DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Connect provider accounts like ChatGPT and Grok to compare official quotas with DSH local usage ledger, with no telemetry or prompt storage.
Sign in to DeepSeek Harness model providers via existing OAuth subscriptions instead of API keys, with automatic credential refresh.
Neutralizes tool calls with invalid JSON arguments before they reach the wire, so one malformed generation cannot brick an entire session. Zero configuration.
Configurable auto-approval for DeepSeek Harness that settles permission requests via rules and Hermes semantic verdicts, with full audit logging.
Redacts known secret shapes in tool arguments and results with session-stable placeholders, writing an append-only incident log that never stores the preimage.
Policy-driven repository security assessment plugin for DeepSeek Harness, covering package install-lifecycle checks, npm audit and Gitleaks report validation, producing auditable versioned verdicts.
Plants a canary string in model-visible context and denies any tool call that echoes it into arguments or outbound URLs, logging a canary-free incident before execution.
Automated shadow Git snapshots, one-click safe rollback, visual file diffs, and automatic checkpointing on command failure for DeepSeek Harness workspaces, without touching user commit history or branches.
Bypasses the SSRF guard of dsh-browser-playwright so DeepSeek Harness can open localhost and LAN pages for debugging, with per-call user approval and cloud-metadata endpoints still blocked by default.
Connects to the official Futu MCP server, lazily registers market and trade tools as mcp__futu__*, and handles OAuth 2.1 authorization in-process with read-only scopes by default.
Turns any dsh profile into a BugTraceAI pentest agent with authorization-first rules, a bundled scan runbook, and seven MCP tools.
Appends one line per filesystem mutation (path, op, sha256 before/after) to a local, append-only JSONL receipt with zero file contents, for audit and review.