Skill
Scan agent skill packages for static security risks. Use for skill audit, security check, prompt-injection review, suspicious scripts, unsafe dependencies, zip package review, and pre-install skill review. Not for runtime monitoring.
Bundle
AI response quality review for DeepSeek Harness: audits each finished assistant turn with an independent reviewer model and steers the agent to fix unreasonable output (up to 2 review rounds).
Bundle
自然语言查询 + 商业智能报表插件 for DeepSeek Harness:在 dsh-mysql 连接底座之上,提供 Text2SQL 自然语言查库、15+ 图表类型、Dashboard 仪表盘、指标/维度管理、多维分析、自助分析、报表导出、审计日志与数据权限。Natural-language data queries + enterprise BI reports for DeepSeek Harness: Text2SQL, 15+ chart types, dashboards, metric management, multi-dimensional analysis, self-service analysis, export, audit log and data permissions.
Bundle
Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval subagent judges every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.
Bundle
工具调用规范守卫:对 agent 工具调用参数做字符串匹配,命中危险行为拦截并注入原因(deny),或放行但注入警告(warn),附规则管理面板
Bundle
Durable batch review and commit safety for DeepSeek Harness tool side effects
Bundle
DeepSeek Harness 工作区管理工具集:查看、创建注册、重命名、删除工作区记录(纯注册,不触碰磁盘目录);破坏性操作(删除注册、改注册路径)走用户审批 fail-closed。
Bundle
NeevSandbox execution providers for DeepSeek Harness
Bundle
DSH hot-plug execution engine: a reliable install/enable/disable/rollback/audit service for plugin marketplaces, agents, and host plugins (execution layer, not a marketplace).
Bundle
PRO-LONG-style programmatic memory for DeepSeek Harness: appends every session event to a per-workspace log.txt that the agent retrieves with grep/python. Built-in write probe, /prolong status command and permission-deny counter.
Bundle
Non-intrusive safety belt for DeepSeek Harness: blocks API keys pasted to the agent, blocks secret writes, tracks leak events, and offers a workspace health scan. 非侵入式安全护栏:拦截粘贴给 Agent 的 API 密钥、写入拦截、泄露追踪与工作区安全体检。
Bundle
Runtime security guard for DeepSeek Harness (DSH) — blocks command injection, SSRF, credential exfiltration, and destructive operations at runtime.
Bundle
Better config hub for DeepSeek Harness: one page showing sandbox mode, default model, workspaces, settings namespaces and copy-ready composition templates.
Bundle
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
Bundle
AgentENV execution-world bundle for DeepSeek Harness
Bundle
Access-password gateway plugin for DeepSeek Harness Web: every request on the gateway port requires authentication (no unauthenticated surface besides the login/setup page), first visit sets the password, and it can be rotated from the dedicated Security settings page.
Bundle
Stavros RedTeam for DeepSeek Harness (DSH) — authorized red-team persona + scope-guarded pentest tooling (persona, 24 subagents, methodology and 78 zero-dependency guard tools).
Bundle
Find DSH plugins and security-scan them before install
Bundle
DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)
Bundle
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
Bundle
DSH web plugin: play a notification chime when the agent asks the user a question (ask_user_question / plan review) or requests approval (sandbox escalation, tool approval).
Bundle
Native Auto Review for DeepSeek Harness with automatic host compatibility selection
Bundle
Share a selected range of chat messages as Markdown, HTML, or plain text (Web /share command, Header button, sidebar ... menu, redaction, auto-save)
Skill
安装任何第三方 DeepSeek Harness (DSH) 插件或 agent preset 之前,审查它的源码, 判断是否安全、是否值得授予"宿主任意代码执行权"。当用户说"这个插件安全吗"、 "能不能装"、"审计/审查这个插件或 preset"、"dsh plugin add"、"帮我看看这个 第三方插件"、或贴出一个插件目录/仓库让评估,都要用它。即便用户没明说"安全"、 只要是在引入外部 DSH 代码,就应先做这次审计。