dsh-otp
Run the following command in DeepSeek Harness:
dsh plugin install uckkk/dsh-otp
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install uckkk/dsh-otp in your terminal to install the one-time-password plugin, then enable dsh-otp in your profile; source code at https://github.com/uckkk/dsh-otp
About this plugin
When managing DeepSeek Harness, relying on a single credential to access core configuration is often not secure enough. dsh-otp introduces a one-time-password mechanism into admin sessions, adding an extra verification step to every sensitive operation and reducing the blast radius if credentials are ever compromised.
The plugin is implemented in pure Node.js and supports both TOTP and HOTP algorithms. All computation happens locally, with zero network calls and no dependency on external OTP services. Once the plugin name is added to your profile bundles, its registered tools are immediately available in any session for seamless verification.
It is well suited for teams and individuals who want to add multi-factor authentication to their admin workflow without bringing in a third-party SaaS dependency, and who value offline usability and full code auditability. The MIT license also means you are free to review, modify, and integrate it into your own toolchain.
Use Cases
- Adding a one-time-password gate before sensitive admin operations
- Introducing a second identity check for admin sessions in offline or intranet environments
- Generating and verifying OTPs entirely locally with zero external SaaS dependency
Best For
- Teams that want MFA on the admin surface without a third-party SaaS dependency
- Independent developers who prioritize offline availability and source-code auditability
- Ops personnel managing DeepSeek Harness in local or intranet environments
Related Plugins
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.