プラグイン

DeepSeek Harness Web 設定向け拡張 Plugin リスト — 信頼ティア、折りたたみ可能グループ、完全なプラグイン詳細情報。

北京才知科技（深知可信智能）による政府/企業向けの信頼できるオフィススイート：3 つのスキル——信頼相談（引用マーカー + 由来 HTML 付きの政策/法規 Q&A）、信頼検索（追跡可能 HTML + クリーン Markdown による権威ある政策/標準の検索）、公文書作成（起草/書き換え/Word/紅頭文件納品）。全インターフェースは dknowc 信頼ワークベンチ MCP（Bearer 認証）経由、成果物はセッションワークスペースに保存、キー設定は一度で以後のセッションに永続。npm では dknowc-dsh として配布。

DSH の設定ページに「用量」セクションを追加し、MiniMax Token Plan の使用量（リセットまでのカウントダウン付きの 5 時間および週次のウィンドウ）、モデル別の内訳、動画のボーナスクレジットを表示します。/v1/token_plan/remains を API キーを保持する信頼済みプラグイン経由で取得し、キーが未設定の場合は自動的に非表示になります。MIT。

LiuHe MCP コードツールキット（44 ツール）を dsh Web にブリッジします：repo_map、シンボル検索、寛容なマッチングを行う edit_batch、取り消しジャーナル付きのトランザクション編集、決定論的な品質ゲート — クラッシュ分離された Rust の tree-sitter パースデーモンと SQLite インデックスに支えられています。

DeepSeek Harness に、workspace-write と danger-full-access の中間の権限レベルを追加します。害のないコマンドや、現在のワークスペースを超えて設定済みの信頼領域を対象とする操作を自動承認します。

テキストの衛生管理を行う dsh プラグイン。信頼できないテキストのサニタイズ、不可視文字のスキャン、LLM 由来の整形の除去、CSV 数式インジェクションのエスケープに対応します。

Ships a skill about handing work to subagents instead of doing it inline - which tasks are worth fanning out, how many to run at once, how to send them in parallel, and how to check what they returned instead of trusting the summary.

DSH web plugin: a loopback-only General-settings switch that grants non-loopback (LAN) browsers Host settings persistence, through the trust-lan settings namespace and the remoteSettingsAccess gate consulted by the seam-patched dsh-client-ui-settings.

DSH Web trusted-domain bootstrap for reverse-proxy and tunnel deployments.

The dsh grep and glob tools executed in-process by the dsh-rs addon, with the packaged-ripgrep spawn as the fallback

Configurable LAN access for the DSH Web GUI: a settings tab binds the server to all interfaces, trusts only the addresses you configure, sets the browser session lifetime or removes the token login, and repairs the settings layer on non-loopback visits.

DeepSeek Harness Agent 团队的信任指数插件 —— 为 spawn 出的 teammate 做实时信任评分：四维 EWMA 信任账本（按 agent 类型指纹跨会话累积）DeepSeek Harness Agent teams plugin — live trust scoring for spawned teammates: a four-dimension EWMA ledger keyed by agent-type fingerprint (cross-session)

掌上 dsh — the standalone mobile surface for the dsh web GUI: scan-to-pair device trust, the /m/ phone UI, the /m/api RPC channel with realtime SSE mux bridge, and a polished desktop pairing panel. Extracted from dsh-remote-web-ui (M1, behavior-identical)

Standalone mobile surface for dsh: scan-to-pair device trust, realtime SSE sync, three-channel completion notifications (in-app / Web Push / Server酱·Bark·Telegram), offline outbox, approval & question panels, per-provider usage meters, PWA; a native narrow-screen phone UI.

Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.

All-in-one inline media previewer for mip-img/mip-video/mip-audio fences with streaming playback, ffmpeg transcoding fallback, lightbox, and trust-fenced LAN/mobile access.

Source-filtered HTTP/SSE/WebSocket gateway for using the DSH Web UI behind an authenticated reverse proxy, with loopback trust adaptation, in-app host directory selection, and an allowlisted health endpoint.

Unified trusted settings and password access gateway for DeepSeek Harness

Local tool-call failsafe for DSH: blocks a fixed list of high-risk shell patterns and credential-file reads before execution, with a per-session hash-linked JSONL audit log, and an optional external Gateway for centralized policy.

grok-style terminal UI for DeepSeek Harness — whale edition

Remote access gateway for the DSH Web GUI: login auth plus an HTTP/WebSocket reverse proxy to the loopback server, no --trusted-host needed.

Trusted Iroh mesh networking for DSH hosts, with encrypted peer discovery, remote session delivery, and reachability status.

Taints the agent when tool results carry untrusted content, gates the privileged calls that follow, and refuses credentials passed to network-capable tools in every mode.

Expose the DSH Web GUI over IPv6 or IPv4 from WSL2 through a reverse proxy (Lucky): /wan up sets up the socat relay, Windows portproxy, firewall, and trusted-host fence, with a Settings card plus commands to configure the domain and ports.