dsh-image-preview

In a deep-thinking chat session, an AI often produces screenshots, rendered previews, or downloaded reference images, yet the user is handed nothing but a local file path and has to open a file manager to actually see the result. dsh-image-preview closes that gap. It registers a /preview/* static route on the web profile's built-in same-origin HTTP server and exposes a preview_image(file_path) model tool. The AI calls the tool with an absolute path; the plugin safely copies the image into a preview directory and returns a same-origin URL that renders inline in the chat window with zero CORS or mixed-content friction.

On the security side, the plugin ships with zero third-party dependencies and no install-time scripts, relying solely on Node built-in modules and the ctx object. Every response path is validated via realpath against the configured root, rejecting dot-dot traversal, backslashes, and NUL injection. A strict extension whitelist is limited to png, jpg, jpeg, webp, gif, avif, and bmp; there is no directory listing and unknown paths return 404. The tool only copies the single file explicitly passed to it and never exposes paths outside the preview directory.

If your daily workflow in the DeepSeek Harness web profile involves AI-generated screenshots, UI preview comparisons, or annotated images, and you want the results to appear right in the conversation instead of scattered across the filesystem, this plugin is that last missing link. After a simple install and a web-profile restart, it is ready to use with no further configuration.