Bundle
dsh-gpt-compat
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
YaoaY1
Browse
88 results
Bundle
dsh-hallmark-design
拒绝 AI 味的 UI 设计：21 主题 + 四动词（构建/audit 审计/redesign 重构/study 提取 DNA）+ 57 个 slop 测试门 + 预输出自我批评——拒绝所有 LLM 训练成的分布默认值。受 Nutlope/hallmark（25.8k★ MIT）启发。
satan93941
Bundle
dsh-strip-sandbox-permissions
Strip sandbox_permissions / justification from model tool-call arguments so sandbox escalation is never triggered when the session already has sufficient permission.
Sharl2101
Bundle
stavros-dsh-redteamer
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
CSI-entitymorton1
Bundle
dsh-disk-audit
Disk-usage audit for DeepSeek Harness (dsh) data directories: total size, per-directory breakdown, largest files, and oversized-file warnings (session logs can hit hundreds of MB). Zero runtime dependencies, read-only. CLI + agent-callable disk_audit tool.
zoahdev1
Bundle
dsh-model-redactor
Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams
zerodegress1
Bundle
dsh-chat-share
Share a selected range of chat messages as Markdown, HTML, or plain text (Web /share command, Header button, sidebar ... menu, redaction, auto-save)
chrisx9z1
Bundle
dsh-credential-handoff
Conversation-local credential handoff that writes through the DSH credential service without returning the secret to model context.
xiaohj2331
Bundle
dsh-poison-guard
Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.
zoahdev1
Bundle
dsh-headless-json
Structured, machine-readable CI output for DeepSeek Harness (dsh): session event capture with JSON/NDJSON reports, JUnit XML, semantic exit codes, artifact collection and privacy redaction. Ships as a dsh profile bundle and a standalone CLI.
JohnXu227861
Bundle
dsh-hermes-security-audit
Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1
axelfreeman1
Bundle
dsh-fleet-audit
DSH agent-fleet hygiene audit: credential-file permissions, embedded credentials in git remotes (masked), provider token-prefix literals. Read-only, zero-dependency, deterministic.
LeslieWylie1
Bundle
dsh-multi-workspace
Multi-workspace sandbox for DSH: automatically grant file-write access to ALL registered workspaces — add a workspace in the UI, write to it immediately, no config needed.
somnusovis1
Bundle
dsh-config-sync
DeepSeek Harness config sync: export/import DSH settings, API credentials, profile plugin patches and user agent presets as portable local bundles or a single password-encrypted file (AES-256-GCM + PBKDF2-SHA256).
muyifc1
Bundle
dsh-memory-setup
Solve the AI goldfish brain: a personal memory layer for DeepSeek Harness — preferences, project conventions, workflows, and error lessons, stored locally as auditable, evidence-backed Markdown/JSON. 解决 AI 金鱼脑：偏好、项目约定、工作方式与纠错教训的本地可审计记忆层。
8636833481
Bundle
dsh-session-permissions
Layered session permissions for DeepSeek Harness. 有效权限 = 官方 ∩ Agent ∩ 本会话；Claw 会话钉官方沙箱（只紧不松）。
xingyingyuzhui1
Bundle
@ddtcorex/dsh-maestro-guard
Maestro Guard — pre-execute safety gate: native DSH approval prompts, parsed command-surface rules, decision journal
ddtcorex1
Bundle
dsh-write-protect
DSH sandbox extension: protect declared workspace subpaths (e.g. .git) from writes, and optionally grant extra writable roots under workspace-write, enforced for sandboxed CLI commands and the write/edit tools. 为 DSH 沙箱增加工作区子路径只读保护, 并支持在 workspace-write 下声明额外可写根.
azazo11
Bundle
dsh-guardian
Dangerous-operation policy, canonical output redaction, and security review for DeepSeek Harness.
lonelymoon871
Bundle
dsh-secret-guard
A DeepSeek Harness (dsh) security plugin: blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe inspection tools that never print raw values.
JohnXu227861
Bundle
dsh-llmasking
Transport-layer data masking for deepseek-harness (dsh): sensitive values never leave the process — the model sees placeholders, you see real values restored live in the stream.
yolorouter1
Bundle
dsh-credential-manager
Named user credentials for DeepSeek Harness: model-facing credential tools, secrets behind the ctx.credentials seam, DSH_CM_* shell variables, and a Settings → Credentials page
accpowered1
Bundle
dsh-session-showcase
Turn DeepSeek Harness sessions into redacted, README-ready animated demos — as a local CLI or DSH plugin.
STFQ1
Bundle
dsh-vault
Persistent credential vault for DeepSeek Harness (DSH): manage API tokens, server logins, and site credentials in one settings panel. Secrets live in the DSH credential store and are consumed by the model via vault_status / vault_get tools.
njjpro1