Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1038 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-egress-guardLKRCharon/dsh-egress-guardCatalog AnalyzedLocal, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-finreportSkyloveQiu/dsh-finreportCatalog AnalyzedScheduled bilingual financial reports for DSH: market quotes, news and macro calendar, with per-target timezones and delivery through eight dsh-im channels.Notifications & IntegrationsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-secret-guardMkaliezZ/dsh-secret-guardCatalog AnalyzedFail-closed secret-like payload guard for DSH tool calls: inspects model tool arguments at tools/pre-execute.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-credentials-vaulttancheng33/dsh-credentials-vaultCatalog AnalyzedHashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-operation reads so rotation needs no restart, and compare-and-swap writes.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedwork-personal-secretary#work-personal-secretaryliangl1985/work-personal-secretaryCatalog AnalyzedInstaller and configuration base for a five-plugin DSH assistant suite: probes the Python, WPS and workspace environment, installs the sibling plugins shipped in the same repository, and generates the workspace baseline (instruction layer, memory seed, skills, settings); it also contributes its own settings section and its own host-side setup and check logic.Notifications & IntegrationsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-fs-allowlistwangzhaonan16/dsh-fs-allowlistCatalog AnalyzedApproval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-route-fence-linterVladimir-Kryshchenko/dsh-route-fence-linterCatalog AnalyzedAudits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-gov863683348/dsh-govCatalog AnalyzedAgent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-precheckBaqiF2/dsh-plugin-precheckCatalog AnalyzedPre-install compatibility gate for DSH plugins: locks the resolved version, checks peer/engines declarations, dry-installs into an isolated DSH_HOME and boots it with a timeout, blocks on any failure, and restores the profile if the real install fails. Optionally intercepts dsh-market install/update clicks.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-shell-kitxiayuhkust/dsh-shell-kitCatalog AnalyzedPlugins for DeepSeek Harness (dsh): secret-guard blocks reading secret/PII files, script-exec runs scripts via temp file to avoid Windows quoting pitfalls.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-safe-deleteNattoCB/dsh-safe-deleteCatalog AnalyzedTools guard that moves agent-issued `rm` targets to the macOS Trash instead of deleting, with a shell-aware lexer covering compound and disguised commands; a switch in Settings → General turns it off.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-risk-gateleetom314/dsh-risk-gateCatalog AnalyzedSemantic risk grading and progressive authorization: classifies tool calls into safe/risky/redline, asks before irreversible actions, auto-allows only approved-and-succeeded signatures.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-stackweivwang/dsh-stackCatalog AnalyzedReproducible DeepSeek Harness environments in one portable, secret-safe Stackfile.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-auto-reviewaccpowered/dsh-auto-reviewCatalog AnalyzedLLM approval answerer for sandbox escalations beyond workspace-write: a deterministic regex filter first, then a clean-context reviewer model; humans are asked only when it is unsure. Requires the bundled core patches.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-edit-guardianLWLAymh/dsh-edit-guardianCatalog AnalyzedFile-change diff bar with keep/undo summary, plus dangerous-command approval and red highlighting for bash/pwsh.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-email-push-masterJamesYasR/dsh-email-push-masterCatalog AnalyzedEmail reminders from your DSH agent when you are away, with stable SMTP (no 535 retry loop), connect and idle timeouts, and a --check self-test.Notifications & IntegrationsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-wechatdAI-aigc/dsh-wechatCatalog AnalyzedWeChat bridge for DeepSeek Harness over Tencent's iLink bot channel: one session per contact, inbound text/images/files, and WeChat's native typing indicator while a turn runs.Notifications & IntegrationsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-dsml-artifact-guardGooDAnDReaDY/dsh-dsml-artifact-guardCatalog AnalyzedSanitizes leaked DeepSeek DSML closing tags from model text streams.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation