DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Adds a Selected Workspace Write permission option, letting you pick exact writable directories via a tree editor on a per-session basis.
Zero-interruption silent audit and deterministic risk scoring for DeepSeek Harness, with a local fuse that blocks irreversible operations; no network calls, no telemetry.
A pure Node.js plugin that decodes JWT headers and payloads and checks expiration without signature verification.
A privacy-first in-memory diagnostics plugin for DeepSeek Harness that observes runtime state via Cordis extension points and produces a de-identified aggregate report, with no data collection, disk writes, or network calls.
Read-only pre-write guard for git working copies: checks branch drift, staged work, commit identity, and duplicate clones before you edit, commit, or push.
Lifecycle manager for DeepSeek Harness plugins: pre-install health checks, cross-plugin conflict scanning, and ephemeral-to-durable promotion with three-tier confidence.
An in-process reverse proxy for dsh that exposes the loopback service to LAN or the public internet with IP whitelisting, Basic Auth, TLS, and access logging.
Press Enter to approve sandbox permission-escalation prompts in the DeepSeek Harness WebUI without a mouse click.
Manage multi-platform Git accounts with per-project grants and push policy enforcement in the DSH sidebar, keeping tokens out of model context.
Real-time LLM streaming injection filter that detects and blocks prompt injection and protocol pollution before responses reach the agent, with script-based hard blocking, tool-call argument rejection, and live WebUI configuration.
Offline static security scanner for DeepSeek Harness plugins that detects prompt injection, credential exfiltration, and supply-chain risks before installation without executing scanned code.
Auto-rejects unanswered permission requests after 180s and injects a system prompt so the agent keeps running for fail-close safety.