Skip to content
dsh.fish

Browse

110 results

Bundle

dsh-auto-approve

Automatic review of sandbox escalation requests for DeepSeek Harness, plus an /approve slash command for manually approving auto-denied actions (Codex Guardian-style)

xiuyuan18
Bundle

dsh-managed-approval

Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.

jalllychun
Bundle

dsh-vscode

DeepSeek Harness tool plugin: open files, folders, and diff views in the local Visual Studio Code (open_in_vscode tool), spawning Code.exe directly so the sandboxed shell cannot block it.

Hyna-hla
Bundle

dsh-workspace-scope-selection

A fourth permission option for DeepSeek Harness sessions: selected-workspace-write, where the user opens the workspace directory tree and toggles which directories the agent may write to.

jiangr100
Bundle

dsh-silent-pwsh

Self-healing DeepSeek-Harness plugin: keeps confined pwsh/bash console windows invisible (SW_HIDE) on Windows — no black console flash on every sandboxed command.

chengyimingvb
Bundle

dsh-security-audit

Autonomous six-phase security audit engine for DSH: vendored cloudflare/security-audit-skill + sandboxed execution + subagent orchestration

MarchLiu
Bundle

dsh-code-runtime-container

Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings

tancheng33
Bundle

winada-dsh-telegram-bridge

A DSH profile bundle that ships the Telegram ↔ DeepSeek Harness bridge as a model-callable install tool. Requires the session sandbox policy to allow subprocess TLS to api.telegram.org (danger-full-access in the default sandbox policy).

winada82
Bundle

dsh-capcheck

V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.

heming-gmh
Bundle

dsh-access-mode

Standalone DeepSeek Harness access-mode plugin with Default, No Edit, and Auto modes

ddll8023
Bundle

dsh-tool-docx

Model-facing MS Word (.docx) tools: read documents as Markdown or structured blocks, create documents from Markdown, and edit documents round-trip; ships binary fs providers (writeBytes, incl. a sandbox-preserving one) for hosts without it

BroBFG
Bundle

dsh-task-console

DSH client plugin — flip to the back of the page for a floating glass task console: live background jobs, subagents, session overview and workspace of the current session, with mouse-draggable and mouse-resizable cards (bottom-right handle, size persisted per card). Maximizing a card unrolls its controls onto the card's own canvas, where every control is a draggable, editable item and the board card stays a live thumbnail whose control order follows that arrangement; built-in cards open as a fullscreen view. The top-right card conversation calls a temporary agent session to refactor each card's style and internal controls from natural language, and any conversation can author cards via [taskcard] blocks (text/heading/note/stats/progress/trend/kv/links/chips/checklist/counter/button/table/code/toggle/countdown/bars/image/embed). Embedded web apps can be marked 受控 and routed through the bundled local page bridge (bridge/server.mjs), which injects an agent into the page so the workbench — and the agent — can click, type, scroll and read inside it through [page] action blocks; the app height is dragged on its bottom edge, accurate on the zoomed canvas too. Cards can be published as copies onto a fullscreen infinite canvas with named boards, share strings and a zero-dependency WebSocket relay for multi-user editing, and a right-hand dock renders the project's archify architecture diagram (embedded, sandboxed, resizable).

He2way
Bundle

@deepseek-ai/dsh-escalation-tolerance

Tolerate redundant sandbox_permissions requests: a tool call asking to escalate to a mode that is not strictly wider than the session's standing mode runs as-is at the standing mode instead of failing with "not strictly wider". Genuine escalations still route through the approval flow.

ericleoo
Bundle

dsh-capsule

OS-isolated capability capsules for third-party DeepSeek Harness plugins

2-c-q
Bundle

@deepseek-ai/dsh-plugin-canvas

Canvas preview plugin for DeepSeek Harness (DSH): a 画布 (Canvas) tab next to chat/trajectory for interactive HTML design prototyping, with canvas_preview model tool (render/annotate/clear), local file/URL preview, privacy masking and sandboxed iframe rendering.

Tabbyaccessorial446
Bundle

dsh-sentinel

DeepSeek Harness 插件安全体检官 —— 静态扫描 + 运行时副作用追踪，为 4300+ 插件建立安装前必看体检报告

scodypanda
Bundle

dsh-enter-approve

Press Enter to approve the sandbox permission-escalation prompt in the DeepSeek Harness WebUI instead of clicking the Allow once button.

abcofabc
Bundle

@fonlan/dsh-apply-patch

DSH plugin: a codex-style apply_patch tool (*** Begin Patch / *** Update File / *** Add File / *** Delete File) injected into the model toolset through DSH's built-in sandbox, with a settings card to choose injection scope (off / GPT models only / all models).

fonlan
Bundle

dsh-qapproval-timeout

Approval timeout for DeepSeek Harness: when a sandbox/escalation approval is not answered within a configurable period, the request is automatically rejected instead of waiting forever.

2128627267
Bundle

superpowers-for-dsh

SuperPowers for the DeepSeek Harness: portable Superpowers skills, automatic bootstrap, and DSH-native Windows sandbox compatibility.

Meteor-system
Bundle

dsh-fs-allowlist

Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批（write/edit + bash），设置页可视化调整。

wzn16