Preface

In the plugin ecosystem of DeepSeek Harness (DSH), handling network threat intelligence is a common requirement. Developers need a way to retrieve IP profiling and threat information so that they can make judgments within agent logic. The xby-ip-query plugin provides query capabilities based on Changting threat intelligence for this purpose.

Plugin Overview

xby-ip-query is a DSH plugin. It builds an IP intelligence analysis platform by leveraging a global honeypot network and million-level nodes, providing precise IP profiling and threat warning services.

Core Features

The plugin provides the following capabilities:

  1. set_xby_apikey: Sets the API key in chat. The key is persisted automatically and remains valid after restart.
  2. Changting IP Intelligence Query: Based on Changting threat intelligence, retrieves threat intelligence information for a given IP. The returned result includes the IP address, geographic location, ASN, and historical malicious behavior.

Installation and Activation

Use DSH’s plugin management command to install it.

Method 1: Install directly from GitHub (recommended)

dsh plugin --profile web add github:xby_skill/xby-ip-query

The following is an installation method for local development and debugging:

# 仅用于本地开发调试
dsh plugin --profile web add /absolute/path/to/xby-ip-query

Typical Usage

You need to obtain an API key before use.

  1. Go to the Xiao Ben Yang official website, register, and obtain an API key.
  2. In chat, invoke the set_xby_apikey command to set the key.
  3. Use the query feature, enter the target IP, and the plugin will return its threat intelligence.

Notes

  • Method 2 is only for local development and debugging.
  • Method 3 is for development and debugging via cordis.patch.yml.
  • The plugin runs with the permissions of the current DSH process. Please check the source code and license (MIT) before installation.

Summary

xby-ip-query integrates Changting threat intelligence, solving the intelligence acquisition problem when agents handle IP-related tasks. Developers can configure the API key with a simple command, then query the IP’s geographic location, ASN, and historical malicious behavior.

GitHub repository: https://github.com/xby_skill/xby-ip-query