dsh-llm-injection-filter：给 DSH 的 LLM 响应流加一层注入过滤
`dsh-llm-injection-filter` 是一款面向 DSH 的 LLM 流式响应安全过滤插件，用于在模型输出进入 Agent 前检测并处置提示词注入或污染内容。该插件挂载于 `llm/stream` waterfall，无需修改运行时源码，支持 Node >=18 环境。其核心机制分为两条轨道：轨道 A 实施罕见脚本硬性阻断，默认允许 Latin、Han 等脚本，命中其他未授权脚本直接中断响应；轨道 B 基于 CTRL、PROTO、SCRIPT、KW 等规则进行评分，总分达到阈值（默认 100）后执行 audit、strip 或 reject 处置，其中 KW 不单独触发，SCR
Read Moredsh-prompt-injector: DeepSeek Harness Prompt Injector
`dsh-prompt-injector` is a web plugin for DeepSeek Harness designed to address the issue of content contamination caused by directly entering prompt presets into the input box. The plugin injects presets on the host side during the `agent/pre-step` stage before a message is sent, supports “inject only into the next message” or “inject into every turn” modes, and provides a UI for managing the preset library, triggering within messages, and custom configuration. It requires Node.js >= 22.5, and the profile must be restarted after installation.
Read Moredsh-universal-worldbook: A Context-Contamination-Free Universal Worldbook and Temporary Prompt Injector
dsh-universal-worldbook is a lightweight prompt management plugin designed for the DSH plugin ecosystem. It leverages request-level injection to dynamically insert prompts into the current request, ensuring that the content does not pollute the conversation history and effectively addressing context pollution. The plugin supports flexible triggering mechanisms (always-on, keyword, and regular expression) and a Tavern-style UI, and provides the lore_lookup tool to isolate sub-entry queries. Data is stored locally with no outbound network communication, and installation is straightforward, giving users an efficient and secure solution for context management.
Read Moredsh-plugin-global-prompt: Injecting a Global Prompt into DSH
`dsh-plugin-global-prompt` is a DeepSeek Harness plugin designed to address the pain point of repeatedly configuring system prompts. By adding an input field under general settings, users can configure a prompt that is permanently injected into the system prompt across every model interaction, including sub-agents. The plugin saves the configuration in `$DSH_HOME/settings.yaml`, supports hot reloading, and enforces a 20,000-character limit. Users can disable it by leaving the field empty, and it does not pollute conversation history or override the Persona. The article provides a sample prompt based on the “Four-Quadrant Decision Protocol” for reference.
Read Moredsh-identity-control: Customize dialogue persona next to DSH input bar
dsh-identity-control is a DSH custom persona plugin maintained by GitHub user orpheus0829 (v0.1.0, MIT license). It provides a button and an edit panel next to the chat input bar, allowing users to manually input persona text and toggle it with a single click. Once enabled, the persona is automatically injected into all new conversations; disabling it restores the default without requiring a restart, and it does not override DSH safety rules. The plugin operates via official commands.
Read MoreInject Suffix into Each Round of Messages for DeepSeek Harness Using deepseek-manners
# DeepSeek-Manners Plugin Maintained by Moeblack, DeepSeek-Manners is a community plugin for DeepSeek Harness, categorized under **Tools and Capabilities**. It appends a configuration text to the bottom of the payload during the first model request of each conversation turn. The default text is *"Thank you, Master Whale"*, and this configuration only takes effect for the current turn. The old suffix will be recycled based on the length of the most recent assistant reply; if the payload is too long, the suffix can be skipped to protect the prompt cache. There is a heart-shaped toggle switch next to the web input box. Users can modify the text into multi-line instructions, but template variables are not supported. Please refer to the directory page for installation instructions: `dsh plugin add github:Moeblack/deepseek-manners`. The plugin runs with the permissions of the current DSH process. Currently, there is no license attached to the repository, so please review the source code before installing it.
Read More