Bundle
dsh-capcheck
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
heming-gmh
Browse
184 results
Bundle
dsh-security-hardening
安全加固：威胁建模（STRIDE）+ 三层边界系统，任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills（88k★ MIT）启发。
satan9394
Bundle
dsh-plugin-browser-use
Browser-automation tools for DeepSeek Harness (dsh): Chromium via playwright-core behind a security-first navigation policy re-checked on every action
coderdailyone
Bundle
@xiaobanli/dsh-enterprise-compliance
Enterprise compliance for DeepSeek Harness — SOC2/GDPR automated checks, sensitive-info redaction, and a redacted tool audit trail. · DSH 企业级合规插件：SOC2/GDPR 自动化合规自检、敏感信息拦截与脱敏、操作日志审计追溯。
xiaoliang2
Bundle
dsh-xray-plugin
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
unStone
Bundle
dsh-install-guard
Guard DeepSeek Harness npm installs with vulnerability, license, bundle-size, and package-health audits.
niaccky
Bundle
dsh-sast-security
SQL 优化模式：EXPLAIN 分析、索引策略、N+1 解决、查询改写。受 wshobson/agents（38k★ MIT）启发。
satan9394
Bundle
dsh-rgate
Remote access login gate for the DeepSeek Harness Web UI: a password wall in front of non-loopback access, session cookies, an injected browser-side gate, and a Remote Access settings section. The /api RPC surface is authenticated by dsh itself.
raomaiping-hash
Bundle
dsh-plugin-security-audit
DeepSeek Harness plugin: run a live security health check on the deployment (credential file permissions, process-env secrets, permission/approval mode, telemetry, anonymous id, LAN exposure, sandbox backend) and get an actionable report mapping each finding to upstream discussions.
truelove-dreamer
Bundle
dsh-safe-web-fetch
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
MostlyHarmlessxyz
Bundle
@agentvalet/dsh
Governed platform access for DeepSeek Harness — no credential on the machine
AgentValet
Bundle
dsh-depguard
DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".
DeLightor
Bundle
dsh-capsule
OS-isolated capability capsules for third-party DeepSeek Harness plugins
2-c-q
Bundle
dsh-runtime-nutrition-label
Evidence-backed runtime nutrition labels for DeepSeek Harness plugins and tool namespaces
biubiukam
Bundle
dsh-secret-scan
敏感信息扫描：递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码，输出去敏感化的位置与严重级，提交前自查安全
uckkk
Bundle
dsh-plugin-safe-install
DSH (DeepSeek Harness) plugin that bundles the battle-tested 'safe plugin installation' skill: audit candidates, install one at a time, verify through five levels, and uninstall cleanly. Built from a real beginner's painful install journey.
rouyiemei
Bundle
dsh-windows-workspace-guard
Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.
julescules
Bundle
dsh-plugin-gate
Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff), structured reports (gate_report), 12 destructive-command patterns and workspace-boundary checks.
863683348
Bundle
dsh-taintguard
Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin and gates privileged tool calls that follow untrusted content
sashankh
Bundle
dsh-agent-observe
Agent observability plugin for DSH — behavior audit, cost tracking, anomaly detection
dsh-plugin-evaluation
Bundle
dsh-sentinel
DeepSeek Harness 插件安全体检官 —— 静态扫描 + 运行时副作用追踪，为 4300+ 插件建立安装前必看体检报告
scodypanda
Bundle
dsh-secure-gate
🛡️ DeepSeek Harness 高级安全认证网关：支持 Argon2id 密码、CSRF 保护、账户锁定、IP 访问控制、审计日志、会话管理、TOTP 两步验证及 WebAuthn/通行密钥预备。零配置启动，即装即用。
xingjisen
Bundle
dsh-auth-lock
Host-authenticated password gate for the DSH Web GUI, API, SSE, and WebSockets
imchenmin
Bundle
dsh-login
Password gate for dsh-web: opening the web port requires a username/password login; account credentials are stored salted+scrypt-hashed and AES-256-GCM encrypted in a local config file under $DSH_HOME. Host-only cordis plugin, no dsh source changes.
ravenli059