COMMUNITY REGISTRY
Discover verified DSH plugins
Inspect versions, compatibility, HMR behavior, source code, and exact install commands.
All plugins
14937 pluginsv0.0.1
dsh-ttft-hedgeTtft Hedge
Hedged requests for streaming /v1/messages LLM calls: fires a second attempt when response headers miss a deadline and races them, retries immediately on 5xx/504, passes through 4xx/429, with statistics.
v0.0.1
dsh-web-search-bingWeb Search Bing
Keyless Bing HTML search provider plus a relay-aware fetch provider with per-hop redirect validation for the dsh web seam.
v1.0.0
dsh-web-search-duckWeb Search Duck
Web search provider that bridges an OpenAI Responses-API-compatible endpoint with the web_search_preview tool into the dsh web seam.
v0.0.1
dsh-mac-notifyMac Notify
macOS desktop notifications for dsh events, delivered over SSH to a small notifier HTTP listener running on the Mac.
v0.0.1
dsh-guild-bridgeGuild Bridge
Bridges a guild expert-team board into dsh: routes guild tasks to one-shot dsh subagents, visible in the GUI.
v0.2.0
@deepwhale-cn/dsh-bundle-cn-skillsBundle Cn Skills
DSH Chinese compliance and engineering skill set (7 skills) bundle. This file also serves as the repository root manifest for the plugin marketplace to identify the package name and verify the npm package.
v0.1.0
@zhujiuyi/dsh-balanceBalance
DeepSeek Harness plugin: identify the provider behind the current route and query its API balance or subscription quota. No subprocesses, no exec permissions, official endpoints only.
v0.1.1
dsh-whale-inurqqWhale Inurqq
Connect QQ to DeepSeek Harness: QQ becomes DSH's task entry point, context source, and conversation partner (OneBot 11 client)
v0.3.4
dsh-client-ui-paopaocatClient Ui Paopaocat
🐱 泡泡猫玻璃主题 — A cute blue-and-white glassmorphism theme based on the Seaglass architecture, with light and blue style options, paw prints, small fish, and bubble decorations
v0.1.0
dsh-db-connectionsDb Connections
Named database connections for DeepSeek Harness: configure MySQL in a settings page, then refer to them by name in chat (for example "query 128"). Read-only by default, with writes opt-in per connection.
v0.1.1
@deepwhale-cn/dsh-agent-scopeAgent Scope
Check whether an agent's tool, file, and network permissions are declared and whether they are overly broad — an agent's permissions are its blast radius
v0.1.1
@deepwhale-cn/dsh-ai-output-trustAi Output Trust
Check whether the code directly executes AI output—eval/exec/SQL/file paths; this is a high-risk category in agents.
v0.1.1
@deepwhale-cn/dsh-alert-relayAlert Relay
Check the alert chain: whether there are alerts, where they are sent, and whether sensitive information is sent along with them
v0.1.1
@deepwhale-cn/dsh-algorithm-filingAlgorithm Filing
Check whether algorithm recommendation services have been registered, whether users have been informed, and whether there is a [disable option] — Article 17 is a mandatory requirement.
v0.1.1
@deepwhale-cn/dsh-ci-guardCi Guard
Scan GitHub Actions workflows to identify exploitable configurations — a major entry point for supply-chain attacks
v0.1.1
@deepwhale-cn/dsh-cn-data-exportCn Data Export
Inspect code and configuration for overseas data exports: overseas endpoints, outbound transfers of personal information, and missing security assessment documentation
v0.1.1
@deepwhale-cn/dsh-cn-filingCn Filing
Check whether the app displays an ICP/APP filing number, a privacy policy entry, and operator information — all are legal obligations.
v0.1.1
@deepwhale-cn/dsh-cn-mlpsCn Mlps
Compare each classified protection requirement in code and configuration that can be statically identified against GB/T 22239-2019
v0.1.1
@deepwhale-cn/dsh-consent-guardConsent Guard
Check whether the consent mechanism is compliant: preselected by default, bundled consent, and no option to withdraw — the Personal Information Protection Law has clear requirements
v0.1.1
@deepwhale-cn/dsh-content-trustContent Trust
Check whether the agent treats external content (web pages/files/emails) as instructions — an entry point for indirect prompt injection
v0.1.1
@deepwhale-cn/dsh-data-classifyData Classify
Check whether data has classification labels and inventories — Article 21 of the Data Security Law requires establishing a classification and grading system
v0.1.1
@deepwhale-cn/dsh-data-rightsData Rights
Check whether the rights to access, copy, and delete are actually implemented — Articles 45 and 47 of the Personal Information Protection Law explicitly require this.
v0.1.1
@deepwhale-cn/dsh-data-scanData Scan
Scan code and configuration files for ID numbers, bank card numbers, and phone numbers — with check digit validation to avoid false positives
v0.1.1
@deepwhale-cn/dsh-dep-auditDep Audit
Check the dependency tree for poisoning and risk exposure: install-time scripts, overly broad version ranges, and non-registry sources
v0.1.1
@deepwhale-cn/dsh-incident-packageIncident Package
If an incident is investigated, can you produce the evidence? Contingency plans, contacts, log preservation, reporting procedures—if you do not prepare in advance, it will be too late when trouble arises.
v0.1.1
@deepwhale-cn/dsh-key-rotateKey Rotate
Check how long it has been since keys and certificates were changed, and whether there is a rotation policy—keys that are not changed for a long time often go unnoticed but pose real risks.
v0.1.1
@deepwhale-cn/dsh-least-privilegeLeast Privilege
Check for excessive permissions: containers running as root, wildcard IAM, fully open CORS, tokens requesting admin — excessive permissions amplify intrusions
v0.1.1
@deepwhale-cn/dsh-license-guardLicense Guard
Open-source license compliance check: scan the dependency tree to identify risks such as GPL/AGPL copyleft propagation and unknown licenses—run it before publishing, open-sourcing, or undergoing an audit.
v0.1.1
@deepwhale-cn/dsh-mcp-auditMcp Audit
Audit MCP configuration: unpinned remote packages, plaintext endpoints, executable local services — MCP is a new attack surface for agents
v0.1.1
@deepwhale-cn/dsh-minor-guardMinor Guard
Check whether personal information of individuals under 14 requires guardian consent, special rules, and an age threshold — Article 31 of the PIPL sets strict requirements