DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Detects silent tool failures hidden behind a zero exit code and converts them into blocked results or attached notices, making the error visible to the model the moment it happens.
One-click security health check for DSH Web: read-only scanning of plugins, credentials, and policies with graded scoring, AI-assisted deep review, and local guard-mode auditing, zero outbound calls, no API key required.
A dsh security plugin that intercepts agent reads and writes of sensitive files and applies content masking to prevent secrets from leaking into the conversation context.
DeepSeek Harness Web GUI admin plugin offering manual restart, automatic version check, and one-click update, embedded in the header and settings page.
A static-analysis security gate for DeepSeek plugins: pre-install audit, post-install hash and capability lock, local fingerprint peers, and mechanical risk amputation — never executes the target.
Scans dependency licenses into SPDX IDs, classifies by copyleft type, and validates allow/deny policies before release. Pure local, no network.
Integrates xAI Grok into DeepSeek Harness with subscription login, Responses chat, web search, and Imagine image generation.
A security firewall for DeepSeek Harness providing pre-install scanning, runtime tool-call policy enforcement, MCP trust tiering, data-exfiltration audit, and prompt-injection detection.
A persistent ledger plugin for DeepSeek Harness with per-call precise billing, official balance, budget management, peak/off-peak pricing, and usage summaries.
Hard-blocks mutations on DSH critical paths, snapshots files before refusal, and provides CLI self-recovery to keep the harness intact by default.
8 agent tools for S3/FTP/FDS file management with per-call approval, background transfer jobs with progress and cancellation support.
A remote access login gate for the DeepSeek Harness Web UI: a password wall for non-loopback visitors with full /api RPC gating and cookie-based sessions.