DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
A self-control guard that intercepts high-confidence host-kill commands from the agent, teaches controlled exit tools, and logs an audit trail to prevent accidental termination.
dsh-auto adds an Auto Approve permission preset to the DeepSeek Harness Web UI, where each action requiring approval is reviewed by a restricted child agent before allowing or denying it.
dsh-plugin-audit statically profiles third-party plugins and provides runtime sentinel to approve tool calls involving credentials or unknown hosts.
dsh-vault is a security plugin for DeepSeek Harness that provides encrypted storage and management for sensitive credentials, with tools for search, password generation, and import/export in various formats.
dsh-approval-gate is a DeepSeek Harness plugin that uses Flash model for risk prediction to implement automatic approval gate, auto-passing safe operations and routing dangerous ones to human confirmation.
The dsh-balance plugin queries the DeepSeek account balance and estimates the current session spend, with balance display and settings features.
LAN gateway for DSH that securely proxies mobile access to the DSH Web UI, with automatic mobile layout optimization and device approval.
dsh-mcp-admin plugin inspects MCP status via /mcp command and manages MCP servers (add, edit, delete, enable, disable) in settings, with changes saved to config file.
The plugin enables DeepSeek Harness to ignore invalid sandbox_permissions requests that do not exceed the current session permissions, preventing not strictly wider errors while maintaining the original approval mechanism.
dsh-permgate is a fine-grained permission control plugin for DSH, providing a custom review gateway to audit tool calls against six permission categories, with global/project configuration and exception rules.
The dsh-api-key-pool plugin for DeepSeek Harness provides automatic API key rotation, failover, cooldown recovery, and a web management panel to balance load and handle rate limits.
A read-only security, supply-chain, and health scanner for DeepSeek Harness plugins that uses heuristic rules and static analysis to detect risks and generate structured reports with risk scores.