dsh-codex-usage: OpenAI Codex Quota Indicator in DeepSeek Harness
The `dsh-codex-usage` plugin provides native-style API quota monitoring for the DeepSeek Harness (DSH) Web UI. Through a lightweight polling mechanism, it displays detailed Codex quota usage information in real time without exposing credentials. It features smart refresh, security safeguards (local requests only, no reading of sensitive files), and cross-platform support. Users must first log in to Codex and install the plugin, then configure the refresh interval in the settings to use it.
Read Moredsh-native-codex-oauth: Native ChatGPT Login for OpenAI Codex in DeepSeek Harness
`dsh-native-codex-oauth` is a plugin for DeepSeek Harness that adds native ChatGPT sign-in control to the built-in `openai-codex` provider. By connecting to DSH's native interfaces, the plugin integrates the `llm-pi-ai`, `credentials`, and `authorization` modules into the Web model page, enabling a secure browser-side OAuth authentication flow without copying local credential files. After installation, users can authorize via “Sign in with ChatGPT” in Settings to use Codex models in the Web interface.
Read MoreDeepSeek Harness Plugin: dsh-llm-openai-codex
DeepSeek Harness (DSH) introduces the new `dsh-llm-openai-codex` plugin, designed to resolve authentication failures when calling OpenAI Codex locally due to missing API keys. It reuses pi-ai's general request mechanism and supports authentication via OAuth tokens, requiring a ChatGPT subscription, eliminating the need to configure an API key. The plugin supports automatic token refresh and model discovery, and provides a Web login card, supporting either PKCE or device code, for identity verification. After installation, it must be enabled in the configuration file, and models must be used in the `openai-codex/<model>` format. Community-maintained, the plugin extends DSH's local inference capabilities.
Read Moredsh-oauth-openai: OpenAI Codex OAuth Provider and Model Adapter (Retired)
`dsh-oauth-openai` is a deprecated plugin for DeepSeek Harness, used to handle OpenAI Codex OAuth authentication, and is now maintained only in maintenance mode. The official recommendation is to remove this plugin and the legacy Codex package to avoid conflicts. The relevant OAuth flow is now built into the main program’s `@deepseek-ai/dsh-llm-pi-ai` package.
Read MoreDeepSeek Harness Plugin: Integrating OpenAI Codex (ChatGPT Plus/Pro OAuth)
`ddll8023/dsh-codex` is a DeepSeek Harness (DSH) plugin designed to connect to OpenAI Codex models via OAuth without requiring a DeepSeek Key. It supports browser and headless login, with features such as native web search, Fast mode switching, and automatic credential refresh. Users can manage login, usage, and session modes through CLI commands, securely storing credentials in DSH's own service.
Read More@sipi/dsh-openai-codex-auth: Provides OpenAI Codex device login capability for DeepSeek Harness
@sipi/dsh-openai-codex-auth is a plugin maintained by z331225718 that adds OpenAI Codex device code login support to the pi-ai routing in DeepSeek Harness (DSH). By providing OAuth storage and an interactive authentication controller, it allows users to use ChatGPT's device login directly on the Models page without an additional model adapter. The installation command is `dsh plugin --profile web add @sipi/dsh-openai-codex-auth`. When using it, note the proxy configuration in Node 24 (`NODE_USE_ENV_PROXY=1`).
Read Moredsh-openai-codex-oauth: Add ChatGPT subscription OAuth login for DeepSeek Harness's openai-codex provider
`dsh-openai-codex-oauth` is a community plugin for DeepSeek Harness, primarily addressing the issues of ChatGPT subscription OAuth login, credential management, and token refresh for the `openai-codex` provider within the Web interface. This plugin is released under the MIT license, supporting interactive login (`/codex-login`), status queries (`/codex-status`), and logout (`/codex-logout`), while being compatible with browser OAuth (PKCE) and device code login methods. Credentials are persistently stored in specified environment variables to ensure automatic access token refresh. Installation requires DeepSeek Harness 0.1.0-rc.6 and Node.js 22.19.
Read MoreDSH Plugin: yoke233/dsh-openai-codex-auth
`yoke233/dsh-openai-codex-auth` is an open-source plugin designed for DeepSeek Harness (DSH). It aims to address the issue of scattered management of login credentials for the OpenAI Codex model. By connecting to ChatGPT Plus, Pro, Team, or Enterprise accounts via OAuth, this plugin automatically provides valid tokens to the `openai-codex` model provider, enabling a one-stop solution for login, usage viewing, and credential management on the DSH web settings page. Core features include automatically refreshing tokens nearing expiration, displaying short-term and weekly remaining quotas, and supporting re-login or logout. Installation is straightforward: simply add the plugin to the web profile using the `dsh plugin` command and restart.
Read Moredsh-codex-oauth: Accessing DSH's GPT, Image Generation, and Web Search via ChatGPT/Codex Subscription
@wnjxyk/dsh-codex-oauth is a DeepSeek Harness Web plugin maintained by WNJXYK. It binds ChatGPT/Codex subscriptions via OAuth, enabling the openai-codex model, generate_image for image creation, and web_search for internet searches, while displaying subscription quotas in the interface. It supports browser and device code login, requiring no configuration by default. Optional settings include a custom Cordis credential path and port. Verified on DSH 0.1.0-rc.6 under the MIT license. Installation: `dsh plugin --profile web add -w @wnjxyk/dsh-codex-oauth@latest`. Note: This relies on non-public Codex interfaces, so users should independently assess potential risks from protocol changes or account issues.
Read MoreOpenAI Official Security-Best-Practices: Performing Security Reviews of AI According to Languages and Frameworks
OpenAI has provided the `security-best-practices` Skill in the `curated` directory of the openai/skills repository. It includes 10 security specifications for common frameworks in Python, JavaScript/TypeScript and Go, and supports secure-by-default coding, passive inspection and structured security reporting. This article introduces its workflow, references library, Codex/Cursor installation methods and typical prompts, to help developers embed verifiable security review capabilities into AI-assisted programming.
Read More