dsh-email-board: DeepSeek Harness Email Board Plugin
`dsh-email-board` is a read-only email dashboard plugin for DeepSeek Harness (DSH). It directly uses the IMAP connection pool from `dsh-email` to aggregate and display unread emails from multiple accounts in the right sidebar of the web interface, consuming no tokens and leaving no traces. It supports customizing the number of emails shown per account, cache, and timeout settings, includes same-origin security protection, and is suitable for quickly checking email status during development.
Read Moredsh-abaqus: A DeepSeek Harness Plugin for Driving Abaqus/CalculiX Modeling
`dsh-abaqus` is a DeepSeek Harness (DSH) plugin designed to drive the entire finite element analysis workflow in Abaqus or CalculiX via declarative JSON specifications. It supports modeling, meshing, solving, and result reading, is maintained by feihong-li, and is licensed under the MIT License. Core features include defining model parameters with JSON specs, supporting both Abaqus CAE (commercial license required) and CalculiX (free and open-source) backends, and providing an environment detection, job submission, status query, and `.frd` result parsing toolchain. Installation requires Node.js >= 20, with the solver path configured through a configuration file. The notes indicate that the CalculiX backend has been verified to work,
Read Moredsh-content-trust: Check Whether the Agent Treats External Content as Instructions
The `dsh-content-trust` plugin is designed to mitigate indirect prompt injection risks in DeepSeek Harness agents. It establishes a trust boundary for external content and detects critical, high, and medium-severity security vulnerabilities before the content enters the Prompt. The plugin makes determinations by recognizing markers and naming conventions, but it does not perform data flow analysis. After installation, you can run a command to test it. Its design follows the "everything is a plugin" philosophy and works with `dsh-ai-output-trust`, handling input and output security checks, respectively.
Read Moredsh-consent-guard: User Consent and Authorization Confirmation
`dsh-consent-guard` is a DeepSeek Harness (DSH) plugin for checking the compliance of user consent mechanisms. It primarily addresses common violations under the Personal Information Protection Law, such as pre-ticked checkboxes, collecting personal information without consent, bundled consent, and the absence of a consent withdrawal entry. It can be installed via CLI or npm and can scan codebases to identify potential risks. Note that the plugin only analyzes code; it does not determine actual pop-ups, UI comprehension, or necessity, and users are responsible for their own legal liability.
Read Moredsh-cn-mlps: Static MLPS Compliance Checks Based on GB/T 22239-2019
The DeepSeek Harness plugin `dsh-cn-mlps` is a compliance checking tool based on the GB/T 22239-2019 standard. It uses static analysis to scan code and configurations during the development stage, focusing on detecting issues such as default passwords, weak hashing algorithms, plaintext transmission, and debug information leakage. It helps developers remediate risks early and reduce remediation pressure in subsequent Multi-Level Protection Scheme assessments. This plugin focuses on static configuration checks and does not cover the physical environment, personnel management, or operational processes, nor can it replace professional assessments. After installation, you can run demos, list rules, and generate HTML reports via CLI commands.
Read Moredsh-cn-log-retention: Log Retention Compliance Check
dsh-cn-log-retention is a compliance-checking plugin for DeepSeek Harness (DSH), designed to ensure that application-layer logs are retained for at least six months in accordance with the Cybersecurity Law. It checks whether logging is enabled, log record completeness, retention-period compliance (retention of less than 180 days is treated as high priority), log levels, sensitive information leakage, and log solution configuration. It supports displaying results via commands, listing the basis of the rules, and generating HTML reports. Note: The plugin does not make determinations on missing items, checks only application-layer configuration, does not validate storage immutability, and users must assume their own compliance risks.
Read Moredsh-cn-filing: Filing Public Notice Check
This plugin is used to check whether an application includes ICP and APP filing numbers, a privacy policy entry point, and operator information to meet compliance requirements. In the DeepSeek Harness environment, it can be installed and the detection can be run via the specified commands. Please note that mobile rules only apply to certain project types, the plugin only checks for existence and does not perform online validation, and it does not cover Mini Program filing. By using this tool, you must comply with applicable laws and regulations and assume responsibility for your own use.
Read MoreDSH Plugin: Data Export Check (`dsh-cn-data-export`)
This plugin is used to check code and configuration files for data exports to foreign jurisdictions, outbound transfer of personal information, and security assessment statements. Developers can install it in a `dsh` environment and use the `dsh-cn-data-export` command-line tool to perform scans and generate HTML reports. The plugin covers common overseas SaaS/cloud service domains, but does not perform data flow analysis and cannot automatically determine whether an operation constitutes cross-border data export, requiring manual confirmation. It primarily works in coordination with the `dsh-data-scan` plugin to help locate data flows.
Read MoreDeepSeek Harness Plugin: dsh-ci-guard
GitHub Actions workflows can become entry points for supply chain attacks due to configuration oversight. `dsh-ci-guard` is an inspection tool that helps developers identify and remediate security vulnerabilities. It supports checking for issues such as unpinned versions, excessive permissions, script injection, and sensitive information leakage, and provides HTML reports. The tool uses regular expressions to match YAML and is limited to GitHub Actions, making it suitable for managing CI/CD security risks in the DeepSeek Harness environment.
Read More@deepwhale-cn/dsh-alert-relay: Auditing Alert Pipeline Configuration and Sensitive Data Leakage Risks
The alerting channels of DeepSeek Harness (DSH) often leak sensitive information due to insufficient controls. The @deepwhale-cn/dsh-alert-relay plugin introduced in this article is used to statically check alert pipeline configurations, ensuring that alerts send only summaries and necessary details rather than full stack traces or user data. It provides five core features: detecting whether alerts exist, validating delivery targets, identifying sensitive information, checking plaintext HTTP usage, and discovering secret URLs in logs. Users can install it through the dsh command or npx and run a demo mode to generate a check report. The plugin helps standardize alert delivery policies, works alongside the log-retention plugin, and aims to address chained security issues through the plugin ecosystem.
Read Moredsh-ai-output-trust: Check Whether Code Directly Executes AI Output
The DeepSeek Harness plugin `dsh-ai-output-trust` is designed to detect high-risk output handling operations in large model applications. It primarily detects four high-risk usages: code execution, shell commands, SQL injection, and path traversal. By identifying variables with specific naming patterns (such as `ai*` / `llm*`), it locates potential risk points while avoiding false positives, and provides the ability to generate an HTML inspection report. This tool aims to help developers build a more secure trust boundary for AI outputs.
Read Morebearing-notes: DeepSeek Harness Literature Knowledge Base Plugin
bearing-notes is a literature note plugin for DeepSeek Harness, designed to help users efficiently organize knowledge from literature. It supports recording Markdown notes while reading and compiling them into Word documents, and uses built-in prompts to review notes for domain-specific accuracy, provide risk warnings, and extend knowledge. In addition, the plugin features robust terminology translation constraints, with a built-in glossary of 214 manually curated terms. Through term locking, mistranslation prohibitions, and automatic re-translation mechanisms, it addresses the problem of inaccurate translations of proper nouns. Although the Word output format is limited and relies on a JSONL data stream, the plugin can effectively assist engineers in building structured knowledge bases in specific domains.
Read Moredsh-mcp-scanner: An MCP Server Management Tool for DeepSeek Harness
This is a plugin for DeepSeek Harness (DSH) that simplifies scanning and managing MCP servers and their tools through a graphical interface. It supports full lifecycle operations (CRUD), multiple transport protocols, and host mount detection. The plugin depends on `@deepseek-ai/dsh-mcp-client`, stores configuration in `$DSH_HOME/mcp-servers.json`, and includes security mechanisms to protect local APIs. Developers can intuitively debug and configure MCP tools on the settings page.
Read MoreDeepSeek Harness Local MCP Management Plugin
The DSH plugin `dsh-mcp-native` aims to simplify local management of Model Context Protocol (MCP) servers through an “everything is a plugin” philosophy. It manages MCP servers as native Loader rows in a card-based interface, supporting searching, filtering, starting/stopping, restarting, configuration editing (including JSON mode), and importing configurations from clients such as Claude Desktop. The plugin is hand-written with zero dependencies, but has limitations: it cannot detect connection status in real time, supports only stdio and streamable-http transports, lacks single-point control for service restarts, and does not stop by default when startup fails. It is recommended to use it only in trusted environments.
Read MoreDSH Plugin Introduction: dsh-doxygen - C/C++ Doxygen Commenting Workflow
`dsh-doxygen` is a DeepSeek Harness plugin designed to address the pain point of maintaining Doxygen comments in C/C++ projects. It provides function locating, generation of six comment templates, incremental completion, and code-documentation synchronization validation based on 16-bit signature fingerprints. By parsing function signatures and comparing fingerprints, it can automatically flag outdated comments and support scanning and updating from a single function to an entire repository. The plugin operates in a safe mode and prints only a diff preview by default, ensuring that changes are applied only after user confirmation. It is a practical tool for improving documentation maintenance efficiency.
Read Moredsh-desktop-notifications: Native Windows Notifications for DeepSeek Harness
`dsh-desktop-notifications` is a native desktop notification plugin built specifically for DeepSeek Harness (DSH) on Windows. It addresses the issue of not promptly detecting approvals, questions, run status, and errors while running in the background. The plugin supports five scenarios—approval, question, run completion, error, and login expiration—provides real-time responses and audit logs, and automatically cleans up Markdown formatting. Users need to enable the plugin in DSH and configure options such as notification toggles, delays, and sound effects via a configuration file or the GUI. The tool relies on a PowerShell mechanism and requires a Node 20+ environment.
Read Moredsh-service-board: View Services Started by Agent Session
`dsh-service-board` is a DSH plugin designed to provide intuitive management of background services through a Web GUI sidebar. Developed based on an upstream fork, it supports grouping by session, three-state health detection, real-time colorized log viewing, and process control (restart/stop). The panel uses a docked design, supports fullscreen and filtering, and requires the `DSH_SESSION_ID` and `DSH_PB_LOG` environment variables to be set in order to be recognized. It primarily relies on Windows WMI and PEB mechanisms to obtain process information, and currently supports only the Windows platform.
Read Moredsh-knowledge-lite: A Local Markdown Knowledge Base Plugin
dsh-knowledge-lite is a local knowledge base plugin designed specifically for DeepSeek Harness. It stores notes locally as Markdown files and supports full-text search, hierarchical directory management, and drag-and-drop file movement. The plugin provides robust attachment handling, automatically parses Office documents and code files, and allows users to organize conversations into notes. It can be installed via the plugin marketplace or manually; note the default path configuration on Windows systems and host version compatibility requirements.
Read Moredsh-openrouter-imagen-v2: An Image Generation Plugin Based on OpenRouter
`dsh-openrouter-imagen-v2` is an image generation plugin for DeepSeek Harness (DSH) that leverages the OpenRouter API to provide a standalone workbench and Agent tools. It supports features such as manual or AI-generated images, reference images, model management, and seed backfill. Installation requires DSH 0.2.x, and it is ready to use after configuring the OpenRouter key. When invoked by Agent, the tool can generate a single PNG at a time and supports multiple resolutions and parameter configurations.
Read Moredsh-approval-policy
The DeepSeek Harness plugin addresses the issue of unattended approval requests hanging indefinitely. In dsh >= 0.2.0-rc.2, requests can stall if an interactive answerer is registered but never responds. The plugin introduces a pre-gate in the waterfall approval flow and provides a bounded response window (defaulting to 60 seconds) for unattended requests, after which the request is settled using the default decision. It is installed via npm, configured in `cordis.patch.yml`, and supports control by source (such as subagent, scheduled, or cron) or by session. It does not require additional on-disk state, relies only on host logs, and its default timeout decision supports only `rejected` or `unavailable`.
Read More@aiwayds/dsh-agent-dispatch: Pre-Dispatch Suggestion Plugin for DeepSeek Harness
The dsh-agent-dispatch plugin in the DeepSeek Harness (DSH) ecosystem is designed to provide “pre-dispatch suggestions” for intelligent agents. It does not perform actual delegation; instead, it uses TypeSafe Jev to determine, before a turn begins, whether a task should be handed to a registered agent, and appends a suggestion to the end of the message. The plugin supports three modes. In the default `auto` mode, it first filters requests through a local keyword gate, and after a match, invokes Jev to evaluate four atomic questions: whether to dispatch, to which agent, whether it is risky, and whether it is time-consuming. The plugin features secure key parsing, real-time Capability Gate validation, and dynamic Roster reading, strictly limits outbound data, and is suitable for users who need fine-grained control over agent dispatch.
Read Moredsh-plugin-usage-stats: Token Usage Statistics for All Sessions
dsh-plugin-usage-stats is a web plugin for DeepSeek Harness (DSH) that provides an intuitive dashboard for monitoring token consumption and caching. The plugin does not modify requests or inject prompts; it directly reads adapter data and is ready to use immediately after installation. The dashboard includes overview cards, a GitHub-style daily heatmap, stacked input/output trend charts, model usage donut charts, and detailed tables, and supports switching between 7-day, 30-day, and all-time ranges to help developers monitor costs and caching effectiveness with greater precision.
Read Moredsh-account-glance: DSH Web GUI Sidebar Account Balance and Billing Overview
`dsh-account-glance` is a client plugin for DeepSeek Harness (DSH), designed to compactly display key account information in the sidebar. Core features include real-time balance lookup, peak/off-peak billing countdown (with 50% discount support), and today's consumption statistics and call count. It is compatible with `@linxin666/dsh-usage` and can automatically hide the built-in card from that plugin. Installation is easy, the code is self-contained, data is transmitted via secure routes, and it adapts to both the Web GUI and collapsed sidebar states.
Read Moredsh-model-in-use: Model Menu Occupancy Flag and Gear Memory
The DSH Web Cordis plugin is designed to address the difficulty of identifying model occupancy status in the model menu during multi-session use and the issue of inference settings being reset. Core features include marking occupied models with green dots and group indicators, remembering and restoring each model's inference setting, preserving the collapsed state of provider groups, fixing visual spacing, enhancing the visual effect of sticky headers, and displaying the current model and setting in session floating cards. After installation, DSH must be fully restarted for the plugin to take effect. The plugin does not modify the host and only provides visual feedback and state persistence.
Read Moredsh-whale-inurqq: A QQ Client Integrated with DeepSeek Harness
`dsh-whale-inurqq` is a OneBot 11 protocol plugin that connects QQ with DeepSeek Harness. It handles message routing and session management, with core features including message normalization, persistent bridging sessions, a context handover mechanism, and turn-initiator determination based on `rpcId`. The plugin depends on protocol endpoints such as NapCat and supports inheriting DSH permission presets for QQ-triggered sessions. The author recommends tightening default permissions to mitigate risks. Persistent sessions are enabled by default, and the handover threshold can be adjusted through configuration. Users of the legacy `dsh-qq` plugin need to manually migrate their data directories. After installation, a reverse WebSocket client must be configured in NapCat to enable communication.
Read More