dsh-prompt-shield: Perform indirect prompt injection detection before DSH tool results enter model context
dsh-prompt-shield is an MIT-licensed DSH plugin used to detect indirect prompt injection in tool-returned text after tool execution but before results enter the model context. The plugin employs a deterministic rule engine and does not rely on additional model calls or network services, aiming to reduce the risk of high-confidence injection commands being executed. Its detection scope covers instruction override, stealing or exfiltrating secret information, leaking hidden prompts, forging authority markers, Unicode obfuscation, multi-block split instructions, and suspicious content encoded with a single layer of Base64. It supports high-confidence rules for both Chinese and English. Upon triggering, it exposes only the rule ID, score, and fingerprint, without leaking the original text. The plugin provides three working modes: observe (logging only), warn (adding a warning, default mode), and block (isolating and replacing results, recommended for actual protection). Configuration items include...
Read Moredsh-diff-approval: Review pending file changes in DeepSeek Harness
dsh-diff-approval is a DeepSeek Harness (DSH) plugin designed to unify the review of file changes generated by agents via edit, write, and str_replace_editor. The plugin automatically records successful modifications, generates a pending list in the sidebar, and provides a comprehensive file diff view featuring syntax highlighting, line search, and virtualized lines. Its core functionality includes multi-level control options: users can perform Keep or Revert operations on individual code blocks, drag-selected line ranges, entire files, or all changes. Additionally, the plugin supports Ctrl+Z/Ctrl+Y for undo and redo, keyboard shortcuts for quickly switching files, copying line references to the composer, and an optional side-by-side comparison view.
Read Moredsh-plugin-translation: DeepSeek Harness Translation Toolkit
`dsh-plugin-translation` is a translation toolkit designed for DeepSeek Harness (DSH) agents, aimed at simplifying long-text translation workflows. This plugin provides multiple core functions via the `translate_kit` tool: using `segment` for text chunking; utilizing `glossary` series tools to extract, maintain, and perform consistency checks on glossaries; employing `check` for QA on numbers, brackets, length ratios, and punctuation between source and target texts; providing guidelines for formal, conversational, or technical registers via `tone`; and using `memo` series tools to persistently save and retrieve translation memories within the session workspace. Installation requires executing the specified command and restarting DSH, at which point the tool is automatically registered. File operations are restricted to the session workspace to ensure path safety.
Read Moredsh-plugin-focus: Fixing Targets, Constraints, and Decision-Making in the DSH Agent
dsh-plugin-focus is an MIT-licensed plugin for DSH agents designed to address context compression and cross-session information loss. It uses a persistent focus board to record goals, constraints, and decisions, ensuring that key information is stably retained within the model's context. Core features include a focus tool supporting set, get, append, and clear actions, as well as a mechanism that automatically injects focus content into the model context at the start of each round or when changes occur. When clear is executed, old content is automatically archived to a backup file. The plugin provides configurable prompt guide sections, session projection, and an experimental read-only Web panel. After installation, DSH must be restarted. Configuration options cover file paths, archiving strategies, and injection length limits (maxChars), with all file access restricted.
Read Moredsh-plugin-audit: Synchronization, Scanning, and Scoring for the DSH Plugin Ecosystem
`dsh-plugin-audit` is a community plugin ecosystem health check tool for DeepSeek Harness (DSH), designed to automatically evaluate plugin quality and security before installation. It generates scores and detailed reports for each plugin by synchronizing GitHub `dsh-plugin` topics, probing npm package status, and performing static security scans. Core features include a four-dimensional scoring system based on maintainability, documentation, npm activity, and ecosystem signals; a sortable and filterable Web leaderboard; and high-risk static scanning targeting installation scripts and entry source code (the discovery of high-risk issues will directly limit the rating). Version 0.4 also introduces authentic plugin verification, capable of identifying non-standard plugins and restricting their ratings. The tool provides local directory data (e.g., `catalog.json`) and supports via G...
Read More7dgroup-ai/dsh-skill-7d-git-commit: Validate 7DGroup commit specifications in DSH sessions
`7dgroup-ai/dsh-skill-7d-git-commit` is a DSH composite layer plugin (v0.1.0-rc.3, MIT licensed) designed to integrate Git commit convention checks directly into the DSH session. Before executing `git commit`, it performs client-side validation of commit messages based on 7DGroup standards to ensure compliance with team conventions. Core validation rules include: titles must follow the "[Type] Brief Description" format, with no more than 50 characters after the tag and no punctuation at the end; the body is restricted to 70 characters per line and only allows numbered lists; and specific characters and forbidden phrases such as "TODO" are strictly prohibited. The plugin supports 9 Chinese type tags and allows for emergency deployment exemptions. Installation requires Node ^22.19+, pnpm 10+, and specific pnpm configurations.
Read More@7dgroup/dsh-7d-tray-win: Windows system tray and silent launcher for DSH web
`@7dgroup/dsh-7d-tray-win` is a DSH system tray plugin designed specifically for Windows, aimed at simplifying the management of the DeepSeek Harness web service. When `dsh web` is running, the plugin displays a DeepSeek whale icon in the system tray and automatically disappears within 3 seconds after the service stops. Users can open the Web UI by double-clicking the icon; the plugin automatically reads the port from the runtime to avoid hardcoded limitations. The right-click menu provides quick actions, including opening the Web UI, the log directory, restarting the service, and exiting the service. Additionally, the plugin automatically maintains a `DSH.lnk` silent launcher on the desktop to launch the service without a window and automatically open the browser. This plugin is only applicable to Windows 10/11, on non-win...
Read MoreDeepSeek Harness Timeline Navigator: Adding a searchable timeline for long conversations
DeepSeek Harness Timeline Navigator is a lightweight timeline navigation plugin maintained by 7A7K (MIT license), designed to solve the problem of excessive content in long conversations within DeepSeek Harness, which makes it difficult to locate key information. By utilizing the host application's `ChatSnapshot` and `data-chat-anchor-key` contracts, this plugin converts linear conversations into a browsable and searchable structured view without modifying the host source code. Its core features include message search and navigation, grouping and collapsing/expanding by turn, session bookmark management, highlighting currently visible messages, and automatically loading history when jumping to unloaded content. The plugin supports a mobile bottom panel and respects the `prefers-reduced-motion` preference.
Read Moredsh-provider-quota: DSH Web GUI Model Provider Quota Query Plugin
`dsh-provider-quota` is a plugin for the DSH Web GUI designed to query model provider quotas and resolve the issue of scattered balances. It centrally displays account balances, package information, and token usage for providers such as DeepSeek, OpenAI, Moonshot, Zhipu, OpenRouter, SiliconFlow, and Z.AI via a sidebar real-time panel (auto-polling every 60 seconds) and the "Settings → Model Quota" page. The plugin supports both Chinese and English interfaces, and API keys are parsed only on the host side to ensure browser-side security. Installation requires adding the plugin to the `web` profile and configuring the bundle layer stack, followed by restarting the service. Users only need to configure keys on the model page to check status manually or automatically via the sidebar or settings page.
Read Morechicheng-peak: DSH Peak-Valley Reminder Plugin
chicheng-peak is a DSH Web extension designed to address the visualization and notification requirements for DeepSeek API peak-valley pricing periods. Based on DeepSeek's official schedule (peak hours: 09:00–12:00 and 14:00–18:00; off-peak for the rest), the plugin automatically determines the current status and renders an orange (peak) or blue (off-peak) pulsating border along the page edge, while input boxes are also equipped with independent, configurable light effects. Its core functions include sending custom notifications via chicheng-push channels (e.g., Server酱, DingTalk, Telegram) or the messaging-core platform before the switch to peak or off-peak hours, with server-side scheduling ensuring delivery even if the page is closed. Additionally, it supports browser local notifications, adjustable status badge positions, and custom peak hours.
Read Moredsh-codex-shared-pool: Codex Multi-account Pool Plugin for DSH
dsh-codex-shared-pool is a community extension package for DeepSeek Harness (DSH) released under the MIT license. It aims to enhance Codex account management capabilities without modifying core code by utilizing public extension points. This plugin enables users to aggregate multiple Codex accounts into a local account pool, automatically selecting available accounts based on upstream model quotas before each request to avoid manual switching or copying the `auth.json` file. Its core features include adding accounts via an independent OAuth authorization chain, intelligent account scheduling (prioritizing accounts with sufficient quota and early reset times), in-process request flow logging (retaining only status and reasons without recording sensitive content), and preserving Codex's original capabilities such as reasoning and search. It can be configured after installation via Web settings or local TUI commands.
Read Moredsh-vision-bridge: Web DSH DeepSeek Session Image Bridge
dsh-vision-bridge is an MIT-licensed plugin designed specifically for the web version of DSH, aiming to address the issue where pure text models like DeepSeek cannot directly process image inputs. By automatically delegating images to an external vision model (Alibaba Cloud Bailian qwen-vl) for recognition and converting the results into text to pass to the current model, this plugin enables pure text models to understand image content. Core features include allowing image uploads, automatic image-to-text recognition, providing a qwen-vl model fallback chain, supporting text-to-image generation (generate_image), and reusing recognition result caches. It is applicable only to the web version of DSH; for the desktop version, the built-in plugin dsh-tool-vision must be used. Installation requires enabling the plugin in the DSH profile and configuring environment variables such as DASHSCOPE_API_KEY. If ds... is enabled simultaneously...
Read Moredsh-memory-pyramid: Adding timeline memory to DeepSeek Harness
dsh-memory-pyramid is an MIT-licensed memory plugin for DeepSeek Harness (dsh). Its core mechanism adopts a dual-layer architecture: the bottom layer consists of an append-only, fixed-width (≤280 bytes) fact log, while the upper layer features a summary pyramid maintained autonomously by the Agent. Through a fixed reading budget mechanism, the number of rows read at startup remains constant regardless of the growth in total memory volume, effectively reducing recall costs. Plugin data is stored by default in the `dsh_memory` directory of the current working directory. Its plain text format supports Git management and Diff review, and it supports multi-process lock-free concurrent writing. It runs as a native DSH plugin with zero npm dependencies, no build steps required, and compatibility with Windows, Linux, macOS, and ARM64 architectures. Functionally, the plugin provides...
Read Moredsh-web-plugin-explain: Display description when Web plugin list expands
`dsh-web-plugin-explain` is a DSH Web plugin (MIT License) maintained by community developers, designed to address the difficulty of quickly identifying the source and functionality of plugins as their number grows. By enhancing the "Plugin List" page in Web Settings, this plugin achieves the following core functions: 1. Uniformly display the `description` field from the plugin package's `package.json`, displaying a placeholder when parsing fails without affecting the list's normal rendering; 2. Automatically add a "Third-party" tag to plugins that do not start with `@deepseek-ai/` or `cordis:`, making it easier to distinguish between built-in and external capabilities; 3. Support comprehensive search by plugin ID, module name, description text, and "Third-party" tag. The plugin has been published to npm, and users can access it via...
Read Moredsh-tally: DeepSeek Harness Personal Bookkeeping Plugin
dsh-tally is a personal bookkeeping plugin for DeepSeek Harness designed to enable localized, dependency-free, and network-free management of income and expenses. The plugin stores data locally in JSON format, does not rely on API Keys, and requires a Node.js 20+ environment. Its core features include bookkeeping (supporting built-in or custom categories and batch catch-up entries), account inquiries (searching by month, category, or keyword), summaries (providing monthly/yearly statistics, Top 5 categories, and month-over-month analysis), budgeting (supporting monthly budget setting and over-budget alerts), soft delete and restore, as well as CSV export and self-contained HTML reports. Users can perform operations directly by entering natural language commands via the DSH dialogue, such as recording transactions, checking accounts, or exporting data. This plugin is suitable for those seeking private data, independence from external services, and requirements for monthly account reviews, budget management, and file management.
Read Moredsh-localnote: Channel "let's talk later" ideas into scheduled processing
dsh-localnote is a DSH host plugin designed to bridge the gap between capturing and processing fleeting thoughts. This plugin allows users to quickly record inspiration in a browser floating window and supports setting expiration times and actions. Upon reaching the set time, the system can either send a notification reminder or trigger a one-time AI Agent to expand the inspiration into structured results (such as point breakdowns or execution actions) and write them back. Core features include quick capture (including screenshots), scheduled follow-ups, AI automation, dual-channel notifications (Toast and system notifications), and real-time status tracking. The plugin uses the MIT license, persists data locally to `~/.localnote`, and provides a REST interface for querying and debugging. Installation requires cloning the code and running `pnpm dsh plugin` in the DSH root directory.
Read Moredsh-sysmon: Add system performance floating window for DSH Web GUI
dsh-sysmon is a Web GUI plugin for DeepSeek Harness (DSH), maintained by 21hbguo. Adhering to the "everything is a plugin" philosophy, it must run within the DSH process. The plugin consists of Host-side metrics collection and Client-side native DOM rendering. It provides a floating window in the bottom-right corner of the interface, displaying real-time information about the host's CPU, memory, disk, network, load, uptime, and GPU status. Core features include an auto-scaling progress bar for network rates, allowing users to view the top 10 processes by network usage on hover; multiple disk mount points display with filtering of virtual file systems; and GPU support for both AMD sysfs and NVIDIA nvidia-smi sampling. The floating window supports dragging, collapsing, and hiding. It also persists its position and automatically pauses updates when the page is invisible.
Read Moredsh-vision-fallback: Preserving chat images in the text-only main model
dsh-vision-fallback is an MIT-licensed plugin for DSH, maintained by 1HelloMan1. It is designed to address the gap where the main model supports text-only while the chat interface contains images. Through a plugin-based approach at the request layer, it automatically delegates images to a fixed vision model, converts them into hidden text context to return to the main model, while preserving the original images in the UI. This plugin is compatible with DSH versions 0.1.2-alpha.3 to 0.1.2-alpha.5 and requires a Node.js environment of at least 22.13.0. Its core features include automatically handling MCP/ACP persistent attachments and PTC nested images while preserving order; and supporting the configuration of the vision model and Base URL via the Web settings page or settings.yaml.
Read Moredsh-esc-stop: Stop generation in DSH Web GUI by pressing Esc twice
dsh-esc-stop is an MIT-licensed plugin developed specifically for the DeepSeek Harness Web GUI (dsh web), designed to optimize the process of stopping generation via keyboard shortcuts. This plugin allows users to press the Esc key twice (with an interval of less than 400ms) within a session to stop the current turn. Its underlying mechanism is identical to that of the GUI stop button, both implemented via the `session.cancel` path, and it preserves pending inbox messages. This plugin is only compatible with the web profile and does not apply to TUI or headless modes. To install, execute the `dsh plugin add` command in the web directory, register the plugin in the `bundles` section of `package.json`, and restart the service to take effect.
Read MoreIntroduction to the DSH Tunnel QR Plugin: Providing Quick Tunnel QR Code Access for DSH Web
dsh-tunnel-qr-plugin is an integrated plugin for DSH Web, designed to temporarily expose local pages to the public internet. It works via Cloudflare Quick Tunnel and a local authentication proxy, eliminating the need to register for third-party accounts, configure domains, or enter passwords. Users simply need to install the plugin and restart Web, then scan the QR code generated in the bottom right corner of their phone to automatically log in and access the site. Core features include automatically downloading and verifying cloudflared, starting the tunnel, and generating QR codes carrying one-time security keys (auto-refresh every 15 seconds, keys expire after 5 minutes and are single-use only). Access after login is secured using HttpOnly, Secure, SameSite=Strict cookies, ensuring the public entry point connects only to the authentication proxy on the loopback address without directly exposing local ports. The plugin is not...
Read Moredsh-prompt-polish: DeepSeek Harness Input Bar Prompt Optimization Plugin
dsh-prompt-polish is a web-based prompt optimization plugin for DeepSeek Harness (DSH). Integrated with Composer, it allows users to click the Optimize button to send the current draft to a configured model service, generating a clearer and more specific version. The plugin supports six rewrite modes (e.g., default, concise, structured), Chinese/English language selection, and optional context injection such as objectives, to-do items, and conversation summaries. Optimization results are displayed in a popup with a comparison of the original and optimized drafts; users must explicitly click "Adopt" to apply the changes, which only takes effect if the draft remains unchanged. The plugin features runtime limits (such as draft length and timeout mechanisms), streaming stop, a history of the last five attempts, and local settings synchronization. The UI is designed to match the DSH theme and supports keyboard shortcuts and accessibility settings.
Read Moredsh-token-stats: Global Token Usage Statistics Plugin for DSH Web
`dsh-token-stats` is a plugin for DeepSeek Harness / DSH Web designed to centrally display token usage. It collects real usage from `llm/stream` calls and logs it to the ledger, aggregates data by provider, model, session, and date, and calculates cache hit rate, success rate, average latency, and time to first token, while estimating costs based on real usage. The plugin provides a draggable floating panel in the bottom right corner and a full-screen dashboard popup, supporting the view of KPIs, charts, and details, and can be queried via HTTP API and the model tool `token_stats`. The installation command is `dsh plugin --profile web add dsh-token-stats`, requiring `@deep...
Read MoreDSH Branch Visualizer: Transform DeepSeek Harness Session Branches into Actionable Tree Diagrams
dsh-branch-visualizer is a DeepSeek Harness plugin developed by 111222cjyq and licensed under the MIT License, designed to address the difficulty of visualizing branch structures in multi-session and sub-agent relationships. By reading sessions, parent sessions, and sub-agent relationships within the same workspace, the plugin automatically generates an interactive tree layout, supporting node dragging, zooming, panning, and auto-layout. Core features include double-clicking a node to quickly jump to a session, distinguishing between running/idle/cold statuses, renaming active sessions, and archiving cold sessions. The archive view supports toggling the display of history and connects the nearest visible ancestors of hidden nodes with double-dashed lines. In terms of performance, the plugin employs techniques such as snapshot TTL/LRU, request merging, and concurrency limits to optimize loading efficiency, and provides...
Read Moredsh-instruction-audit: Minimal session trace for DeepSeek Harness instruction files
`dsh-instruction-audit` is a standalone community plugin for DeepSeek Harness (DSH) designed to address workspace instruction file auditing issues. When encountering nested workspace boundaries or instruction budget events, this tool accurately records which `AGENTS.md` or `CLAUDE.md` files actually entered the session without guesswork. Its core mechanism involves observing the persistent `agent-instructions` message source emitted by Harness and generating privacy-minimized receipts. Each receipt includes the session ID, event time, scope, display path, and a content summary, while not reading the original file, storing the instruction body, modifying the workspace, or requiring runtime dependencies. Receipts are stored in `$DS` by default.
Read Moredsh-goal-quiescence: Add evidence gatekeeping for DeepSeek Harness goal-mode sub-agents
`dsh-goal-quiescence` is an MIT-licensed community plugin for DeepSeek Harness, aiming to address the issue where parent agents in goal-mode might prematurely complete a goal before child agents have terminated or read the results. The plugin implements a completion evidence gate that refuses to execute `update_goal(action=complete)` until an active child agent run has finished and the parent agent has explicitly read the final output. Its core capabilities include: logging child agent lifecycle; preventing goal completion before the run settles; forcing the parent agent to call `goal_quiescence_ack` to return the final output to the context; and querying the status of still-blocking completion via `goal_quiescence_status`.
Read More