Plugins
The complete directory supports discovery. Quality dimensions are shown separately; automated analysis does not prove feature completeness. The plugin manager continues local inspection.
Found 1632 source candidates (configured-source coverage 15812 / 15812) · snapshot: 2026-09-19Search order: text relevance first + bounded quality evidence
dsh-feishu-channelWyattJHayes/dsh-feishu-channelCatalog AnalyzedSecurity-focused Feishu (Lark) channel for DeepSeek Harness: allowlisted remote-agent access with workspace-scoped paths, symlink checks, risk-based approvals, session isolation, redacted logs, and bounded message queues.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedgitguardAlloyPlane/gitguardCatalog AnalyzedGit security upload guard: auto secret/risk scan before commit & push (git hooks) + optional LLM deep review (L2/L3)Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-egress-guardtancheng33/dsh-egress-guardCatalog AnalyzedRuntime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-sentinelBotonJ/dsh-plugin-sentinelCatalog AnalyzedStatic pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-hawkeye-scan#npmliuqingman/dsh-hawkeye-scanCatalog AnalyzedAI-driven source-code security scanning workbench: 5 model tools (start/finding/status/report/list) plus a /hawkeye web UI and JSON/Markdown/HTML vulnerability reports; zero-dependency Cordis plugin, installable as agent preset or npm package.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedDeepSeek-Harness-Remotezxmqq1234/DeepSeek-Harness-RemoteCatalog Analyzed（手机远程对话）DeepSeek Harness 的Security远程访问层与手机 Companion。支持局域网、公网、P2P模式。本项目不是"把 3080 端口开放到局域网"的小Plugin，而是在远程世界与 Harness localhost 信任域之间建立一个新的、明确的、可审计的 Remote Access Security LayerSecurity & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-workspace-write-plusyzxxy010/dsh-workspace-write-plusCatalog AnalyzedAdds a workspace-write++ permission that keeps file tools inside the workspace while skipping the Windows process sandbox for wildcard-allowlisted executables such as Git Bash.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-enter-approveabcofabc/dsh-enter-approveCatalog AnalyzedPress Enter to approve the sandbox permission-escalation prompt in the DeepSeek Harness WebUI - no mouse click required.按 Enter 即可批准 DeepSeek Harness WebUI 中的沙箱Permissions提升审批窗口，无需鼠标点击。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-sandbox-arg-guardapex-mochen/dsh-sandbox-arg-guardCatalog AnalyzedKeeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-workspace-toolsAHIOSUZ/dsh-workspace-toolsCatalog AnalyzedApplies per-workspace default Agent and permission presets to new root sessions automatically (Settings - Workspace defaults), using only official extension points.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-verification-memetianhanly/dsh-verification-memeCatalog AnalyzedEvery time you press a key, a security verification pops up. 每按一个harness的按键都会跳出一个Security验证Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plan-preset23aisfvb/dsh-plan-presetCatalog AnalyzedDSH plugin: read-only permission shown as Plan + permission escalation forbidden (approval never). Web search keeps working. 把只读Permissions显示为 Plan,并禁止申请Permissions升级。Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-plugin-gateyoukongling/dsh-plugin-gateCatalog AnalyzedStandalone pre-install security gate for DeepSeek Harness plugins, with npm, Git, and local source review.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedanolisaalibaba/anolisaCatalog AnalyzedANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with runtime, security, observability, and Tokenless response compression for lower token usage and cost.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedDeepSecUnclecheng-li/DeepSecCatalog AnalyzedDeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.Security & PermissionsGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolveddsh-ui-authdsh-ui-authCatalog AnalyzedAuthentication gate for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a password or second-factor step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); admin-only model and API-key configuration guards; per-user isolation on the REST/list APIs and on the WebSocket event streams; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Runs on both DSH transport lines (0.1.1-rc.2 legacy and 0.1.2+ modern) with no configuration; passkey login needs a localhost or HTTPS origin because browsers require a secure context.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.5dsh-auto-approve@dnalec/dsh-auto-approveCatalog AnalyzedAutomatic approval and review for tool calls that need approval: keyword buckets match red lines without context, then a judge model classifies what was requested and sends it to allow, reject or a human according to the matching row and risk level; a judgment that never ran always goes to a human, and rejections tell the model why.Security & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.4.1dsh-smart-approvaldsh-smart-approvalCatalog AnalyzedFail-closed LLM-assisted approval reviewer for DeepSeek HarnessSecurity & PermissionsnpmGitHubCompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-rc.11Source candidateDescriptions are untrusted text imported from third-party catalogs and public sources reviewed by the RegistryLocal inspect / plan / confirm is still required before installation