In the DeepSeek Harness (dsh) ecosystem, an agent’s ability to operate remote hosts is a common requirement. Traditional approaches often require deploying additional Agent components on the target machine, which increases maintenance costs. The dsh-tool-ssh plugin solves this problem by invoking the local OpenSSH client, allowing dsh Agents to run commands or transfer files without installing any agent-side components.

Plugin Positioning

dsh-tool-ssh is an SSH tool plugin for DeepSeek Harness (dsh), maintained by developer hcyinnn, and categorized as a network tool. It performs remote interaction via the OpenSSH protocol. Its core value lies in zero-agent deployment—as long as the target machine supports SSH login, it can be operated. The plugin is released under the MIT license.

Core Features

This plugin provides three main capabilities:

  • ssh_run: runs a shell command on a remote host and returns standard output, standard error, and the exit code.
  • ssh_upload: uses scp to upload a local file or directory to a remote host.
  • ssh_download: uses scp to download a remote file or directory to the local machine.

Installation

Before installation, ensure that DeepSeek Harness (dsh) and the OpenSSH client are installed locally (built into macOS / Linux; use OpenSSH for Windows or Git Bash on Windows).

Use the official installation command:

dsh plugin add github:<你的用户名>/dsh-tool-ssh

Typical Usage

Agents can directly trigger the following operations using natural language:

  • Run systemctl status nginx on the production server 10.0.0.5.
  • Upload the local dist/ directory to 10.0.0.5:/var/www/app.
  • Download /var/log/app.log from remote host web-1 to the local machine.

Applicable Scenarios and Notes

This plugin is suitable for scenarios that require operational work or file transfer on remote servers. Keep the following points in mind when using it:

  • Target machine requirements: the target machine does not need any Agent components; it can be operated as long as it supports SSH login.
  • Security and authentication: BatchMode=yes is enabled by default to avoid interactive prompts. It is recommended to use key-based authentication and not to hard-code passwords in configuration files.
  • Output limits: to prevent out-of-memory issues, a limit is set on output streams (default 2 MiB); any content beyond the limit is marked as truncated.
  • Permission risks: the plugin runs with the permissions of the current dsh process. Check the source code and license before installation.

Summary

dsh-tool-ssh provides remote operation capabilities for DeepSeek Harness via the standard SSH protocol and simplifies operational workflows. For more details, see the GitHub repository or the community directory.