DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

Plugins Presets Docs News

Community

Publish a plugin Contact Report an issue

Resources

Plugin Hub on GitHub DeepSeek Harness System status Privacy notice

© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins — Page 5

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories Agents & Orchestration1036 Memory & Context1277 Coding & Developer Tools2780 UI & Customization3650 Integrations & Communication1902 Vision & Media618 Search & Research861 Security & Access1261 Models & Usage1677 Productivity & Workflow2224

All plugins

1261 plugins

dsh-grok-subscription

Grok Subscription

Use a SuperGrok or X Premium Grok Build subscription in DeepSeek Harness

models-usagesecurity-access★ 0↓ 1.2k✓ v2.0.8 scan passed

Updated 10/16/2026

@pure01fx/dsh-openai-codex-auth

Openai Codex Auth

Native ChatGPT Codex provider, device-code-first login, and same-origin Web integration for DeepSeek Harness

security-accessdeveloper-tools★ 0↓ 1.1k✓ v0.13.4 scan passed

Updated 10/16/2026

@yadsh/dsh-web-fetch-authenticated

Web Fetch Authenticated

Authenticated, policy-gated WebFetchProvider for the DeepSeek Harness web capability seam (ctx.web)

security-accesssearch-research★ 2↓ 381✓ v0.7.2 scan passed

Updated 10/16/2026

@yadsh/dsh-session-scope

Session Scope

Per-session workspace visibility scopes for DeepSeek Harness.

security-access★ 2↓ 378✓ v0.7.8 scan passed

Updated 10/16/2026

@yadsh/dsh-model-safety-gate

Model Safety Gate

Independent two-layer safety gate around the DeepSeek Harness agent loop: deterministic and model-classifier verdicts for prompts, streamed output, tools, and tool results

security-access★ 2↓ 371✓ v0.3.2 scan passed

Updated 10/16/2026

@anionex/dsh-computer-use

Computer Use

Accessibility-first macOS Computer Use capability for DeepSeek Harness with stale-observation protection, app leases, confirmations, screenshots, and Web diagnostics

productivity-workflowsecurity-access★ 0↓ 1.1k✓ v0.3.3 scan passed

Updated 10/16/2026

@infinitepersistence/dsh-serial-console

Serial Console

Auditable serial console for DeepSeek Harness with shared user and AI access

developer-toolssecurity-access★ 8↓ 120✓ v0.1.0-alpha.1 scan passed

Updated 10/16/2026

@morlay/dsh-sandbox-local

Sandbox Local

Configurable sandbox bundle: replaces the shipped process-sandbox provider and filesystem fence with implementations that add extra writable roots, read-only roots and access denials on top of the upstream semantics.

security-access★ 8↓ 113✓ v0.0.3-alpha.8 scan passed

Updated 10/16/2026

Im

Unified IM bridge core: enables DeepSeek Harness to be controlled, notified, and approved via IM (session mapping / commands / notification bus / approval flow / MockChannel).

integrations-communicationsecurity-access★ 3↓ 250✓ v1.0.5 scan passed

Updated 10/16/2026

dsh-poison-guard

Poison Guard

Pre-install supply-chain poison scanner for DeepSeek Harness plugins: AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics to catch credential exfiltration, dynamic code execution, obfuscated imports, and install-time scripts.

security-access★ 2↓ 328

Updated 10/16/2026

@summersec/dsh-web-auth

Web Auth

Transport-level authentication gate for the DeepSeek Harness Web GUI

security-access★ 2↓ 320✓ v0.2.0 scan passed

Updated 10/16/2026

onebox-dsh-bridge

Onebox Dsh Bridge

DeepSeek Harness plugin: bridge local dsh web to the OneBox Android app over the public internet (scan-to-pair, E2E encrypted tunnel). 万宝盒 App 的 DSH 云端中继桥插件。

integrations-communicationsecurity-access★ 2↓ 319✓ v0.2.0 scan passed

Updated 10/16/2026

@xinvxueyuan/cordis-plugin-secret

Cordis Plugin Secret

Cordis (DeepSeek Harness) plugin: secrets travel between a human and the agent in both directions — the agent asks, or the human attaches one to their own message — and the agent only ever receives an opaque session-scoped variable name (DSH_SECRET_*), ne

security-access★ 0↓ 944✓ v0.6.1 scan passed

Updated 10/16/2026

Insight

Plugin insight center — one answer to '哪些值得装': requirement matching (plugin_guide), environment recipes (recipe), health scoring (plugin_rank), static security scanning (plugin_audit), and a single install verdict (plugin_verdict)

security-accessdeveloper-tools★ 2↓ 308✓ v0.1.0 scan passed

Updated 10/16/2026

Audit

Ecosystem-wide plugin health audit for DeepSeek Harness: syncs the GitHub dsh-plugin topic into a local catalog, probes npm, static-scans plugin files for security, scores every plugin (maintenance / docs / npm / ecosystem + security veto), keeps score hi

security-accessdeveloper-tools★ 2↓ 306

Updated 10/16/2026

Defend

Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets

security-access★ 0↓ 902

Updated 10/16/2026

dsh-plugin-gate

Plugin Gate

Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules scan plugin sources for malicious install scripts, credential theft, obfuscation and network callbacks before 'dsh plugin add', with scan baselines (gate_diff

security-access★ 1↓ 445

Updated 10/16/2026

dsh-codex-approval

Codex Approval

Codex-style approval autopilot for DeepSeek Harness: ordered glob rules (allow/ask/deny) plus an AI risk judge (low/medium/high) mapped through a risk tolerance, as an approval answerer.

security-accessdeveloper-tools★ 2↓ 295✓ v0.4.7 scan passed

Updated 10/16/2026

@cyd-prc/dsh-threat-gate

Threat Gate

Session-level threat scoring for the DeepSeek Harness: a port of the EntropyRuntime session threat tracker (PATCH-02) — sliding-window signal accumulation, three scoring rules, three levels — measuring and recording only by default, with an optional criti

security-access★ 0↓ 866✓ v0.2.4 scan passed

Updated 10/16/2026

dsh-plugin-audit

Plugin Audit

Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins

security-access★ 5↓ 142✓ v0.1.4 scan passed

Updated 10/16/2026

dsh-approve-for-me

Approve For Me

Rule-gated automatic approval for DeepSeek Harness sandbox escalations with an optional LLM reviewer and native human fallback.

security-access★ 15↓ 52

Updated 10/16/2026

dsh-plugin-wsl-env

Plugin Wsl Env

Use the WSL subsystem as the execution environment for DeepSeek Harness sessions: shell operations, file reads and writes, and command execution all take place within the subsystem; the directory selector and GUI terminal likewise target subsystem paths, with commands sandboxed through bubblewrap wi

developer-toolssecurity-access★ 2↓ 280✓ v0.9.0 scan passed

Updated 10/16/2026

Cert Mcp

Read-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-dimension evidence for DeepSeek Harness plugins.

security-access★ 0↓ 839✓ v0.2.6 scan passed

Updated 10/16/2026

dsh-plugin-subagent-roles

Plugin Subagent Roles

File-defined subagent roles for DeepSeek Harness: project (.dsh/roles) and global (~/.dsh/roles) role files, a compact role catalog, real per-role tool filtering, and a per-role tool-call budget.

agents-orchestrationsecurity-access★ 1↓ 417✓ v0.4.3 scan passed

Updated 10/16/2026

@eternalloveone/dsh-palm

Palm

掌上 dsh — the standalone mobile surface for the dsh web GUI: scan-to-pair device trust, the /m/ phone UI, the /m/api RPC channel with realtime SSE mux bridge, and a polished desktop pairing panel. Extracted from dsh-remote-web-ui (M1, behavior-identical)

security-accessui-customizationintegrations-communication★ 0↓ 833✓ v1.6.0 scan passed

Updated 10/16/2026

dsh-tailscale-console

Tailscale Console

Tailscale remote access operations dashboard for DeepSeek Harness: health checks, HTTPS entry toggle, macOS proxy bypass, relay server operations, and ACL snippet generation.

security-access★ 1↓ 413✓ v0.4.8 scan passed

Updated 10/16/2026

dsh-git-credentials

Git Credentials

Out-of-tree dsh plugin: GitLab, GitHub, Gitee, Gitea, and Bitbucket tokens stay out of the model context, stored encrypted (AES-256-GCM) in a plugin-owned file; the model calls forge API tools on demand, and the web settings page manages sites and tokens.

security-accessdeveloper-tools★ 2↓ 274✓ v0.5.0 scan passed

Updated 10/16/2026

Autotier

Automatic strong/cheap model-tier routing for DeepSeek Harness: intent-gated tier landing on the agent/request waterfall, plan-mode handoff (strong plans, cheap implements), deterministic high-risk guards on tools/pre-execute, failure escalation with TTL

models-usageagents-orchestrationsecurity-access★ 0↓ 824

Updated 10/16/2026

dsh-jev-guard

Jev Guard

Pre-execution safety valve for DeepSeek Harness: a TypeSafe Jev question decides whether a shell command/script would irreversibly delete or overwrite real data. Four states (allow/revise/block/escalate), mounted on tools/pre-execute. Zero dependencies; W

security-accessdeveloper-tools★ 1↓ 399✓ v0.5.5 scan passed

Updated 10/16/2026

dsh-hub-oauth-gateway

Hub Oauth Gateway

Local-first usage, cost, quota, account, and forecast analytics for DeepSeek Harness Web, with coding-subscription OAuth sign-in (Grok Build, Codex, Kimi Code, Claude Code), an optional loopback API gateway, and opt-in local auth/usage monitoring

models-usageintegrations-communicationsecurity-access★ 1↓ 397

Updated 10/16/2026

← Previous 1…3 4 5 6 7…43 Next →

DeepSeek Harness Plugin Hub

Profiles Plugins Categories News Docs Sign in Manage Profiles

Profiles Plugins Categories News Docs Sign in