Plugin

Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.

Pacchetto completo di skill di reverse engineering (85 file SKILL.md) come plugin Cordis per DeepSeek Harness: router di skill per reverse engineering, penetration testing autorizzato e ricerca sulla sicurezza.

Modalità Auto per DeepSeek Harness (dsh): una voce Auto nel selettore dei permessi le cui richieste di approvazione vengono gestite dalla policy di OpenGuardrails invece che da un umano, con il motore di guardia OGR completo sotto il cofano. Nessuna modifica al core.

Remote DeepSeek Harness with full server-side API access (`settings.*` / `credentials.*` / `host.listDirectory`). Token-gated reverse proxy, per-device sessions, phone invite QR, fence self-check, optional approval / CIDR / idle timeout / local TLS, WebSocket/SSE.

Audit di sicurezza locale: configurazione, origine dei plugin, sessioni, esposizione di rete — report dei rischi in sola lettura e con dati sensibili oscurati.

Gateway di accesso per la web UI di DSH: porta con password e configurazione al primo avvio, bcrypt + crittografia a riposo (AES-256-GCM/HMAC), blocco per forza bruta, log di audit, TLS 1.2+ con redirect 80→443, CSRF, anti-framing.

MCP bridge that lets ChatGPT Web create, view, continue, and supervise DeepSeek Harness agent sessions and goals while preserving DSH's native approval, sandbox, and workspace security model.

Always-on dependency security for DSH plugins: tracks exact installed paths, OSV vulnerabilities, npm releases, and breaking-change signals, then routes project evidence to a DSH Agent.

Alternative plugin market for DSH: curated catalog plus live GitHub browsing, zh/en cross-language search, a fail-closed pre-install static security audit with an install-hook block, and per-plugin README viewing with garbled-encoding repair.

Remote access & authentication for DeepSeek Harness web UI: account/password login gate, MFA (TOTP), signed session cookies, role-based access, in-browser directory picker, account management settings, fully localized in English and Chinese.

Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.

Agent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.

Store di plugin in stile Steam Workshop per la Web UI di DSH: sfoglia, cerca e installa con un clic i plugin della community, con accelerazione tramite mirror, UI di avanzamento, controlli di sicurezza e descrizioni in cinese.

Template-driven code review skill: five-step review flow, critical/medium/minor severity grading, four-dimension scoring (quality, security, performance, maintainability), dual text and HTML report output, and an on-demand reference knowledge base.

Oscura i pattern di segreti supportati dalla copia esportata di `session-telemetry/record` prima che raggiunga i backend di telemetria configurati.

Login gate for the dsh web surface: password or shared-token authentication, session cookies, rate limiting, and a user-management CLI (dsh.bundle manifest since 0.4.1, one-command `dsh plugin add` mounting).

Tested-curation lab for DSH plugins: every entry passes real install/static-scan gates in an isolated environment, with full logs and reproduction commands (Chinese-first).

Agentic Control Plane per DeepSeek Harness — verifica ogni chiamata a uno strumento rispetto alle tue policy prima che venga eseguita, e mantiene un registro durevole di cosa è stato consentito e perché

Plugin provider opzionale per dsh-skill-pack-security: registra l'edizione skills/ (zh) o skills-en/ (en) del pacchetto su ctx.skills. Include entrambe le edizioni incorporate in pack/

Analizza skill e configurazioni MCP alla ricerca di prompt injection, omoglifi, Unicode nascosto, comandi shell pericolosi e fughe di credenziali

DeepSeek Harness community Bundle for the skill-security-guard static scanner

Provenance-aware execution security for DeepSeek Harness. Track sensitive data across tool calls and stop risky side effects before execution.

Ecosystem-wide plugin health audit: syncs the dsh-plugin topic into a local scored catalog (maintenance / docs / npm + weekly downloads / ecosystem, 0-100, A-D), static security scan with high-finding grade veto, star history snapshots, web leaderboard and agent tools.

Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.