Plugins

Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an HTML report with GB/T 22239-2019 control mapping. Needs Java 8+ and a DmJdbcDriver jar you provide yourself.

Source-install updater for DeepSeek Harness: checks the official GitHub release and the npm record, builds the target tag in an isolated directory, smoke-starts it, then switches through a supervisor process with rollback, with scheduled checks and a daily idle-only install window. Source install only (macOS/Linux); requires Node.js 22.19+, pnpm and Git.

DeepSeek Harness plugin for rulemux: asks the local rulemux CLI for the rules rendered for this workspace (rulemux inject --agent dsh) and injects the output into the session at the first user turn, once per session. Nothing is written into the workspace for rules; skills are the only part that lands on disk.

Personal WeChat and WeCom (企业微信) bridge: QR pairing, one DSH conversation per chat, two-way text/image/video/document/archive transfer, chat commands (/help, /status, /new, /stop, /friends) answered by the bridge itself without spending a model turn, a switch that restricts the bot to 1:1 chats (group messages are dropped silently and counted), remote approval by replying 1 or 2 in the chat, and a two-way WeCom intelligent robot over its long connection (no public URL needed) that also receives and sends images, files and videos.

Shows a system notification when a turn finishes, carrying the session title and a summary of the reply.

Sends an Edge/Windows desktop notification when a tool call waits for approval, the agent asks you to choose an option, or a session finishes a turn, and only while the DSH page is in the background or unfocused; an optional chime covers cases where the browser or Windows suppresses the notification.

Runs a diff past several reviewers at once — a CLI coding agent such as codex or claude, or a DSH subagent — and merges their separate sections into one report; reviewers and named review modes are configured in the settings UI.

A shared todo list for DeepSeek Harness: you and your agent manage the same tasks from a sidebar page or todo tools, with per-project and global todos, and one-click task references into the composer.

Recursive delegation for dsh agent trees: a preset plus Host limits bound what each subagent may do, subagents work in separate _agents/ workspaces, and the parent decides which results to integrate.

Settings page for agent modes (presets): switch up to 15 capabilities per mode (commands, files or read-only files, web, subagents, and more) or individual plugin rows; edit each mode's system prompt with variable checks, a full preview, version history, optional live updates for running sessions, and an approval-gated mode_prompt chat tool; create modes from four starter templates or copies; merge built-in updates after a dsh upgrade while keeping your changes, and turn off rows that fail to load.

Runs a second agent: hands independent subtasks to a local Codex CLI in parallel (up to three at a time), and asks it to review a design or a plan before the user sees it, returning conclusion, evidence, counterexamples and a verification step. A dispatch missing its timeout or its acceptance check is rejected by the plugin, not by the model remembering to check.

Agent preset for DeepSeek Harness: the standard tool stack plus four working rules written into the persona prompt — a project keeps at most four documents (intro, decisions, change log, current state and next steps), those documents describe only the current state with no AI edit history or superseded decisions, no git commit or push or pull request until the user explicitly asks, and a careful-coding workflow (restate the goal and done-criteria first, surgical diffs, evidence before claiming success) with plain-language reports.

Keeps a DeepSeek Harness run going on its own: continues a turn that ended abnormally, and continues a turn logged as completed while the model tool call was emitted as plain text instead, which leaves the agent silently idle. Revives a model request that stops streaming. A wait on an approval or on a question is logged and notified, never answered.

Adds a writing-plans skill that generates a structured implementation plan document before coding, then executes simple tasks inline or offers an execution choice for complex work.

Doxygen comment workflow for C/C++ (including Qt) sources: file headers, functions, module groups, trailing and short comments, plus a scan that flags comments whose signature fingerprint went stale. Requires Python 3.10+ with `pip install tree-sitter tree-sitter-cpp`.

Skill panel: browse skills by source, group them into colored folders, preview files, export a skill as zip, copy one into the project, rename it on disk, and insert /skill calls from a composer menu.

Eight academic skills bundled for one-command install — publication-ready academic figures designed from real data with visual review, AI-text humanization, paper polishing and rewriting, PubMed citation verification (DOI/PMID reconciliation), Chinese citation and medical-book reference checks, and WeChat medical article structuring. Three skills run fully local, five call external services only when used (NCBI E-utilities, DOI resolvers, publishing platforms), declared per skill. Zero telemetry, no install-time scripts. Skills run local Python 3.8+; the academic-figures skill also needs its pip dependencies installed.

Kill AI Slop for DSH — score a received document on three weighted axes (expression, execution, decision), audit work-slop with a delivery-obligation ledger, and machine-verify every quote against the source. Reads docx, pptx, xlsx, pdf, txt, md, csv, json and html. Zero runtime dependencies, zero network, fully local.

Turns course files (PPTX, PDF, DOCX, Markdown) into an outline, per-chapter key points with quoted evidence, Bilibili video picks, syllabus coverage, and Anki/JSON exports.

Design-first PowerPoint builder: six pptx_* tools turn a deck.json design draft into an editable .pptx with AI backgrounds, cutout illustrations and decoration pieces, run layout and contrast checks, render slide previews, and review pages with a configurable vision model; chat cards and a settings page in the Web UI. Requires DSH Desktop 0.2.1-rc.2+ (pptx_render uses its bundled LibreOffice Kit) and an Agnes or ModelScope API key for image generation.

Vision relay for text-only models: a configurable GLM-compatible vision endpoint analyzes the images you attach in the background and the original model keeps answering in the same session, leaving your message, image, model and history untouched. Requires applying patches/0001-session-image-admission.patch to a stock DSH install (images are rejected before storage otherwise); the repo ships an apply/restore script.

Registers an `image2_generate` tool that calls your own OpenAI-compatible image relay to generate or edit pictures (text-to-image via POST /images/generations, image-to-image via POST /images/edits with a local PNG/JPEG/WebP reference, accepting b64_json or image URLs), saves them in the session working directory, and renders them inline in the conversation through its `@wisdoverse/dsh-inline-media-viewer` dependency.

Lets DSH drive the Chrome tab you are already browsing, no vision needed: the page reaches the model as structured text with a numbered element list, and clicks, typing, key presses, scrolling, tab handling and navigation wait for your confirmation in the extension side panel while password and payment-card fields stay masked. Fifteen browser_* tools cover snapshot, text, tab list, open, follow, click, type, press, scroll, wait, navigate, back, close, forward and reload. A repack of the bridge plugin from omdsh-dev/dsh-browser, published to npm so it installs with `dsh plugin add`: the peer ranges the host checks are widened so the install is not refused as incompatible, the bundled extension also probes the DSH Desktop host port 19387 so no bridge address has to be typed, and a script copies the extension to a fixed directory so a profile switch or reinstall cannot break it. The prebuilt release tarball carries the plugin and the built MV3 extension. Upstream: https://github.com/omdsh-dev/dsh-browser.

Controls the Chrome you are already logged into: the model clicks, types, fills in forms, reads pages, takes screenshots and downloads files in your real tabs, including inside same-origin iframes. Runs on macOS, Windows and Linux; needs Chrome 116+ and Node 18+. Works over native messaging and chrome.debugger instead of a listening port. Ships 12 browser_* tools and a cb CLI, dispatches real CDP input events, draws an on-page cursor that also appears in screenshots, and adds a toolbar panel with live status, the controlled tabs and a pause switch. browser_download saves a link, an element's target or a URL with the site's login cookies (following redirects, keeping the server's file name) to the Downloads folder or the session's working directory; cross-origin iframes are named in the snapshot but not entered. The native host and the MV3 extension travel inside this tarball: on first load the plugin copies them into place and writes the native-messaging registration itself, so there is no clone, no install.sh and no python3 - the one step left is adding the extension to Chrome: install DSH Bridge from the Chrome Web Store (https://chromewebstore.google.com/detail/bippcbbbipppmhjkjomgdnjbooecbimo, no Developer mode), or load the bundled unpacked copy at chrome://extensions (the plugin opens that page and puts the folder on the clipboard for you). Until then the tools fail loudly with those steps. On Windows the registration goes into the registry (for Chrome and Edge) and the host talks over a named pipe. A daily CI run on GitHub's macOS, Windows and Linux machines installs the plugin, loads the extension into a real Chrome and reads a page through the browser_* tools.