Introduction

DeepSeek Harness (DSH) uses a plugin-based architecture. In real-world development or security assessments, you may often encounter model refusals or host-level restrictions. mmparko/dsh-purge is designed to help developers distinguish these two layers and to perform controlled evaluation and testing of default policies and model behavior in a local environment.

What Is This

This is a cybersecurity red team plugin for the official DeepSeek Harness. It supports the official Web and desktop EXE clients and provides lower-level control by separating host-level interception from model-level refusals.

Core Features

This plugin provides the following main capabilities:

  • dsh-purge dock: Provides a button next to the session title. Clicking it opens a right-side panel with Clean and Drill pages.
  • Clean page: Displays grouped patch statuses, supports Apply, Restore, and Uninstall operations, and includes a prompt editor and multiple rule sets.
  • Drill page: Integrated into the stable version. Once authorized, it can manage assets, skills, and the local environment.
  • Host policy management: Supports configuration for default copies, permission policies, and tool restrictions.
  • Startup self-check: When the plugin starts, it automatically checks and reapplies the configuration.

Installation and Dependencies

Environment requirements:
* Node.js >= 18
* Windows non-Flash version requires Node.js >= 22

Installation methods:
* Install with one click through DeepSeek Harness Hub.
* Install the dsh-purge package using npm.

Usage Steps

  1. In the session list, click the dsh-purge button next to the session title.
  2. Open the Clean page.
  3. Click Apply. The plugin restarts the session and injects the configuration.
  4. After the restart, start a new conversation; prompt injection then takes effect.

Notes

  • Maintenance status: Project updates have been paused, and maintenance is on hold.
  • Installation and activation: Adding the plugin to the configuration file does not directly patch the host. You must click dsh-purge -> Clean -> Apply through the UI for it to take effect.
  • Overrides and editing: If npm overrides node_modules, do not manually edit the files.
  • Scope of use: The plugin only touches official @deepseek-ai packages and local configuration. It is not a public internet scanner or attack toolkit.
  • Attribution requirement: Citing the project name, ideas, code, or prompts requires attribution.
  • Legal notice: This project is intended for learning and research only. Any illegal or non-compliant use is strictly prohibited.

Conclusion

The core philosophy of DSH is “everything is a plugin,” and the community ecosystem is built by developers. To get more plugins or provide feedback, visit the plugin catalog or the GitHub repository.