Skip to content
dsh.fish

Browse

40 results

Bundle

dsh-path-anonymizer

DSH plugin: anonymize workspace-external file paths before model requests with user confirmation

yzhangjy
Bundle

dsh-mutation-receipt

DeepSeek Harness plugin: a citable append-only JSONL of filesystem touches — path, op, sha256 before and after — carrying no file contents

jwilson411
Bundle

dsh-security-scan

Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.

ben7am1n
Bundle

dsh-dep-vuln-scan

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

988hj7tczd-oss
Bundle

dsh-plugin-security-audit

DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.

truelove-dreamer
Bundle

dsh-windows-workspace-guard

Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.

julescules
Bundle

dsh-plugin-update-audit

Read-only update auditing for DeepSeek Harness profile plugins across npm, GitHub, and local package sources.

wcnm8888
Bundle

dsh-openkapsel

OpenKapsel workspace bridge for the DeepSeek Harness: operate a remote OpenKapsel workspace (files, shell, context, memory, sharing, preview) through skill-driven tool calls using only its workspace URL and control token.

zzzmmmnn
Bundle

dsh-skillnotary

Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.

liyixuan201211
Bundle

dsh-config-watch

Config drift detective for DSH: snapshots profile/plugin state on startup, records diffs, exposes a read-only history tool. Zero runtime deps, no custom events.

Equinox7379
Bundle

winada-dsh-telegram-bridge

A DSH profile bundle that ships the Telegram ↔ DeepSeek Harness bridge as a model-callable install tool. Requires the session sandbox policy to allow subprocess TLS to api.telegram.org (danger-full-access in the default sandbox policy).

winada82
Bundle

dsh-local-hanaccount

Access lock for DeepSeek Harness web profile (password, passkey, IP lists, Nginx)

Z-6354
Bundle

dsh-login

Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.

ravenli059
Bundle

dsh-consumer-audit

Audit a DSH profile for capabilities nothing consumes, and record completion claims with the evidence that supports them.

qimen039-code
Bundle

dsh-hidden-paths

Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.

Gabrip780
Bundle

git-for-dsh

Allowlisted git execution for DeepSeek Harness: a model-facing git tool that runs outside the file sandbox, with a settings page where the user ticks which git subcommands are permitted and, per path, which reads and writes are allowed, prompted or refused

theRMM714