Skip to content
dsh.fish

Browse

30 results

Bundle

dsh-api-relay-audit

DeepSeek Harness bundle for running API Relay Audit locally

toby-bridges829
Bundle

upstream-radar

Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.

MicroMilo313
Bundle

@zseven-w/dsh-harbor

A read-only mirror for installed DeepSeek Harness plugins: capability inventory with evidence, cross-plugin conflicts, and a diff of what changed since the last scan

ZSeven-W25
Bundle

@shaoshi/dshscan

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

shaoshi2010
Bundle

@hubaking/dsh-community-plugins

DSH 社区插件生态指南 + 两个审计工具:注册「dsh-community-plugins」skill,让每个会话都知道如何发现、评估、安装社区插件;注册离线工具 dsh_plugin_audit,把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建;注册联网工具 dsh_plugin_inspect,在安装前下载 tarball、校验 integrity、在临时目录里审计后删除,不安装、不执行 lifecycle 脚本。只提供方法与事实,不推荐任何第三方插件或市场。轻量:纯 JavaScript、单一依赖、无构建步骤。

HubaKing6
Bundle

@jieai/dsh-plugin-vet

Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.

wulun8113
Bundle

dsh-plugin-security-review

Security review gate for DeepSeek Harness (dsh) plugins: static pre-install vetting of malicious code, vulnerabilities and supply-chain risks (with deobfuscation decoding), runtime audit, optional tool-call guard, and a one-click web review/install/uninstall panel.

ateen183
Bundle

dsh-capability-receipt

Content-addressed receipts for skills actually loaded by DeepSeek Harness

dongsheng1231323
Bundle

dsh-statecore

Native memory for DeepSeek Harness — auditable facts with evidence chains, powered by StateCore

yul7612
Bundle

@jyleaves/dsh-win-bash-fix

Windows Git Bash fix for DeepSeek Harness (dsh): MSYS sandbox conflict + terminal inspector, plus the minimal-win collective-thinking preset (we/let's reasoning chain).

Jyleaves2
Bundle

dsh-guardwall

Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.

iiiweiii2
Bundle

dsh-plugin-gate

Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources for malicious install scripts, credential theft, obfuscation, persistence and network callbacks before 'dsh plugin add', plus 12 destructive-command patterns and workspace-boundary checks against accidental deletion. | 安装安全闸门与数据保护闸:60 条静态签名规则(31 高危/24 中危/5 低危)扫描插件恶意行为、持久化与外传,12 种危险命令模式与边界检查拦截误删。

8636833481
Bundle

eco-dsh-plugins

dsh plugins ported from eco-agent: permission gate, audit chain, memory tree

xiejianjun0001
Bundle

dsh-capcheck

V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.

heming-gmh1
Bundle

dsh-provenance

Pre-install supply-chain provenance checks for DeepSeek Harness plugins: verify the tarball you're about to install matches the source you read, before any code runs. Never executes the audited package.

Darren-Tang1
Bundle

@mkaliezz/dsh-dependency-firewall

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

MkaliezZ1
Bundle

dsh-skillx

A safe external-skill discovery and adoption bundle for DeepSeek Harness

drowned-fish11
Bundle

dsh-poison-guard

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.

zoahdev1
Bundle

mcp-cap

What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.

liyixuan2012111
Bundle

correctover

AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.

Guigui Wang
Bundle

dsh-xray-plugin

Look up what a DeepSeek Harness plugin can actually do, from inside dsh.

unStone
Bundle

dsh-plugin-trust-center

Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.

TonyWang-hub