dsh-backdoor-guard：在工具执行前拦截权重后门
dsh-backdoor-guard 是 miketako3 为 DeepSeek Harness 提供的安全插件，在 tools/pre-execute 阶段用独立决策模型（托管 Jev 或本地 LiquidAI d1-3B）为每次工具调用评估安全概率，拦截静默后门调用与凭证外传。无需 logprobs 与正则规则，支持 threshold、skipTools 与 fail-open/fail-closed。MIT 0.2.0。
Read Moredsh-approve-prefix：按前缀自动放行 DSH 沙箱提权请求
`dsh-approve-prefix` 插件旨在解决 DSH 沙箱提权人工审批效率低的问题。它通过分析命令前缀，仅对来自特定工具且符合“单条简单命令”特征的请求自动放行。插件还引入了会话级“夜间模式”，可自动拒绝非放行请求以减少干扰。支持静态与会话级前缀配置，并需配合重启宿主进程生效。
Read MoreWP Plugin Development: Turning the WordPress Plugin Process from Structure to Release into an Agent Skill
wp-plugin-development, from the WordPress/agent-skills repository, covers the full plugin development workflow: architecture, Hooks, activation and deactivation, Settings API, data and Cron, security baselines, and release packaging. It supports WordPress 7.0+ and PHP 7.4+, requires bash and Node.js, and some steps need WP-CLI. The article explains triage scripts, core steps, verification checklists, and installation via npx skills add, and complements the block development skill.
Read Moredsh-zcode-scribe: Read-Only Memory Room and Path Security Mechanisms of DeepSeek Harness
`dsh-zcode-scribe` is a security memory plugin for DeepSeek Harness (DSH), built on the ZCode memory model. It provides agents with read-only Markdown memory rooms and the `scribe_recall` retrieval tool, while including 52 strict path security rules to effectively prevent directory traversal, Unicode spoofing, and NTFS alternate data stream attacks. The plugin is currently in an early stage, implementing only read-only access and retrieval; write and extraction capabilities are not yet supported.
Read Moredsh-acl-sandbox-patch: DSH 0.1.7 Windows Sandbox Non-System Drive Workspace Fix
dsh-acl-sandbox-patch is a temporary workaround plugin for DSH 0.1.7 that addresses the complete failure of sandboxed commands in workspaces located on non-system drives. By wrapping the underlying API, it resolves the issue where `SetNamedSecurityInfoW` returns Win32 error 5 due to insufficient permissions, and handles token integrity control. After installation, DSH must be restarted to restore normal command execution; however, this compromises part of the integrity-labeling mechanism and carries risks of slower initial loading and abnormal behavior in older sessions.
Read Moredsh-guard-sensitive-paths: DeepSeek Harness Sensitive Path Approval Plugin
The DeepSeek Harness plugin `dsh-guard-sensitive-paths` uses a plugin-based architecture and registers a `tools/pre-execute` policy to intercept agent access to sensitive paths. Enabled by default with the highest priority, it mainly blocks write, modify, and execute operations on `.env`, `.git`, and `.ssh` directories, SSH private keys, and `.pem` certificates, as well as read operations on secret files. It supports scanning Bash command text and enforces approval when matches are detected. Once installed, it takes effect with zero configuration and helps prevent leakage of sensitive data, but it cannot intercept host-level sidecar behavior, network egress, or data transfers to model inference endpoints.
Read Moredsh-continue: DeepSeek Harness Secure Unattended Task Continuation Plugin
`dsh-continue` is an optional plugin for DeepSeek Harness, designed to address issues such as task-level interruptions and network jitter, enabling safe unattended task continuation. It features core capabilities including deterministic recovery, precise adaptive network learning, task-scoped configuration injection, and secure boundary control. The plugin is disabled by default and must be enabled via configuration or command. It supports three preset modes and a comprehensive command set for managing control, memory, and decision-making, ensuring automatic recovery without real-time manual monitoring in low-risk scenarios.
Read MoreDSH Admin Bridge: Providing Sudo Privilege Mode for DeepSeek Harness
The DSH Admin Bridge plugin adds a “Sudo Access” permission mode to DSH, allowing agents to obtain temporary root privileges through a graphical interface to perform system-level operations. It provides tools such as `admin_request` for request authentication, `admin_run` for command execution, and `admin_lock` for unlocking, and supports configuring specific secure operations. Installation must be performed by pulling the plugin from GitHub, and the DSH runtime must be manually patched to support the new permission option. Please note that, by default, this plugin allows arbitrary root commands and poses an extremely high security risk, so it is recommended only for use in trusted Linux environments.
Read Moredsh-break-glass-settlement-proof: Offline Verification of Emergency Access Session Settlement Evidence
`dsh-break-glass-settlement-proof` is a DSH plugin maintained by dongsheng123132 that verifies settlement evidence for break-glass sessions offline. The plugin provides offline, deterministic evidence for inspecting session lifecycle, operational audit records, and permission revocation status. It only validates the provided settlement data and does not handle authentication or query real-time infrastructure. After installation, a CLI tool can be used to inspect and validate JSON files, making it suitable for security operations and compliance auditing scenarios.
Read Moredsh-codex-project: DSH Workspace Shared Subdirectory Plugin
The DeepSeek Harness plugin `dsh-codex-project` addresses the permission-management dilemma in cross-directory project development. Through the GUI, command line, or model tools, it allows a workspace to mount any number of shared subdirectories (with cross-drive support) while maintaining `workspace-write` permissions throughout, eliminating the need to escalate to the high-risk `danger-full-access` permission. Leveraging the Cordis framework, the plugin implements runtime security and data persistence via HTTP routing, context injection, tool registration, scoped tokens, and filesystem isolation. It provides developers with an efficient and secure modular development environment.
Read Morejkt-check/dsh-secret-scrub: DeepSeek Harness Irreversible Ciphertext Scrubbing Plugin
`dsh-secret-scrub` is a sensitive data scrubbing plugin for DeepSeek Harness (DSH). It uses regex matching to replace sensitive data (e.g., API keys and tokens) with irreversible placeholders in the form `[REDACTED:<category>]` to prevent data leakage. The plugin offers three scrubbing levels—minimal, balanced (default), and aggressive—supports custom rules, and monitors user messages, tool results, and logs for interception. Although it can be used as a standalone plugin, users should be aware of its irreversibility and the limitations of regex matching (such as false positives and inability to detect unencoded keys), and should not rely on this plugin alone as the sole leakage-prevention measure.
Read Moredsh-checkout-guard: Status Precheck Before Writing to the Git Working Directory
`dsh-checkout-guard` is a DSH plugin that checks the Git working tree state before making edits, commits, or pushes, preventing data loss caused by branch mismatches or an incorrect working tree state. It is read-only by default and primarily checks branch identity, divergence from the remote, uncommitted changes, duplicate clones, and commit author identity. After installation, individual checks can be performed with `checkout_guard`, while batch scans can be run with `checkout_guard_scan`; if the state is found to be abnormal, write operations are blocked. It does not automatically fix issues or pull code, but only provides state warnings to ensure that an agent stops operating when the repository state is unclear.
Read Moredsh-login: Login Gatekeeper Plugin for dsh-web
DSH-login is a pure host-side Cordis plugin that provides full request gating for DSH-web. By intercepting requests and validating sessions, it requires users to supply credentials when accessing the opened port. The plugin supports multi-user management, stores passwords using scrypt (random salt) hashing, and encrypts the credentials file with AES-256-GCM. Core features include session management, brute-force rate limiting, dual Web and CLI administration, and hot configuration reload. It binds to 127.0.0.1 by default; for LAN or public internet deployments, using an nginx and TLS proxy is recommended.
Read Moresecret-guard: DeepSeek Harness Security Plugin
secret-guard is a security plugin for DeepSeek Harness (DSH) designed to intercept and mask read/write access to sensitive files (e.g., .env), preventing API key leakage. It adopts a zero-build mode, with core capabilities including intercepting sensitive files before tool execution, applying content masking to results, providing `sg_*` tools that return metadata only, recording audit logs, and supporting hot reloading of rules. Installation is straightforward, requiring dsh ≥ 0.1.0-rc.6 and Node.js ≥ 22.19, and supports local development and debugging.
Read Moredsh-check-for-updates: DSH Security Update and Integrity Check Plugin
The dsh-check-for-updates plugin is designed to resolve startup crashes caused by replacing native modules during DeepSeek Harness (DSH) upgrades. It employs a decoupled two-stage update mechanism that schedules installation tasks to be executed by an independent process after DSH exits, combined with post-installation triple verification and a startup self-check to ensure module integrity and system stability. The plugin supports automatic checks, manual checks, one-click upgrades, and network debugging, and it installs easily without requiring manual enabling, making it a valuable tool for improving the safety of DSH updates.
Read Moredsh-llmasking: DeepSeek Harness Transport Layer Data Masking Plugin
The DeepSeek Harness plugin `dsh-llmasking` is designed to address the risk of sensitive information leakage. It intercepts model calls and masks data before transmission, ensuring that the model receives only placeholders while local logs and the UI continue to display real values. The plugin supports detection of multiple types of sensitive data, such as email addresses, bank card numbers, IP addresses, and identity card numbers, and features streaming processing, zero-overhead pass-through, and fail-safe mechanisms. No configuration changes are required under the default settings, and the `/llmasking` command can be used to monitor its status or verify its effectiveness.
Read Moredsh-workflow-isolate: A QuickJS/WASM Isolated Workflow Engine for DeepSeek Harness
`dsh-workflow-isolate` is a plugin for DeepSeek Harness that provides a QuickJS/WASM isolation environment for workflow scripts, addressing the need for JavaScript capabilities without inheriting Node.js permissions. It enforces resource limits, blocks Node.js APIs, and preserves hooks, with the default engine switchable via `cordis.patch.yml`. When using it, ensure that scripts are portable and that its isolation boundaries and security risks are understood.
Read More