Categories › Security & operations
Security & operations
4626 pluginsSecurity audits, usage metering, WSL and system tools.
Sorted by downloads. 100 per page.
xtd1145/dsh-full-access-switchunregistered
One-time Full access switch for DeepSeek Harness: new sessions (workspaces and conversatio
↓ 0
yanli-nyan/dsh-recycle-binfails
Sends file deletions to the Windows Recycle Bin, lists and restores them by id, and blocks
↓ 0
Yazzyk/dsh-file-shieldtested
Blocks an agent from reading, searching, writing, or editing chosen files and directories,
↓ 0
dsh-audit-plugin
会话成本审计：看看一次对话的 token 花在哪、哪一步贵，并把优化建议做成一键可应用的修改。
↓ 0
yuloop/dsh-secret-vaulttested
Hands secrets and PII to the agent without them entering its context, with checksum-valida
↓ 0
yunling-bionic/dsh-rule-guardtested
Reviews side-effecting tool calls against the project rules and the current goal before th
↓ 0
Yuuz12/dsh-webui-authtested
WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resource
↓ 0
yyfdfsyyf-source/dsh-hard-gatetested
An independent permission gate above the built-in sandbox. It blocks writes outside the wo
↓ 0
yyjsdsg/dsh-redacttested
Mask secrets, local paths, private IPs, emails and phone numbers in session text before yo
↓ 0
yzxxy010/dsh-workspace-write-plustested
Adds a workspace-write++ permission that keeps file tools inside the workspace while skipp
↓ 0
ZeroClave/zeroclave-dsh-privacytested
Detect and redact sensitive message text before sending it to models, with local regex, br
↓ 0
zjuhbh/dsh-full-with-approvaltested
Fourth permission preset for dsh: unconfined, GPU-capable sessions (danger-full-access) wi
↓ 0
dsh-plugin-inspectorunregistered
Know what a DeepSeek Harness plugin does before you install it — static pre-install analys
↓ 0
Vladimir-Kryshchenko/dsh-route-fence-lintertested
Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win t
↓ 0
dsh-linkr-beetested
Linkr Bee (BLE/UART wireless serial bridge) as a DeepSeek Harness plugin: a live xterm con
↓ 0
uwu9039/dsh-airbagtested
Blocks API keys pasted into the composer or written by tools, logs leak events, and scans
↓ 0
taxueseek/dsh-plugin-guardfails
Static-only plugin gate and clinic for DSH: audit before install, hash-and-capability lock
↓ 0
tancheng33/dsh-egress-guardfails
Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress al
↓ 0
tancheng33/dsh-credentials-vaultfails
HashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-opera
↓ 0
tancheng33/dsh-code-runtime-containerfails
Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in
↓ 0
sujingkpo/dsh-auto-passtested
A continuation of simon300000/dsh-auto: the Auto Approve permission preset for the DSH Web
↓ 0
simon300000/dsh-autotested
Adds an Auto Approve permission preset to the Web UI, using a fresh restricted Reviewer Ag
↓ 0
dsh-fs-deny-policyfails
DeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never to
↓ 0
@kira905/dsh-net-toolkit
Networking & cross-host helpers for DeepSeek Harness (DSH): Clash Verge core control with
↓ 0
@playform/ets-hook-dsh-search-suggestertested
The search-suggester hook: a DeepSeek Harness plugin that hooks the tools/post-execute wat
↓ 0
@gcszhn/mcp-sentinel-deepseek-harness-pluginfails
DeepSeek Harness plugin that acts as a sentinel between the AI agent and MCP servers — pol
↓ 0
@playform/hook-dsh-search-suggestertested
The search-suggester hook: a DeepSeek Harness plugin that hooks the tools/post-execute wat
↓ 0
dsh-plugin-session-spendunregistered
DeepSeek Harness plugin: shows the current session's spend, priced by DeepSeek's peak and
↓ 0
almazom/dsh-almazom-approve-escalatetested
One-click Approve & escalate on the approval card: answers the pending request and switche
↓ 0
dsh-deepseek-offpeak-indicatortested
DeepSeek Harness plugin: a small dot left of the model name in the composer tool row — yel
↓ 0
@playform/ets-plugin-dsh-batchstatetested
The batch-state plugin: a DeepSeek Harness plugin that is the cooperative batch's live sta
↓ 0
@playform/plugin-dsh-batchstatetested
The batch-state plugin: a DeepSeek Harness plugin that is the cooperative batch's live sta
↓ 0
173787247/dsh-repeat-stoptested
Hard-stop consecutive identical tool calls after a configurable streak so the agent cannot
↓ 0
173787247/dsh-tool-budgettested
Hard-stops further tool calls after a configurable per-session budget is reached.
↓ 0
863683348/dsh-govfails
Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priori
↓ 0
940842546/dsh-permissionstested
Claude Code-style permission rules engine: hard/deny/ask/allow tiers with a hard tier abov
↓ 0
a903067276-rgb/dsh-perm-guardtested
Auto-approval permission guard: a middle tier between workspace-write and danger-full-acce
↓ 0
accpowered/dsh-auto-reviewfails
LLM approval answerer for sandbox escalations beyond workspace-write: a deterministic rege
↓ 0
accpowered/dsh-credential-managerfails
Named user credentials the model uses by reference: values are entered on a Settings → Cre
↓ 0
AHIOSUZ/dsh-workspace-toolstested
Applies per-workspace default Agent and permission presets to new root sessions automatica
↓ 0
AhYi8/dsh-agent-recycle-guardtested
Rewrites agent-issued delete commands (PowerShell `Remove-Item` and its aliases, Bash `rm`
↓ 0
alaxrpg/dsh-llm-approve-for-mefails
Uses an isolated LLM review to approve or reject DSH sandbox permission requests.
↓ 0
@tappass/dsh-governancetested
The authority layer for agentic AI, as a DeepSeek Harness plugin. Governs every tool call
↓ 0
amwangfan/dsh-privacy-guardtested
Control panel for a local credential-redaction gateway in DeepSeek Harness: gateway and mo
↓ 0
AntaresCorn/dsh-auto-reviewertested
Codex-style auto-review permission mode: adds an auto-review preset that auto-approves saf
↓ 0
apex-mochen/dsh-sandbox-arg-guardtested
Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (
↓ 0
ArisuYuuko/dsh-approval-explainertested
Writes a model-generated annotation into every DSH escalation approval prompt — what the c
↓ 0
arrow949/dsh-turn-approvaltested
Turn-scoped “Allow for this task” approvals: automatically allow matching `danger-full-acc
↓ 0
ateen18/dsh-plugin-security-reviewtested
Pre-install static security review and runtime guard for dsh plugins: deobfuscation decodi
↓ 0
BotonJ/dsh-plugin-sentineltested
Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic executi
↓ 0
cdxiaodong/dsh-guardiantested
Agent security guardrail: intercepts and audits every tool call, requiring human confirmat
↓ 0
ChenLaoshiYF/dsh-mcpguardtested
Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous s
↓ 0
devil233-ui/dsh-auto-review-defaulttested
Puts sessions into the built-in Auto review permission preset: new sessions at creation, e
↓ 0
DevilSpiderX/dsh-workspace-only-plugintested
Restrict the file access of agents in any sandbox mode (read-only / workspace-write / dang
↓ 0
DingZhiQi5596/dsh-plugin-guardtested
DSH Desktop plugin safety guard: self-repairs plugin load crashes and runs 8 core safety c
↓ 0
Dofang-C/dsh-file-integrity-checktested
Scan and fix Low integrity labels, non-inherited S-1-4 sandbox ACEs, and related Everyone
↓ 0
DSH-Raising-Plan/dsh-agent-gatetested
Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_r
↓ 0
DWJZ/dsh-allowfails
Filesystem permissions for shell calls, granted per path and capability rather than per co
↓ 0
@playform/ets-hook-dsh-workspace-audittested
The workspace-audit hook: a DeepSeek Harness plugin that is the workspace's ACCOUNTABILITY
↓ 0
GDWhisper/dsh-web-startup-authtested
Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: s
↓ 0
GooDAnDReaDY/dsh-dsml-artifact-guardtested
Sanitizes leaked DeepSeek DSML closing tags from model text streams.
↓ 0
heyuanliu3-byte/dsh-auto-presettested
Restores the permission preset a session was last set to when that session is reopened; a
↓ 0
hhl123hhl/dsh-privacy-shieldtested
Rewrites the model-visible copy of system, developer, user, assistant and tool messages in
↓ 0
IamNewHands/dsh-approval-gatetested
Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has rea
↓ 0
IFIAnder/dsh-loose-reviewtested
Reviews destructive shell commands with a model before they run, asks you to confirm or bl
↓ 0
iiiweiii/dsh-guardwalltested
Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk
↓ 0
JohnXu22786/safety-netunregistered
Destructive-command interception gate for dsh: parses shell semantics, judges risk against
↓ 0
JohnXu22786/secret-guardfails
Blocks agents from reading or writing sensitive files (.env, credentials, key material), m
↓ 0
@playform/hook-dsh-workspace-audittested
The workspace-audit hook: a DeepSeek Harness plugin that is the workspace's ACCOUNTABILITY
↓ 0
@playform/hook-dsh-tool-coachtested
The tool-coach hook: a DeepSeek Harness plugin that teaches the model to stop using the te
↓ 0
kipozannaki/DSH-PDR-Plugintested
Runtime plugin firewall for sessions started through its launcher (the DSH Desktop app can
↓ 0
Ledas-as/-deep-seek-harnessfails
Chinese progress guidance and user-confirmed project or global memory, respecting DSH Full
↓ 0
leetom314/dsh-risk-gatetested
Semantic risk grading and progressive authorization: classifies tool calls into safe/risky
↓ 0
LeslieWylie/dsh-fleet-auditfails
Read-only agent-fleet credential hygiene audit: credential-file permissions, embedded cred
↓ 0
lizhijie429/dsh-push-privacy-guardtested
Privacy guard for git workflows: before git commit, git push or gh repo sync it scans the
↓ 0
lmk2215/dsh-session-locktested
Conversation lock for the DeepSeek Harness sidebar: every conversation row gets a lock but
↓ 0
lonelymoon87/dsh-guardianfails
Adds dangerous-operation policy checks, output redaction, and a security-review workflow.
↓ 0
LWLAymh/dsh-edit-guardianfails
File-change diff bar with keep/undo summary, plus dangerous-command approval and red highl
↓ 0
Martlet-Tech/dsh-approval-explaintested
Adds an Explain button to the approval card: one model call returns exactly three lines re
↓ 0
Mengshang-spec/dsh-plugin-trustlenstested
Read-only DSH plugin auditor with static scanning, current-session model review, and confi
↓ 0
MYCF711/dsh-sovereigntested
Host-plane sovereignty clause and content guard: appends user-held adjudication to the sys
↓ 0
MyRemme/dsh-computer-use-guardtested
Three-tier deny/ask/auto gate for the computer-use (cua-driver) tool family: each tool cat
↓ 0
NattoCB/dsh-safe-deletefails
Tools guard that moves agent-issued `rm` targets to the macOS Trash instead of deleting, w
↓ 0
nengong-ai/dsh-keychain-credentialsfails
Pure JavaScript macOS Keychain credentials provider for DeepSeek Harness, replacing plaint
↓ 0
NEVSTOP-LAB/dsh-approval-modetested
Adds an approval-mode toggle next to the permission selector: default approval keeps per-c
↓ 0
omdsh-dev/dsh-security-auditfails
Local security audit: config, plugin origins, sessions, network exposure — read-only redac
↓ 0
↓ 0
↓ 0
↓ 0
PerryLink/dsh-skill-pack-securitytested
Security-audit methodology skill pack plus the plugin_vet supply-chain gate: eight agent s
↓ 0
Qcsj777/dsh-stop-that-shittested
Arms an explicit per-session scope contract from a `$stop-that-shit` directive and audits
↓ 0
QinpanWan/dsh-prompt-antivirusfails
Global prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments
↓ 0
ruanhaodong-tt/dsh-security-guardfails
Runtime security guard for DSH: loader import confinement, HTTP Host header validation, an
↓ 0
SARTHAK2511/dsh-cve-auditfails
Live CVE/supply-chain audit for your workspace's own project dependencies (npm/pip/go), ba
↓ 0
sashankh/dsh-taintguardfails
Taints the agent when tool results carry untrusted content, gates the privileged calls tha
↓ 0
SeaOf0/dsh-redteam-modelunregistered
Authorized-security DSH collection: nine work modes (redteam coordinator, pentest, code au
↓ 0
Shiyuedong-Jade/DM-securityfails
Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an
↓ 0
ylwl1997/noatmark-dsh-plugintested
Text hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LL
↓ 0
dsh-plugin-continue-on-limittested
DeepSeek Harness plugin that auto-continues a turn the model ended by exhausting its outpu
↓ 0
@playform/hook-dsh-workspace-approvetested
The workspace-approve hook: a DeepSeek Harness plugin that binds the EXACT human approval
↓ 0