Introduction¶
DeepSeek Harness (DSH) extends its capabilities through a plugin mechanism. Developers often need to call local tools to perform complex tasks. Direct integration of local CLIs requires handling authentication and permission management. dsh-subagent-grok addresses this problem by using a locally authenticated Grok CLI as the default all-in-one DSH subagent provider.
Core Features¶
- Uses a locally authenticated Grok CLI as the default all-in-one DSH subagent provider.
- Runs
grokprocesses in the working directory of the parent session. - Sandboxing is enabled by default to restrict write permissions.
- It does not log login sessions or accept/write API keys.
Installation and Activation¶
Ensure the environment is ready before installation. This plugin depends on Node.js 20 or later and an authenticated Grok CLI.
export DSH_HOME=/tmp/dsh-subagent-grok-home
dsh plugin --profile headless add dsh-subagent-grok
Version requirements:
- @deepseek-ai/dsh 0.1.1-rc.2 or later
- Grok CLI 1.0.13 or later
Typical Usage¶
Specify the plugin ID and parameters in the configuration file. The following configuration uses strict sandbox mode:
- id: subagent-grok
name: dsh-subagent-grok
config:
providerName: grok
sandbox: strict
Use Cases and Notes¶
- The plugin runs under the permissions of the current DSH process. Inspect the source code and license before installation.
- If the CLI is missing, authentication fails, the JSON is invalid, the input is not text, or the prompt is empty, the agent will fail explicitly.
- Sandboxing is disabled by default; explicitly enable
allowUnconfined: trueto bypass the restriction.
Conclusion¶
This plugin simplifies the process of calling the local Grok CLI through DSH. For more details, see the plugin directory and the GitHub repository.
