dsh-web-search-router: Free Multi-Provider Search Router for DeepSeek Harness
The `dsh-web-search-router` plugin provides a free and flexible alternative for Web search in DeepSeek Harness. It first attempts keyless parallel search, then falls back to configured APIs such as Tavily and Exa as needed or upon failure. The plugin features dynamic sorting, real-time quota refresh, result de-duplication and merging, and provider cooldown mechanisms. During installation, add the required dependency under `~/.dsh/profiles/web` and restart. API keys are managed through the DSH page, with relatively high security, making it suitable for scenarios that require managing multiple providers or avoiding paid dependencies.
Read Moredsh-tool-jwt: DeepSeek Harness JWT Tool Plugin
The DSH ecosystem plugin `dsh-tool-jwt` is designed to address the inefficiency and error-proneness of JWT parsing, issuance, and verification in intelligent agent development. Built on Node.js built-in modules, it provides three core capabilities: parsing without signature verification, token issuance, and full verification, including algorithm checks, timing-attack resistance, and expiration validation. The plugin can be installed via a Profile Bundle and enforces a strict security model with input constraints, making it suitable for development and integration testing scenarios.
Read Moredsh-lark-bridge: Feishu Agent Bridge for the DeepSeek Harness Plugin
`dsh-lark-bridge` is a Lark ecosystem plugin for DeepSeek Harness, designed to address the limitation that AI assistants cannot directly access Lark content. It provides core features including credential parsing, document reading, Bitable read/write operations, message sending, and agent invocation, with secure configuration supported through environment variables. It also supports private chat inbound, establishing a long-lived connection to handle direct messages, enabling DSH agents to operate as Lark bots for office automation.
Read Moredsh-balance-whale: DeepSeek Harness Floating Balance Component
`dsh-balance-whale` is a client plugin for DeepSeek Harness (DSH) that addresses the pain point of frequently switching tabs to check balance. It displays the remaining API quota in real time via a floating whale girl icon in the bottom-right corner. The plugin supports automatic refresh (every 60 seconds), interactive detail cards, and security mechanisms: the API key is only read by the Host process, is not transmitted to the browser, and only local requests are monitored. Installation requires building from source and registering the plugin, with no additional configuration needed, making it suitable for privacy-conscious local developers.
Read Moredsh-balance-local: DeepSeek Harness Balance Inquiry Plugin
`dsh-balance-local` is a DeepSeek Harness plugin designed to monitor API balances locally. It integrates queries into the DSH interface, providing an intuitive settings panel and input-field badges, with automatic refresh enabled by default every 60 seconds. Its core value lies in security: the API key is parsed only by the Host process, data is masked before being returned, and remote access is prohibited by default. Installation requires building from source and configuring Cordis. After installation, it automatically reuses keys from the `dsh` credential store, requiring no additional configuration.
Read MoreDeepSeek Harness Plugin Control: Instant Start/Stop for Third-Party Plugins
`dsh-plugin-control` is a web-based management plugin for DeepSeek Harness (DSH). It addresses the limitations of traditional configuration file management—requiring restarts and being error-prone—by providing real-time plugin start/stop, state persistence, and rollback on error. It supports Chinese and English interfaces and includes safety mechanisms to prevent accidental operation of core plugins. This tool is suitable for developers who frequently test plugin combinations and has been verified to work with DSH 0.1.0-rc.6. After installation, restart the service; plugin states can then be managed from the Web settings page.
Read Moredsh-runbook-ops: DeepSeek Harness Workflow Orchestration Plugin
dsh-runbook-ops is a plugin for DeepSeek Harness designed to address the challenges of validating, reusing, and auditing process definitions. It provides Standard Operating Procedures (SOPs) as structured YAML and does not replace the Harness execution system; instead, it generates actionable guidance. The plugin supports listing, reading, and validating runbooks, as well as controlling execution. After installation, the runbook directory is specified via a configuration file, and final execution relies on Harness’s existing tools and approval system, ensuring process security and auditability.
Read MoreDeepSeek Harness Plugin: dsh-silent-pwsh
`dsh-silent-pwsh` is a client plugin for DeepSeek-Harness designed to resolve the disruption caused by sandbox processes popping up black console windows. It enables silent execution by hiding windows and fixes flickering issues during task tree termination and sandbox capability probing. Installation requires DeepSeek-Harness, Node, and pnpm to already be installed on the system and can be done via the official command or a local script. The plugin is self-healing and automatically checks patch status at startup. Additionally, the documentation provides methods for customizing the installation directory and resolving dependency conflicts.
Read Moredsh-migrate-codex: Securely Migrating DSH Plugins for Codex Environments
`dsh-migrate-codex` is a security plugin for DeepSeek Harness designed to address the risks of missing files and credential leakage during cross-machine migration of Codex environments. The plugin provides a standard `prepare`, `verify`, and `restore` workflow. It uses a whitelist mechanism to migrate only authorized repositories and automatically excludes sensitive files, such as `.git/config` and private keys, to ensure secure migration. It also supports restoring a single working tree and validates SHA256SUMS before restoration, ensuring data integrity and operational idempotency.
Read MoreDeepSeek Harness Plugin: DSH Hacker Terminal Theme
The DeepSeek Harness (DSH) Terminal Hacker Theme plugin provides a visual reskin for the Web UI, featuring a green background, Matrix-style droplets, and glassy textures. It supports automatic installation and activation, and includes a HUD status bar, specific font configuration, and accessibility and privacy protections. As a standalone bundle, it has no runtime dependencies, strictly cleans up injected content upon uninstallation, and does not send any data. It is currently available for the DSH developer preview.
Read Moredsh-regression: Translating Coding Agent Fixes into Executable Regression Tests
Under the DeepSeek Harness (DSH) plugin ecosystem, `dsh-regression` is designed to convert coding agents’ corrective actions into executable regression testing workflows. While the plugin is maintained by developers, its detailed feature list, installation commands, and usage examples have not yet been thoroughly documented in public information. Before use, it is important to review its source code logic and permission requirements. For more details, refer to its GitHub repository or plugin directory page.
Read Moredsh-tool-playwright: Enabling AI to See and Interact with Web Pages in the Browser
dsh-tool-playwright is a native port of Microsoft Playwright. As a plugin for DeepSeek Harness, it gives AI direct control over a real browser, enabling it to operate web pages, fill out forms, and scrape data just like a human. The plugin does not require a separate server and runs directly inside Harness. To install it, clone the codebase and register it using the link method, then restart Harness to make it take effect. It provides page navigation, interaction, screenshots, multi-tab management, and advanced debugging features, and must be configured via cordis.patch.yml. This tool integrates browser automation capabilities into Harness and simplifies the process of building agents with internet-interaction capabilities.
Read MoreStatic Security Audit Plugin for DeepSeek Harness Dynamic Cordis Plugin
The `dsh-plugin-security-audit` plugin for DeepSeek Harness (DSH) aims to provide a zero-token static security audit for dynamic plugins. It uses 16 rules to scan source code during the `cordis_define` and `cordis_run` stages, identifying dangerous capabilities, data exfiltration, and anti-patterns. The plugin adopts a fail-open design, triggering user approval only when Critical or High-level risks are detected and injecting the risk report into the conversation flow. It is installed via npm and helps developers identify high-risk patterns, but it does not provide hard blocking functionality.
Read MoreDeepSeek Harness Aggregated Web Search Plugin
The `dsh-web-search-aggregation` plugin unifies multiple search providers—including AnySearch, TinyFish, and Tavily—into a single entry point. It enhances availability through a priority queue and an ordered fallback mechanism, supporting multi-key pool rotation, budget-aware timeouts, and real-time configuration. This plugin addresses the issue of a single search service becoming unavailable and is well suited for high-availability web search scenarios involving DeepSeek Harness agents.
Read Moredsh-web-fetch-playwright: Provides Real Browser Rendering Capabilities for DSH web_fetch
`dsh-web-fetch-playwright` is a DeepSeek Harness (DSH) plugin that uses Playwright to resolve missing-content issues when the native `web_fetch` tool fetches dynamic web pages. It supports both local and CDP backend modes, rendering SPA content in a real browser. The plugin provides content denoising (Readability, DOMPurify), Markdown conversion, resource limits, and Cloudflare challenge waiting, ensuring clean and configurable fetched content. To install it, restart `dsh web` and configure it in the settings panel.
Read Moredsh-cdp-live-view: DSH Sidebar CDP Live View Plugin
dsh-cdp-live-view is a DeepSeek Harness (DSH) plugin that uses the Chrome DevTools Protocol (CDP) to render remote or headless Chromium browser sessions in real time in a Web GUI sidebar. It supports viewing page pixel streams, managing targets, navigating, and controlled mouse/keyboard interaction, with interaction gated by a dual-switch control. It aims to provide a secure remote visualization solution, suitable for debugging automation workflows or as a lightweight VNC alternative. Installation requires DSH ≥20 and `dsh-better-sidebar`.
Read Moredsh-token-monitor: DeepSeek Harness Real-Time Usage and Balance Monitoring Plugin
The `dsh-token-monitor` plugin provides real-time token usage statistics and balance queries for DeepSeek Harness (DSH). It listens to event streams to persistently store usage data and securely queries the official balance using a Node child process and OpenSSL. The plugin displays a fixed floating widget, supports light and dark themes, and offers collapsible styling. It can be installed via CLI or manual configuration, provides a local API endpoint for data retrieval, and keeps the API key from passing through the browser, with access limited to the local machine.
Read Moredsh-security-doctor: One-Click Security Health Check for DeepSeek Harness
`dsh-security-doctor` is a one-click local security health-check tool for DeepSeek Harness, with its core value lying in “read-only” access and “zero outbound transmission.” Through static scanning and configuration auditing, it checks `!!js` expressions, third-party plugins, credential permissions, outbound intent, and protection policies, and provides a graded report with remediation recommendations. Its experimental “guardian mode” can also monitor outbound requests and detect environment changes. After installation, `dsh web` must be restarted for the tool to take effect, making it suitable for developers focused on local environment security.
Read Moredsh-scan-mcp: An MCP Server Connection Discovery and Management Tool for Windows
dsh-scan-mcp is an MCP Hub plugin designed specifically for DeepSeek Harness (DSH) on the Windows platform. It automatically scans local MCP configurations in Claude Code, Codex, and CodeBuddy, and validates service connectivity using real `initialize` handshakes with support for both stdio and HTTP protocols. This plugin provides an interactive UI for enable/disable management, real-time status detection, and tool exposure, helping developers resolve the disconnect between configuration and actual connectivity.
Read Moredsh-skill-stats: Skill Invocation Statistics Plugin
`dsh-skill-stats` is a skill library maintenance plugin for DeepSeek Harness (DSH). It tracks skill invocation counts using dual-channel data (historical replay and real-time subscription), and provides session views, a global dashboard, and SVG trend charts. The plugin supports incremental caching to speed up startup and can mark removed skills, helping developers identify and clean up idle skills.
Read Moredsh-plugin-global-prompt: Injecting a Global Prompt into DSH
`dsh-plugin-global-prompt` is a DeepSeek Harness plugin designed to address the pain point of repeatedly configuring system prompts. By adding an input field under general settings, users can configure a prompt that is permanently injected into the system prompt across every model interaction, including sub-agents. The plugin saves the configuration in `$DSH_HOME/settings.yaml`, supports hot reloading, and enforces a 20,000-character limit. Users can disable it by leaving the field empty, and it does not pollute conversation history or override the Persona. The article provides a sample prompt based on the “Four-Quadrant Decision Protocol” for reference.
Read Moredsh-ocsf-forwarder: OCSF 1.9.0 Session Activity Forwarder for DeepSeek Harness
The `dsh-ocsf-forwarder` plugin standardizes DeepSeek Harness (DSH) event streams into OCSF 1.9.0 format for Security Operations Center (SOC) use. It handles session lifecycle, tool call classification, and approval decisions, while supporting privacy protection and data integrity chain validation. The plugin must run with a specific version of the DSH agent and can be configured via YAML to send logs to receivers such as Splunk or OTLP. This tool is primarily intended for auditing and data analytics, but it is not a security containment boundary and does not provide detection or alerting capabilities.
Read Moredsh-netguard: Egress Policies and Host Allowlist Plugin for DeepSeek Harness
`dsh-netguard` is a plugin for DeepSeek Harness (DSH) that addresses shortcomings in its sandbox mechanism for controlling network traffic. The plugin provides hostname checks, parameter pre-checks, and audit logging, operating in audit-only mode by default. During installation, ensure Harness version compatibility and explicitly enable `fetchProvider` in the configuration. When deploying it, an audit-before-enforcement approach is recommended; however, note that it cannot detect URLs passed through variables and cannot fully prevent data leakage via proxy channels.
Read Moredsh-dlp: DeepSeek Harness Data Loss Prevention Plugin
`dsh-dlp` is a Data Loss Prevention plugin for DeepSeek Harness, designed to intercept credential requests, redact sensitive information, and limit potential risks. Its core features include unconditionally denying access to credential files, redacting tool results and telemetry, detecting payment card numbers and invisible characters, and detecting tool-call rewriting. The plugin offers Low, Medium, and High aggressiveness levels and supports audit logging and pre-write confirmation. Installation is simple and requires configuring key files and redaction toggles. Note that the plugin runs in-process, intercepts only model tool requests, cannot prevent already-running code, and may be bypassed.
Read Moredsh-voice: DeepSeek Harness Voice Input Plugin
dsh-voice is a voice input plugin for DeepSeek Harness (DSH). It adds a microphone button to the bottom-right corner of the input box and supports one-click recording-to-text. The plugin provides three speech recognition engines: `webspeech`, `xfyun` (iFlytek), and `whisper`, and supports multi-device selection, automatic gain, and stitching of long utterances. Installation requires executing a specific command and restarting the service, with the configuration file located in `client.js`. Using the iFlytek engine requires setting local environment variables or the configuration file. On Chrome in mainland China, `webspeech` may cause errors, and the recognition language for `whisper` must be set manually.
Read More