Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1069 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-auto-reviewerAntaresCorn/dsh-auto-reviewerCatalog AnalyzedCodex-style auto-review permission mode: adds an auto-review preset that auto-approves safe sandbox escalations, asks on risky or ambiguous ones, and rejects critical unconfirmed operations.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-auto-approval-llm@quill507/dsh-auto-approval-llmCatalog AnalyzedLLM-assisted auto approval with countdown fallback for the Auto permission preset: static rules, risk tiers, breaker and file audit.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.0.34dsh-permgate@mrweicodes/dsh-permgateCatalog AnalyzedFine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions, quick-tool defaults, custom rules, a bilingual approval modal with inline diff details, custom rejection reasons and a sandbox-upgrade flow.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.5.5dsh-auto-mode@nanmicoder/dsh-auto-modeCatalog AnalyzedAdds an Auto permission preset between Workspace Write and Full access: routine work stays in the official workspace-write sandbox while the current session model reviews escalation and destructive calls, granting one exact wider access once, asking when the intent is ambiguous, and denying critical paths.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.9api-relay-audittoby-bridges/api-relay-auditCatalog AnalyzedRuns local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-riskproofdsh-riskproofCatalog AnalyzedLive security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0dsh-sentinel-scannerdeepseek-harness-sentinelCatalog AnalyzedStatic security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.4dsh-redteam-modelSeaOf0/dsh-redteam-modelCatalog AnalyzedAuthorized-security DSH collection: nine work modes (redteam coordinator, pentest, code audit, binary analysis, attack-defense, AV evasion, incident response, cloud security, CTF solving) and fifteen runtime plugins, managed from a settings page with one-click deploy, install, update and uninstall.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-vettingdsh-plugin-vettingCatalog AnalyzedVets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.5.6dsh-perm-gatedsh-perm-gateCatalog AnalyzedP0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.2dsh-auto-classifierdsh-auto-classifierCatalog AnalyzedAutonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git checkpointing for unattended sessions.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.14dsh-shadow-auditor@goodandready/dsh-shadow-auditorCatalog AnalyzedBackground security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.15dsh-vetdsh-vetCatalog AnalyzedSecurity vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.0dsh-plugin-auditdsh-plugin-auditCatalog AnalyzedSecurity audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party pluginsSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.4@nexlineai/dsh-tui@nexlineai/dsh-tuiCatalog AnalyzedA full-screen interactive terminal UI for the DeepSeek Harness agent runtime — live streaming, reasoning blocks, tool cards, sessions, permissions, plan mode, and a full slash-command suite. The web UI, reimagined for the terminal.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.2dsh-approval-llmdsh-approval-llmCatalog AnalyzedModel-based permission approval: an approval-request answerer backed by a separate reviewer model.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifact0.1.6helm-dADWMC/helm-dCatalog AnalyzedDeepSeek Harness 破甲一体化Security analysisPlugin：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedhelm-d#helmdADWMC/helm-dCatalog AnalyzedSingle-bundle reverse-engineering and pentest security plugin: first-turn tool narrowing, domain routing, and 33 tools covering APK, web, native binary, protocol, malware and LLM samples — with unpacking, license-bypass and anti-analysis case playbooks, an H-CoT evaluation engine (semantic routing, /hcot command), a web workbench with a ledger-driven tool shelf, an on-disk case workflow (auto-persisted evidence chain, E-numbered validated findings, post-compaction resume), GitHub-based external tool discovery, and 361 on-demand reference docs.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedSource candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation