Introduction

DeepSeek Harness (DSH) extends its capabilities through a plugin mechanism. Developers often need to call local tools to perform complex tasks. Direct integration of local CLIs requires handling authentication and permission management. dsh-subagent-grok addresses this problem by using a locally authenticated Grok CLI as the default all-in-one DSH subagent provider.

Core Features

  • Uses a locally authenticated Grok CLI as the default all-in-one DSH subagent provider.
  • Runs grok processes in the working directory of the parent session.
  • Sandboxing is enabled by default to restrict write permissions.
  • It does not log login sessions or accept/write API keys.

Installation and Activation

Ensure the environment is ready before installation. This plugin depends on Node.js 20 or later and an authenticated Grok CLI.

export DSH_HOME=/tmp/dsh-subagent-grok-home
dsh plugin --profile headless add dsh-subagent-grok

Version requirements:
- @deepseek-ai/dsh 0.1.1-rc.2 or later
- Grok CLI 1.0.13 or later

Typical Usage

Specify the plugin ID and parameters in the configuration file. The following configuration uses strict sandbox mode:

- id: subagent-grok
  name: dsh-subagent-grok
  config:
    providerName: grok
    sandbox: strict

Use Cases and Notes

  • The plugin runs under the permissions of the current DSH process. Inspect the source code and license before installation.
  • If the CLI is missing, authentication fails, the JSON is invalid, the input is not text, or the prompt is empty, the agent will fail explicitly.
  • Sandboxing is disabled by default; explicitly enable allowUnconfined: true to bypass the restriction.

Conclusion

This plugin simplifies the process of calling the local Grok CLI through DSH. For more details, see the plugin directory and the GitHub repository.