Plugins

Content-catalog guard for WeChat mini-programs: validates catalog.json so every activity price is an integer amountFen, every template renders prices through money(), required fields / duplicate copy / image paths are checked, and the result is an issue list plus a unified diff that can be applied with patch -p1. 29 rules over five groups (catalog shape, required fields and uniqueness, amounts, rendering, images). Three fixes are automatic (legacy yuan amount, string Fen, absolute image path) and preserve the file's own indent, EOL and trailing newline; everything else is reported with a hint instead of being guessed. Dry-run by default; apply re-checks the written file so the report describes what remains. One implementation serves a tool, a conversation panel and a CLI with exit codes 0/1/2. Zero runtime dependencies, no model call, no network.

Markdown-as-database project knowledge base for DSH agents: ten kb_* tools (including kb_register for registering existing notes), stable TIDs, `[[node]]` links that never copy text, `[[tscl]]` definitions expanded in place, bounded reads, structural lint covering tscl, workspace-first library discovery, inline git snapshots, a node-graph panel, and a bundled prompt section plus skill that make the agent reach for kb_* instead of hand-written docs/.

Chinese frontend UI design spec for dsh: injects the zh-ui-design skill and prompt rules (section-name headings, no filler copy, one signature element), plus a 10-rule UI copy/style linter.

Generates release material from what a local repository can actually support: a hero image, a feature grid and bilingual copy rendered as SVG and HTML from `README.md`, `package.json` and optional screenshots. Facts are quoted from those files — name, version, license, summary, features, install snippet — and a field that is missing is left unrendered rather than filled with placeholder text. Every feature carries a source citation such as `README.md#L42`, and a claim the repository cannot substantiate is linted out before anything is written, with the reasoning left in `lint-report.json`. `manifest.json` records a sha256 for each input and output, and `--now` or `SOURCE_DATE_EPOCH` makes a run byte-identical. Also ships a GUI panel that regenerates from inside a session.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

odoo-lint for DeepSeek Harness: lint and fix Odoo addons, and lint every addon file the agent edits

ESLint Security SAST bundle and model-facing scan tool for DeepSeek Harness.

Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.

Quality suite: background tsc --noEmit diagnostics fed back after the agent edits TypeScript, plus a /code-review command running five parallel review lenses with confidence scoring; absorbs dsh-code-check and dsh-command-code-review.

LaTeX and BibTeX guardrails for DeepSeek Harness: compile checks with automatic xelatex/lualatex detection, BibTeX entry deduplication and field filling from Crossref, and \cite key audits against the .bib file.

DeepSeek Harness bundle: vendored anti-slop Oxlint rules, the anti_slop_lint tool, the install-anti-slop skill, a standing prompt section, and the /anti-slop command.

The claude-obsidian-derived knowledge-suite skills (wiki, wiki-ingest, wiki-query, wiki-lint, save) as a DeepSeek Harness plugin, with attribution.

Retour de code en temps réel pour DeepSeek Harness — LSP, linters, formateurs, vérification de types et analyse structurelle.