Plugins

Decides whether Python code is original or a derivative work: reports the longest identical expression span against an upstream tree, an exemption rationale per finding, and a risk list. Pure stdlib `ast` analysis — offline, no model calls.

Background security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.

Real AST-based scan of installed plugins for malicious-intent patterns (dynamic eval, cross-plugin writes, exfiltration-shaped network calls), with an optional periodic schedule and auto-quarantine on critical findings.

Classic Macintosh (System 7) pixel theme: desktop pattern canvas, Finder sidebar, monochrome buttons and dialogs, light/dark support.

Local-first DeepSeek Harness plugin marketplace with GitHub and dshfind providers

Wayfinder Dashboard — DeepSeek Harness 插件，把模糊想法画成一层层决定图

Model-agnostic visual-inspection pipeline for text-only agents: page-by-page HTML screenshots plus a ready-made vision-subagent briefing contract (gewu_prep), then source-code truth verification of every finding (gewu_locate); validated on mimo-v2.5 & qwen3.7-plus.

Codex-style fuzzy skill search for the DeepSeek Harness Web GUI: /bug, /diag, /regression all find diagnosing-bugs in the / skill menu.

Discover, install, and upgrade curated plugins from the OpenHarness catalog in DeepSeek Harness

Pre-Install-Scanner für Supply-Chain-Vergiftungen bei DSH-Plugins: AST (JS-X-Ray) + Deobfuskation + Regex-Heuristiken, beendet sich bei Funden mit einem Nicht-Null-Code für CI-Gating.

Adversarial code review — parallel finders inspect a diff through separate lenses (correctness, lifecycle, contract, security), then each finding goes to independent verifiers tasked with refuting it, and one refutation drops it.

Ziehen & Ablegen oder Klicken, um jede Nicht-Bild-Datei (PDF/Word/Excel/ZIP/Text) in den Composer einzufügen: In der Desktop-Shell wird der echte Finder-Pfad sofort aufgelöst; andernfalls wird sie in den Workspace hochgeladen und der Pfad eingefügt.

Lokales KI-Code-Review-Gate: prüft ein Workspace-/Branch-/Commit-Diff über das verwaltete ocr.js und liefert strukturierte Befunde samt Token-Statistiken; im Gate-Modus schlägt der Lauf bei Befunden fehl.