DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
A privacy lock for DSH Web profiles that lets you lock Workspaces or Sessions from the sidebar, auto-binds password groups, and unlocks protected content from the main area.
Adds local token and HttpOnly Cookie authentication to the DSH Web profile, enforcing loopback-only binding and rejecting anonymous API or WebSocket access.
Static trust audit for installed DSH plugins: discloses capabilities, prompt injections, provenance, and install scripts with code-based, zero-token, reproducible evidence.
A Windows DSH process-tree audit plugin that displays host descendants alongside task ledgers, flags leaked and orphaned processes, and offers protected tree termination.
Validates Cloudflare Access JWT at the DeepSeek Harness origin to enable secure remote privileged authorization for settings, credentials, and model management.
A local-first control plane for DeepSeek Harness that adds plugin security auditing, workflow regression testing, and $DSH_HOME snapshot/rollback to guard your operational state.
A source-IP-filtered gateway for accessing DSH through an authenticated reverse proxy while the internal web server stays bound to loopback.
Redirects DSH downloads and caches away from the C drive, injects path-discipline prompts into each session, and provides status, cleanup, and migration tools to prevent disk overflow.
An MCP-based BBOT security scanning plugin supporting module and preset management, scan initiation, real-time status monitoring, and result retrieval.
A cryptographically secure random number generation service compliant with the MCP protocol, providing integers, floats, UUIDs, random strings, and booleans for AI applications and LLMs.
Secure database access for AI assistants across SQLite, PostgreSQL, MySQL, and MariaDB, with query validation, audit logging, and EXPLAIN-based performance analysis.
Real-time AI code security scanner that detects vulnerabilities, leaked secrets, suggests secure fixes, and checks GDPR/HIPAA/SOC2/PCI DSS compliance.