dsh-secure-gate
Run the following command in DeepSeek Harness:
dsh plugin install xingjisen/dsh-secure-gate
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install xingjisen/dsh-secure-gate in the DeepSeek Harness terminal; the source is available at https://github.com/xingjisen/dsh-secure-gate . Restart DSH after installation to activate the plugin.
About this plugin
The DeepSeek Harness Web UI runs in open mode by default, which is fine for local experimentation but becomes a real risk the moment you expose it to a team network or allow remote access. dsh-secure-gate plugs directly into the DSH process as a lightweight authentication gateway: zero configuration, works after a restart, and bootstraps the first admin account on initial visit. No Nginx, no external identity provider.
The gateway covers the full chain from credential storage to runtime hardening: Argon2id hashing with password strength and expiry policies, TOTP two-factor authentication with backup recovery codes, CSRF tokens plus CSP, HSTS, and XFO headers, account lockout with IP allow and deny lists, audit logging and session management, as well as rate limiting and exponential backoff for attack mitigation.
It is ideal for individual developers and small teams who want an enterprise-grade security layer on a local or shared DSH instance without spinning up additional infrastructure.
Use Cases
- Add login authentication to a shared DSH instance on a LAN
- Require identity verification before remote access to the DSH Web UI
- Track operational audit logs in a team environment
Best For
- Individual developers with a local or shared DSH instance
- Small teams that need a security gate on a shared Web UI
- Ops staff who want hardening without extra infrastructure
Related Plugins
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.