SIMS Assistant: DSH Single-Tool SIMS Integration Plugin
The SIMS Assistant is a development candidate plugin for DeepSeek Harness (DSH), designed to provide connection configuration, credential management, and user template functionality through a single `sims` tool. It supports connection status checks (returning only account role permissions, not tokens) and allows explicit management of user templates. Installation requires network access to GitHub and compatibility with Node.js 22.19–22.x and DSH 0.1.2-rc.1. When used, SIMS must be configured in native settings, and connection checks or template creation must be performed via tool calls. Notes include: the plugin is a development candidate; service accounts are only for administrator binding; template identifiers have character limits and same-name overwrites are rejected; and expired tokens require re-authorization.
Read Moredsh-vault: Persistent Credential Vault Plugin for DeepSeek Harness
`dsh-vault` is a credential management plugin for DeepSeek Harness, designed to address the challenges of fragmented sensitive data storage and security risks. It supports centralized management of credentials such as API tokens and accounts, uses a storage strategy that separates confidential fields from general configuration, and leverages the `vault_get` tool to enable secure model access. The plugin interface does not display sensitive values, and uninstalling it does not result in key loss, ensuring a high level of security.
Read Moredsh-accounts: DSH Credential Bridge Plugin
dsh-accounts is a DeepSeek Harness (DSH) plugin designed to address credential leakage risks. It isolates sensitive information from the AI execution environment to ensure models cannot access plaintext values. Core features include automated form filling via browser tools, injecting credentials into environment variables to run local CLIs, and querying account lists. The plugin strictly adheres to security protocols and supports domain allowlist restrictions and output redaction. Users can install it via command and manage accounts through the built-in web management interface (`/dsh-accounts/`), with local validation mechanisms for operations.
Read MoreHTTP Request DSH Plugin: Using Native `http_request` Tool in DSH
`http-request-dsh-plugin` is a native plugin for DeepSeek Harness (DSH) designed to handle HTTP(S) request invocations using the built-in `http_request` tool, without relying on an MCP Server or external processes. The plugin supports various HTTP methods, proxy configuration, timeout control, and response truncation. It innovatively integrates a credential reference feature that utilizes Windows Credential Manager and Linux's `pass` to ensure sensitive information such as API Keys is not directly written into prompts or configuration files, instead limiting readable credential prefixes via a whitelist mechanism. Installation is flexible, supporting one-click installation from GitHub via the DSH CLI or cloning.
Read Moredsh-credential-handoff: Enable agents to request credentials without embedding keys into the model context.
`dsh-credential-handoff` is an MIT-licensed plugin designed for DSH plugin-based scenarios to address privacy risks where API keys may enter session logs or model contexts when an agent requests them. It registers a `request_credential` tool to collect credentials via a browser dialog and stores them using the DSH credential service in a write-only manner. The tool call returns only fixed status metadata (such as credential references and configuration status), ensuring that key values are not returned to the model context. The plugin supports HTTPS submissions and plaintext HTTP over local loopback, while preventing non-local plaintext transmission. Each session allows only one pending request, and the dialog expires after ten minutes. Credential references follow shell-style naming rules.
Read More