Introduction

DeepSeek Harness (DSH) follows the “everything is a plugin” philosophy, extending agent capabilities through plugins. In Windows environments, agents often need to interact with the system, such as reading or writing the clipboard, inspecting the hosts file, or running network diagnostics. The dsh-win-toolkit plugin provides these native capabilities for DSH agents through secure PowerShell scripts.

Plugin Overview

This is a Windows native capabilities package maintained by Edge-Echo. It provides DeepSeek Harness (dsh) with clipboard read/write, system notifications, hosts file inspection, and network diagnostics. All tools are backed by PowerShell. The current toolset does not require administrator privileges (except for clipboard writes and notifications), and it transmits input as Base64 to prevent injection attacks.

Core Features

This plugin provides the following tools:

  1. win_clipboard_read: Reads text from the current clipboard.
  2. win_clipboard_write: Writes text to the clipboard.
  3. win_notify: Displays a system notification (auto-dismisses).
  4. win_hosts_list: Reads the contents of the Windows hosts file.
  5. win_netdiag: Performs DNS resolution and TCP port connectivity tests for a specified host.

Installation and Activation

Install the plugin via the command line:

dsh plugin --profile web add dsh-win-toolkit

After installation, restart the dsh web service to activate the plugin.

Typical Usage

Once the plugin is enabled, you can call the tools above directly in a conversation. For example:

  • Network diagnostics: Ask, “check if github.com:443 is reachable,” and the system will execute win_netdiag.
  • Clipboard operations: Request, “put this text on my clipboard,” and the system will execute win_clipboard_write.
  • Status notifications: Instruct, “notify me when you’re done,” and the system will execute win_notify.

Environment Requirements and Limitations

The following conditions are required to use this plugin:

  • Operating system: Windows 10 or 11 only.
  • PowerShell: PowerShell 5.1+ or PowerShell 7 is required.
  • Node.js: The plugin host requires Node.js 22+.
  • Permissions: The current toolset does not require administrator privileges (all operations except clipboard writes and notification pop-ups are read-only).
  • Security: All user input crosses the script boundary as Base64, structurally preventing parameter injection.
  • Platform limitation: On non-Windows platforms, the tools error out and exit.

Considerations

Because the plugin relies on PowerShell, execution policy settings may affect runtime behavior. Although the plugin runtime uses the -NoProfile and -NonInteractive arguments, system-level execution policy restrictions may still need to be checked manually.

Conclusion

This plugin is a practical tool for extending DSH agent system-operation capabilities in Windows environments. For more details and source code, visit GitHub.