dsh-plugin-doctor：按 dsh-plugin 目录规则审计插件仓库
dsh-plugin-doctor 是 Tim-ReJet 维护的 DeepSeek Harness 工作流插件与 CLI，只读审计插件仓库是否满足 dsh-plugin 目录的 manifest、bundle patch、peer 范围（含 prerelease）、实现文件、仓库年龄、描述与 GitHub topic 等机械规则。提供 plugin_doctor 工具与 node bin/dsh-plugin-doctor.mjs，支持 --strict、--network、--emit-entry。安装示例：dsh plugin --profile web add dsh-plugin-doctor 或 github:Tim-ReJet/dsh-plugin-doctor。全绿不替代 maintainer 审源码与安全审查。
Read Moredsh-plugin-security: The Security Gating Plugin for DeepSeek Harness
`dsh-plugin-security` is a DeepSeek Harness (DSH) plugin designed to address security risks associated with third-party plugins through dependency auditing, source-code scanning, and runtime gating. The tool supports risk tiering, call interception, and allowlisting, and provides Agent review capabilities. Users can configure three modes (off, report-only, enforce) to manage plugin risk. Once installed, it can prompt users for confirmation during high-risk operations or automatically disable a plugin when malicious behavior is detected, adding a security layer to the Agent ecosystem.
Read Moredsh-plugin-update-audit: Read-Only Update Audit for the DeepSeek Harness Plugin
`dsh-plugin-update-audit` is a read-only audit plugin for DeepSeek Harness (DSH) that inventories Profiles and checks dependency status. By comparing official data sources, it reports updates and changes for npm packages, GitHub repositories, and local tarballs, and provides SHA-256 checksums. The plugin performs read-only operations, supports offline mode, and redacts local paths to ensure security. Users can invoke the tool through configuration parameters and take manual review and update actions based on the returned status codes (such as `update_available` and `upstream_changed`).
Read Moredsh-plus-plus: Local Control Plane for DeepSeek Harness
DSH++ is a local-first DSH control plane plugin designed to address challenges developers face in understanding plugin permissions and the lack of operational tooling. It provides three core capabilities: plugin security auditing and risk classification via `audit`; workflow regression testing via `test` with CI integration support; and lifecycle management via `doctor` and snapshot functionality. The plugin requires no third-party dependencies and, after installation, can be managed through a CLI or a local web console (http://127.0.0.1:4848) to control configurations, credentials, and backups. Note that credentials are stored in a local `.env` file, and the plugin runs with the same privileges as the DSH process.
Read Moredsh-stability-audit: DeepSeek Harness Plugin Stability Audit
dsh-stability-audit is a plugin stability auditing tool designed specifically for DeepSeek Harness (DSH), aimed at preventing environment crashes caused by plugin failures. It classifies plugins as 🔴 high-risk, 🟡 medium-risk, or 🟢 low-risk through static code analysis (scanning hooks, dependencies, etc.) and optional isolated installation verification, and provides remediation suggestions. It supports local scanning, remote pre-review, and batch testing, and operates entirely in read-only mode to ensure environment safety. Developers can use it to proactively identify potential risks before installing or maintaining plugins.
Read Moredsh-plugin-judge: DSH Plugin Value Judge
`dsh-plugin-judge` is a plugin value judgment tool in the DeepSeek Harness ecosystem, designed to address the issue that a plugin's value can fluctuate with model changes. It provides three core capabilities: pre-installation review (static scanning + LLM judgment), post-installation audit (risk scoring), and reminders for re-evaluation when switching models. Through commands or the settings panel, users can assess plugin suitability and manage constraint-related risks, ensuring that plugins do not impair task performance due to rule restrictions or model upgrades. Installation requires environment prerequisites such as Node.js >= 18; judgment results are for reference only, so install third-party code cautiously.
Read Moredsh-agent-plugin-research: Agent-Specific Plugin Research and Installation Tool Bridge for DeepSeek Harness
`dsh-agent-plugin-research` is an agent-specific plugin tool bridge for DeepSeek Harness (DSH), designed to address the complex origins of community plugins and the difficulty of controlling associated risks. It provides retrieval, auditing, installation, and verification capabilities, and ensures secure, manageable plugin installation through enforced version pinning, risk checks, and an explicit confirmation mechanism. It does not provide a visual interface; instead, it serves as a backend capability to assist agents in plugin management, ultimately helping agents reduce third-party risks when extending their capabilities.
Read Moredsh-plugin-doctor: DSH Plugin Health Check and Management Tool
# Introduction The philosophy of DSH (DeepSeek Harness) is "Everything is a plugin." As you install more components, two issues tend to arise over time. The first is uncertainty regarding which plugins are reliable: verifying whether the third-party plugin manifest is complete, if the patch layer covers built-in lines that shouldn't be touched, or if there are high-risk function calls in the code is difficult to do individually in daily operations. The second is troubleshooting difficulties: when a plugin fails to start or a service is missing, you often only see PENDING or FAILED statuses and don't know which one to stop or which one to keep. dsh-plugin-doctor addresses these two issues: it turns plugin auditing into a read-only tool within the chat interface and consolidates start/stop, installation, uninstallation, and version updates into a settings panel. The following sections introduce its features, installation methods, and precautions. # What is this ds
Read Moredsh-plugin-observatory: DSH Plugin Pre-installation Audit and Bounded Loader Observation
`dsh-plugin-observatory` is a read-only audit plugin for DSH maintained by CMSKL, designed to provide static compatibility checks before installation and bounded lifecycle observation after activation for plugin authors and maintainers. The plugin consists of two core tools: `plugin_audit` is used to audit the `package.json` and `dsh.bundle.patch` of local plugin packages, checking version ranges, dependency declarations, patch structures, and unevaluated expressions, and outputting deterministic machine-readable reports indicating `compatible`, `needs-review`, or `incompatible`; `plugin_observe` projects current non-group Loader entries, displaying the activated bounded read-only state.
Read Moredsh-plugin-auditor: Read-only pre-check for DSH plugin combinations
`dsh-plugin-auditor` is a read-only compatibility pre-check tool for DeepSeek Harness (DSH), designed to mitigate startup risks after adding new third-party plugins. This plugin scans files such as `package.json`, `cordis.patch.yml`, and `node_modules`, and outputs a risk report without executing the audited plugin code. Its core checks include duplicate tool registration, entry ID conflicts, peer dependency version mismatches, multiple memory plugins enabled simultaneously, and missing credentials like Token or App ID for channel plugins such as Telegram and Lark. Users can use `dsh plugin --profile [prof`
Read Moredsh-plugin-doctor: DeepSeek Harness Plugin Health Check
dsh-plugin-doctor is a plugin health check tool in the DeepSeek Harness (DSH) ecosystem, corresponding to RFC #1629. It provides CLI and Agent-callable interfaces for verifying the integrity of manifest, patch, entry, build, pack, install, and config before plugin release. Core features include host masking, dependency, and native module checks against DSH profiles, as well as heuristic security audits (e.g., pre-side effects, Shell launcher risks). The tool supports read-only audit modes (audit/audit-batch), can generate JSON or Markdown reports, is suitable for CI integration, and offers environment diagnostics.
Read More