插件目录
完整目录用于发现；各质量维度分别展示，自动化分析不代表插件功能已经完整验证。插件管理器会在本地继续检查候选源。
找到 565 个来源候选（配置来源覆盖 15812 / 15812） · 快照：2026-09-19搜索排序：文本相关性优先 + 有界质量证据修正
dsh-autoCH3SH-LC/dsh-auto目录 已分析The auto permission tier for DeepSeek Harness: workspace-write requests run directly, sandbox escalations (danger-full-access) are judged by a separate classifier model.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-cli-modelcgash/dsh-cli-mode目录 已分析Terminal-first CLI for DeepSeek Harness — chat with agents, switch sessions/models/permissions, approve actions, codex-style workspace.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-workspace-scope-selectionjiangr100/dsh-workspace-scope-selection目录 已分析A fourth DSH permission option: selected-workspace-write with a directory-tree scope editor for the DeepSeek Harness web UI安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-model-fixerMarsax110/dsh-model-fixer目录 已分析模型无关的沙箱升级修正 + 按模型定制的协议提示段：任何模型（GPT 系最常见）在工具调用中错误携带 sandbox_permissions/justification 导致 'not strictly wider' 死循环时自动剥离；并按会话模型动态注入适配提示段。非 bundle 插件，HMR 实时生效。安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-llm-openai-compatiblecqnxnzg/dsh-llm-openai-compatible目录 已分析MIT License Copyright (c) 2026 cqnxnzg Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell cop安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-agentALwith-ai/dsh-agent目录 已分析Interactive ACP v2 bridge for DeepSeek Harness (dsh) — streaming, run-state reporting, permissions. ALwith Desktop is its reference client.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-plugin-guardDingZhiQi5596/dsh-plugin-guard目录 已分析DSH Desktop 插件安全防护：崩溃后自我修复 + 8 项核心安全检查（另有 2 项可选：深度组合校验、业务冒烟），写完插件自动提示。非商业源可用。安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-jumpserverwe39/dsh-jumpserver目录 已分析通过对话查询与管理 JumpServer：资产、用户、账号、授权、会话、命令审计、命令过滤与 RBAC 角色，使用 AccessKeyID/AccessKeySecret（HTTP 签名）鉴权。安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-plugin-certificationPerryLink/dsh-plugin-certification目录 已分析Community certification spec and registry for DeepSeek Harness plugins: five machine-checkable dimensions, A-D grades, and a security veto.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-taintguardsashankh/dsh-taintguard目录 已分析当工具结果包含不可信内容时将代理标记为已污染，对随后的高权限调用进行拦截，并在所有模式下拒绝将凭据传递给可联网的工具。安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-almazom-approve-escalatealmazom/dsh-almazom-approve-escalate目录 已分析One-click Approve & escalate on the approval card: answers the pending request and switches the live session to a permission preset.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-agent-sentinelokaditya84/dsh-agent-sentinel目录 已分析Security guard plugin for DeepSeek Harness: secret redaction, a shell command denylist, prompt-injection scanning, and syntax verification.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dshpkgExaggarate/dshpkg目录 已分析Security & health audit CLI for DeepSeek Harness (DSH) plugins — npm audit for the everything-is-a-plugin era. Search, info, security-scan, doctor. stdlib-only.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-secret-scanuckkk/dsh-secret-scan目录 已分析@{name=dsh-secret-scan; version=0.1.0; description=敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查安全; type=module; main=lib/index.js; exports=; files=System.Object[]; dsh=; keywords=System.Object[]; author=istone <ad571@qq.com>; license=MIT; peerDependencies=}.description安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析dsh-approval-firstjoao-paulo-santos/dsh-approval-first目录 已分析Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析task-chimeAbel-86/task-chime目录 已分析DSH task chime: play local sounds for approval/permission requests and task completion, configurable from the Web GUI. DSH 任务提示音插件安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析skill-sentrywhaojie797-design/skill-sentry目录 已分析Static, local, explainable pre-install security audit for Agent Skills. Scans SKILL.md/scripts/config for destructive commands, hidden network calls, secret reads, obfuscation, prompt injection, persistence. CLI + 36 fixtures + GitHub Actions.安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析DSH-Plugin-DoctorXrainsmile/DSH-Plugin-Doctor目录 已分析Compatibility, security, isolated install, and rollback doctor for DeepSeek Harness plugin bundles安全与权限GitHub兼容性DSH 0.1.6-alpha.2 · web依赖审计未测试制品未解析来源级候选描述来自第三方目录及 Registry 复核的公开来源，属于不可信导入文本安装前仍需本地 inspect / plan / confirm