DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Rewrites agent-issued rm commands into recoverable macOS Trash moves via a single registry-level guard that covers every session type.
Zero-config guard fixing thinking-model compaction truncation, redundant escalation fail-closes, and missing tool-call descriptions.
In-process death black box for dsh hosts, recording heartbeat windows, crash stacks, and end-kind detection for complete crash forensics.
Pre-intercepts write, read, and bash calls targeting sensitive paths (.env, .git, SSH keys, .pem) and routes them to an approval prompt; fails closed when no approval channel is available.
A runtime plugin for DeepSeek Harness that detects and breaks infinite tool-call and assistant-output loops before they exhaust token budgets, forcing a graceful text-only answer instead.
A real-time security auditor for DeepSeek Harness that intercepts secret leakage, blocks destructive shell commands, and prevents network data exfiltration.
Provides a read-only, identity-safe process status capability for Agent-authored Relay Monitor Bundles via opaque session-bound Process Handles.
Contributes the relay-monitor-author Skill to DSH's native catalog, guiding the Agent through Monitor Bundle discovery, least-authority customizing, validation, and durable installation.
A runtime security guard for DeepSeek Harness that shadows methods and intercepts HTTP requests to mitigate config-load code execution and Host header forgery, without modifying source code.
DeepSeek Harness credential vault backed by MySQL with optional AES-256-GCM field-level encryption for distributed deployments.
A browser-side DeepSeek Harness plugin that adds a status hub to the sidebar, displaying connection, sessions, MCP servers, skills, and plugin status without requiring an extra server.
A pre-write claim guard for verified DeepSeek Harness file tools that inspects new text against user-maintained JSON rules and delegates blocked or bounded hits to DSH's native approval flow.