-relay-mcpharness-relay-mcpCatalog AnalyzedInstalls a Web-profile helper that diagnoses and writes MCP config so Codex, Cursor, or Claude Code can spawn dsh --profile codex.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.17user-management@weibaohui/user-managementCatalog AnalyzedLogin gate for the dsh web UI: unauthenticated visitors get a login/register page and the first registrant becomes admin; includes user and role management plus login and access audit logs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.9.5qiushi-dsh-evidence-auditqiushi-dsh-evidence-auditCatalog AnalyzedAppends local hash-chained JSONL receipts for tool results and session events without storing prompts, tool arguments, result text, or raw session IDs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-yolo-modedsh-yolo-modeCatalog AnalyzedLLM auto-approval for sandbox escalation requests, with presets and a fail-closed fallback.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.0deepseek-harness-gateway#dsh-gateway-agent@januory/dsh-gateway-agentCatalog AnalyzedCustomer-machine access plugin for deepseek-harness-gateway: opens a single outbound WebSocket to the gateway and relays the machine local dsh web UI over that tunnel using pairing-code + HMAC auth, so no inbound port, port mapping, or public IP is needed.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.2dsh-always-require-tools-approval@j0ss077/dsh-always-require-tools-approvalCatalog AnalyzedRequires one-shot user approval before configured tools (default bash, pwsh) execute — gated tools pause and ask, everything else delegates, and a missing approval channel fails closed.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.1.1dsh-lark-bridge@moyu-good/dsh-lark-bridgeCatalog AnalyzedFeishu/Lark IM channel for DeepSeek Harness agents with native thinking-process messages, approval cards, live goal and todo cards, workflow fan-out lines, session text search, and background job and subagent settlement notices. Access is bounded by the Feishu app's own visibility scope by design — anyone the app admits can drive the agent and answer its approvals unless the optional sender, group and approver allowlists are filled in.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.1dsh-telemetry-redactordsh-telemetry-redactorCatalog AnalyzedRedacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dshn#agent@dshn/agentCatalog AnalyzedForwards a local dsh web UI to the public internet under a *.ds.hn subdomain (or your own self-hosted relay), gated by a login, with optional end-to-end encryption (PBKDF2 to AES-256-GCM).Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0onebox-dsh-bridgeonebox-dsh-bridgeCatalog AnalyzedAndroid client implementation for DeepSeek Harness: bridges local dsh web to the OneBox app with QR scan-to-pair and an end-to-end encrypted cloud relay tunnel.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.0dsh-adapter-qqdsh-adapter-qqCatalog AnalyzedQQ Official Bot adapter for C2C single chat, interactive action boards, workspace session management, and real-time Web UI sync.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.3dsh-auto-approve@dnalec/dsh-auto-approveCatalog AnalyzedAutomatic approval and review for tool calls that need approval: keyword buckets match red lines without context, then a judge model classifies what was requested and sends it to allow, reject or a human according to the matching row and risk level; a judgment that never ran always goes to a human, and rejections tell the model why.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.1dsh-write-protectdsh-write-protectCatalog AnalyzedProtect declared workspace subpaths such as .git from writes, and optionally grant extra writable roots under workspace-write.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1dsh-dros-vajraclawdsh-plugin-vajraclawCatalog AnalyzedLocal tool-call failsafe for DSH: blocks a fixed list of high-risk shell patterns and credential-file reads before execution, with a per-session hash-linked JSONL audit log, and an optional external Gateway for centralized policy.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.0dsh-networkdsh-networkCatalog AnalyzedAuthenticated LAN, Tailnet, and public HTTPS access for a DSH Host, with persistent host identity, pairing, and QR setup.Remote & MobilenpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-rc.9dsh-provenancedsh-provenanceCatalog AnalyzedPre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0dsh-smart-approvaldsh-smart-approvalCatalog AnalyzedFail-closed LLM-assisted approval reviewer for DeepSeek HarnessSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-rc.11dsh-kubectl-guarddsh-kubectl-guardCatalog AnalyzedPolicy plugin that gates kubectl by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.1Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation