dsh-token-vault: Local Credential Vault Plugin
dsh-token-vault is a secure credential management plugin for DeepSeek Harness (DSH). It addresses security risks of writing API tokens in plaintext or leaving them in history when calling APIs in DSH by storing tokens in the DSH credential vault, injecting them securely via environment variables, and preventing leakage. The plugin provides 7 tools that support creating, reading, updating, and deleting tokens, importing credentials for `gh`/`npm`, and securely running commands. Its security design spans three layers: storage (atomic writes), usage (no echo), and control (preventing agents from printing credentials). Users can install it via a command and manage credentials in DSH settings, making it suitable for securely invoking external tools such as `gh` and `npm` within the DSH environment.
Read Moredsh-dep-vuln-scan: DeepSeek Harness Native Dependency Vulnerability Scanning Plugin
DSH (DeepSeek Harness) natively depends on the vulnerability scanning tool `dsh-dep-vuln-scan`, a product of its “everything is a plugin” philosophy. This tool batches lockfile vulnerability queries via the OSV API, supports multiple ecosystems such as npm and PyPI, and provides CVE/GHSA identifiers, CVSS severity scores, and recommended fix versions. It offers two modes—`fast` (root-directory scanning) and `full` (recursive scanning)—and includes built-in retries, rate limiting, and persistence. As a read-only tool, it generates detailed reports and remediation commands, aiming to simplify the dependency security-checking workflow.
Read Moredsh-bleach-safety: Return Explicit Recommendations Based on Parameters
`dsh-bleach-safety` is a Node.js-based DeepSeek Harness plugin designed to provide clear safety guidance for bleaching operations. The plugin requires no network requests and returns precise instructions through the `bleach_safety` tool based on its parameters, helping developers mitigate uncertainty in chemical handling. It can be installed using `dsh plugin add github:uckkk/dsh-bleach-safety`, and usage requires specific version dependencies.
Read Moredsh-password: Generating Strong Random Passwords and Detecting Password Strength
The DeepSeek Harness (DSH) plugin `dsh-password` provides strong random password generation and strength detection for agents and automation scripts. Maintained by istone, it supports generating strong passwords of a specified length, detects password strength and information entropy, and provides improvement suggestions. Users can install and configure it via the command line and call functions such as `generate_password(length=20)` in their scripts. Installation runs third-party code on your local machine; please review the source code.
Read Moredsh-pass-strength: Password Strength Detection Plugin
The DSH plugin dsh-pass-strength is maintained by developer uckkk and is designed to meet the need for local, instant password strength calculation in DeepSeek Harness (DSH). Its core function is to accurately calculate password security levels and provide suggestions. It is fully implemented locally with Node.js, without relying on external APIs, ensuring fast responses. It supports one-click installation via official commands and is mainly applicable to management and security DSH applications. It depends on @deepseek-ai/cordis and @deepseek-ai/dsh-tools, and its code is open-sourced under the MIT license.
Read Moredsh-atbash: Atbash Cipher Conversion Tool
dsh-atbash is a lightweight security plugin in the DeepSeek Harness ecosystem that implements the Atbash cipher algorithm. The plugin is implemented in pure Node.js and requires no network dependencies. Developers can install it with the `dsh plugin add` command and must ensure that `@deepseek-ai/cordis` and `@deepseek-ai/dsh-tools` are installed. The plugin runs with the current process permissions and is suitable for basic reverse-alphabet substitution use cases.
Read Moredsh-sast-security: DSH SAST Tool Configuration Skills
`dsh-sast-security` is a DSH plugin maintained by `satan9394`, designed to encapsulate the configuration of SAST tools in DeepSeek Harness (DSH). It supports Semgrep, SonarQube, and CodeQL, reducing configuration costs and improving integration efficiency. As a security plugin, we recommend reviewing the source code before installation. For details, please visit the official repository.
Read More