DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
dsh-git-rescue is a DSH rescue recovery plugin that provides automatic crash recovery, remote backup, and a three-layer fallback mechanism via git version management and a guardian process.
An OAuth account page for DSH Web profile that enables sign-in flows for multiple providers such as OpenAI Codex and GitHub Copilot.
Adds path-level read-only protection and extra writable roots to the DSH sandbox, guarding .git and other paths without switching to full-access mode.
DSH credential bridge that lets AI auto-fill browser login forms and inject CLI env vars from stored credentials, with a web admin UI; values stay in plugin memory only and never reach the model context.
Rebuilds a discovery-validation-report security audit loop inside DSH with pure JS workflows, deep and diff scanning, fix verification, and SARIF sealing, with zero external dependencies.
Scans MCP configs and skill files for prompt injection, homoglyph smuggling, hidden Unicode, dangerous shell, and leaked credentials — fully local with no network calls.
Credential-safe Wind AIFin integration for DSH that connects seven financial MCP domains and Alice workflows while keeping the API key hidden from model-visible processes.
The fifth DSH mode: preset ID audit with independent review and a human-approved remediation loop, supporting multiple reviewer backends.
Self-healing watchdog that auto-recovers dsh-web from plugin boot failures within 60 s, captures every tool error, and nudges stuck sessions back to life.
A port origin tracing and safe shutdown tool for DSH Web on Windows, identifying listener ownership and launch chains, and securely stopping DSH services or external processes.
Centralizes tokenrhythm.studio model catalog, account balance, usage, API key management, and service status into a DSH sidebar panel with multi-account switching and auto refresh.
Scope MCP tool injection per directory with inherited subdirectory rules and per-session toggles to trim context and enforce hard call boundaries.