Plugins

The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.

Reset all
Found 1110 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
anolisaalibaba/anolisaCatalog AnalyzedANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with runtime, security, observability, and Tokenless response compression for lower token usage and cost.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals617 starsDeepSecUnclecheng-li/DeepSecCatalog AnalyzedDeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals392 starsuser-management@weibaohui/user-managementCatalog AnalyzedLogin gate for the dsh web UI: unauthenticated visitors get a login/register page and the first registrant becomes admin; includes user and role management plus login and access audit logs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.9.5Evidence updated2026-09-22Public signals1 stars · 2923 downloadsdsh-provenancedsh-provenanceCatalog AnalyzedPre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-22Public signals1 stars · 888 downloadsdsh-time-machine@goodandready/dsh-time-machineCatalog AnalyzedSmart checkpoints, workspace safety guards and instant rollback for DeepSeek Harness.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.21Evidence updated2026-09-26Public signals0 stars · 2637 downloadsdsh-vaultdsh-vaultCatalog AnalyzedEncrypted local credentials vault for the Harness: a web settings page and vault_* tools to store, search and copy passwords, API keys, TOTP secrets and card data, with health audits, expiry rotation, imports/exports and read-only/ask access modes.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact1.10.73Evidence updated2026-09-19Public signals11 stars · 15542 downloadsdsh-semgrep-sast#semgrep-sast@aaub-software/dsh-semgrep-sastCatalog AnalyzedWorkspace-scoped Semgrep SAST tool for DeepSeek Harness with a managed Windows x64 runtime, structured bounded findings, cancellation and timeout controls, and user-approved sandbox escalation. Installs from npm as @aaub-software/dsh-semgrep-sast.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.1Evidence updated2026-09-23Public signals1 stars · 530 downloadsdsh-write-gatedsh-write-gateCatalog AnalyzedCommitment write-gate: operator-authored rules enforced before a tool call runs — a deterministic guard tier plus an LLM-judge tier, fail-closed by default, every block written to a contradictions log.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-23Public signals1 stars · 390 downloadsdsh-cyrenedsh-cyreneCatalog Analyzed昔涟 (Cyrene) 主题 + 桌宠 for the dsh web GUI — pearl-white pink theme, Live2D desktop pet, particle background, gradient, and a collapsible config card. Ported from Cyrene-Agent (MIT) with the Live2D model creator's permission.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.1Evidence updated2026-09-24Public signals1184 downloadsdsh-secret-scrubdsh-secret-scrubCatalog AnalyzedIrreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-23Public signals1 stars · 243 downloadsdsh-cyrenedsh-cyreneCatalog Analyzed昔涟 (Cyrene) 主题 + 桌宠 for the dsh web GUI — pearl-white pink theme, Live2D desktop pet, particle background, gradient, and a collapsible config card. Ported from Cyrene-Agent (MIT) with the Live2D model creator's permission.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.1Evidence updated2026-09-26Public signals936 downloads@nexlineai/dsh-tui@nexlineai/dsh-tuiCatalog AnalyzedA full-screen interactive terminal UI for the DeepSeek Harness agent runtime — live streaming, reasoning blocks, tool cards, sessions, permissions, plan mode, and a full slash-command suite. The web UI, reimagined for the terminal.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.2Evidence updated2026-09-25Public signals898 downloadsdsh-auto-approval-plugindsh-auto-approval-pluginCatalog AnalyzedA middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.1.2Evidence updated2026-09-25Public signals864 downloadsdsh-cloudflare-accessdsh-cloudflare-accessCatalog AnalyzedRe-validates Cloudflare Access JWTs at the DSH origin so Settings, Credentials, Agent Preset management, and model discovery work from a remote hostname.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact2.0.0Evidence updated2026-09-26Public signals0 stars · 842 downloadsdsh-risk-guarddsh-risk-guardCatalog AnalyzedZero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.0Evidence updated2026-09-25Public signals0 stars · 645 downloadsdsh-plugin-code-reviewdsh-plugin-code-reviewCatalog AnalyzedStructured code review skill for DeepSeek Harness -- bugs, security, performance, styleSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-24Public signals534 downloads@securstack/dsh-plugin@securstack/dsh-pluginCatalog AnalyzedDeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.2Evidence updated2026-09-24Public signals508 downloadsdsh-redaction#dsh-plugin-redactdsh-plugin-redactCatalog AnalyzedIn-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.1Evidence updated2026-09-26Public signals0 stars · 326 downloads
Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation