Plugin

Security-audit facts AI coding agents cannot compute, plus a verdict gate: euthyna history attributes deleted lines to commits and flags those from security fixes (--origins finds the first introducer), euthyna coverage reports which changed symbols no test ever invoked, and euthyna gate checks each finding against six gates, downgrading any without evidence to an observation.

Read-only DSH/Cordis composition doctor for plugin conflicts and upgrade rehearsal: scan profile manifests and patches, find duplicate rows, hook-order and UI ownership conflicts, compare redacted snapshots, diff plugin/row/hook changes, and preflight target DSH releases with explicit evidence boundaries — without mutating a real profile.

Agent billing and usage observability for dsh web: session-log direct-scan recording (zstd, per-event timestamps, watermark + lastSeq double dedup), multi-account rate profiles per provider and model, per-window live badge reading the window session id via React fiber, full glassmorphism dashboard with 14-day sparkline, budget alerts, relay-station balance queries and a 332-model official price library.

Windows system-drive (C:) cleanup for DSH: rule-based scan, five-tier safety grading, a staging area with a rollback ledger, UAC elevation, and migration to another drive — a model tool plus a Web GUI panel.

Six independently togglable modules in one DSH plugin: per-turn CNY cost, DeepSeek account balance, PDF/Word/Excel/CSV read-write tools with right-sidebar preview, a compiler/runtime environment registry, and run/build tools that execute a program or an MSBuild project by environment id. Toolchain paths are resolved at run time (Visual Studio install-root scan, %ProgramFiles%, PATH) and can be overridden per environment through plugin config, so nothing is pinned to the author's machine.

Network and proxy doctor for DSH: checks system proxy settings, probes local proxy ports, detects TUN adapters, tests GitHub, TCP and HTTP reachability, scans hosts conflicts and prints concrete suggestions for what to change.

Scans the whole C drive and classifies every large folder into A/B/C/D/E/P (safe cache / relocatable / junction-movable / abandoned software / config-memory redline / personal files), then deletes, moves, or redirects on demand — with strong redline protection, dry-run preview and undo. Unknown software decided by LLM fallback + human confirmation. Works on DeepSeek Harness 0.1.7 through 0.2.x, tested on 0.2.0-rc.1.

What's up - a zero-maintenance status board for your sessions. Scans every conversation on the host, extracts a goal + one-line status per session (multi-provider LLM, fingerprint-cached), surfaces half-done, unanswered and recent work in a sidebar panel, and jumps you back into any session with one click.

Local token usage and cost dashboard for DeepSeek Harness: four-segment token breakdown (miss/cache-hit/cache-write/output), cache savings estimate against the miss/hit price gap, per-session drill-down with context-growth curves and anomaly flags, global filters with shareable URLs, monthly budget progress with month-end projection, and day/month aggregate fast-path queries (O(days)) with incremental rescan.

Global prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments, tool results, pre-model messages and the outbound stream; quarantine/block/monitor modes, canary trap, and an evolvable on-disk signature library with learn/import/export.

Slash commands ported from other coding agents (setup, connect, install, trust, browse, doctor, status, model, memory, compact, resume, review, mcp, init, suggest, improve, refactor), a zero-dependency static scanner for plugin source, and an in-repo catalog of audited plugin report cards that cite file-and-line evidence.

Scan a QR code in Settings to open the DeepSeek Harness web UI on your phone inside the active session via a cloudflared quick tunnel.

Auditor di plugin DSH in sola lettura con scansione statica, revisione del modello nella sessione corrente e passaggi di conferma.

Audit di sicurezza e analisi forense delle sessioni dsh: registrazione completa della catena di invocazioni degli strumenti (chi/quale strumento/file/orari), riproduzione con dati sensibili oscurati e scansione basata su regole.

Scansiona i server MCP configurati in Claude Code, Codex e CodeBuddy e verifica la connettività reale tramite handshake di inizializzazione stdio e streamable-http, con interruttori di attivazione/disattivazione e un pannello di controllo /mcp.

Hub delle competenze nella barra laterale: scansiona le directory delle competenze Claude/Codex/Cursor/Gemini per l'importazione con un clic, gestisci le competenze globali/di progetto (attiva/disattiva, elimina) e installa da cartelle trascinate, archivi zip o percorsi locali di qualsiasi dimensione.

Gestisci i worktree Git dentro DSH: analizza i repository del workspace, crea worktree, aggiungili come workspace DSH, apri cartelle, rimuovi worktree ed elimina i record obsoleti.

Analizza l'albero del loader DSH all'avvio per rilevare conflitti tra plugin (mount duplicati, plugin non riusciti o in sospeso, id di riga di configurazione duplicati), arresta o ripristina automaticamente i plugin coinvolti e mostra un popup con il report dei conflitti nell'interfaccia web.

Bundle della community DeepSeek Harness per lo scanner statico skill-security-guard.

Provider di modelli gratuiti Cline per dsh: scansiona dinamicamente il catalogo dei modelli Cline e servi i modelli :free attraverso la giunzione LLM dell'harness.

Plugin DeepSeek Harness: aggiunge all'Agent lo strumento code_scan, usa semgrep per scansionare il codice e produce un report cinese raggruppato per file/numero di riga/livello di gravità

Audit della salute dei plugin a livello di ecosistema: sincronizza il topic dsh-plugin in un catalogo locale con punteggi (manutenzione / docs / npm + download settimanali / ecosistema, 0-100, A-D), scansione di sicurezza statica con veto per ritrovamenti di grado elevato, istantanee della cronologia delle stelle, classifica web e strumenti agente.

Centro insight sui plugin: una sola risposta a "quali vale la pena installare" — plugin_guide abbina le esigenze ai plugin, recipe installa interi ambienti, plugin_rank valuta la salute (0-100), plugin_audit esegue una scansione statica di un checkout locale per la sicurezza e plugin_verdict restituisce install / caution / research / avoid.

Scanner di avvelenamento della supply chain prima dell'installazione per i plugin DSH: AST (JS-X-Ray) + deoffuscamento + euristiche con espressioni regolari, esce con codice diverso da zero in caso di riscontri per bloccare la CI.