DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Static linter that checks Harness plugin webServer routes for correct browser-trust fences, flagging missing or DNS-rebinding-bypassable protections.
A heating safety plugin that returns clear recommendations based on input parameters, built in pure Node.js with no network dependencies.
Zero-dependency web password gate for DSH with cookie-based session auth, automatic built-in auth proxying, login rate limiting, and anonymized access logs.
AST-based heuristic scanner that detects malicious-intent patterns in installed dsh plugins, with optional periodic scanning and auto-quarantine on critical findings.
Safety-gated WireGuard and VLESS Reality VPN operations for DSH, covering preflight, plan, apply, verify, rollback, and client export with strict allowlisted targets only.
Records token usage per model call, polls DeepSeek balance on a timer, and displays a draggable live status card in DSH Web.
A Web-based admin panel for DSH server: online restart, systemd keep-alive, plugin install, runtime monitoring, active sessions, and command terminal — all without SSH.
Adds a full-with-approval permission preset to DSH, granting full compute and GPU access while gating out-of-workspace and protected file writes with one-shot user approval.
Per-provider and per-model LLM rate limiting for DeepSeek Harness with token bucket, concurrency control, upstream 429 backoff, and gateway identity rules.
Adds a full-chain auth gateway to DSH Web UI covering all APIs, WebSockets, and static assets, with TOTP, invite-code registration, role management, and audit logging.
Offline, deterministic check that an artifact digest followed the declared build-to-production chain with complete, ordered gate evidence and environment bindings.
Blocks an agent from re-dispatching a tool with identical arguments after repeated failures, saving latency and provider cost.