プラグイン

A Codex-style right side panel for the DSH Web UI — session artifacts browser (live file tree, scan include, preview, reveal) plus a side chat that forks the current session with a model picker, human-pacing scheduled runs and smart send-to-bottom scrolling.

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

Role-based plugin recommender for DSH: asks the user's role (developer, designer, writer, researcher, ops, student...), recommends suitable plugins, and audits each with a local static security scan (dangerous code patterns + 0-100 risk score) and a reputation check (npm downloads / GitHub stars).

Cline free models provider for dsh: scan the Cline model catalog dynamically and serve the :free models through the harness LLM seam

DSH 服务面板：查看由哪个对话（Agent 会话）启动了哪些服务——PEB 环境块读取 DSH_SESSION_ID 归属（含分离进程），三态健康探测 + HTTP 码，支持礼貌停止、日志实时查看与启动参数重放。Host scans agent-started services with session attribution; client renders a fullscreen table panel with tri-state health, graceful stop, live logs

Ghost-text completion for the composer: FIM suggestions stream in inline after a typing pause (SSE, first token rendered immediately), Tab accepts one word at a time and Shift+Tab takes all, in-flight requests are truly cancelled on retyping or Esc. Plus two-layer typo checking: a browser-local dictionary scan (Chinese wrong phrases, English misspellings and proper-noun capitalization, user-defined per-browser entries) with a debounced LLM context pass, underlined in red in the text with per-item navigation and click-to-fix.

AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.

DeepSeek Harness plugin: scan a codebase and generate a Software Design Document (SDD) outline.

Scans Markdown files for dead http(s) links.

DeepSeek account usage monitor (HP/MP) — sidebar module with balance and token usage bars; WeChat scan login via bundled CLI (login-cli.mjs), hourly visible-only sync, and real-time local token increments.

Plugin value auditor: pre-install review (source scan + LLM judge) and post-install audit of installed bundles, with model-switch re-audit reminders.

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".

Scans a project's declared build commands — Makefile targets, package.json scripts, just recipes, deno tasks — and exposes them as ready-to-run agent tools.

Codex-style @file/@folder mentions for the DSH web composer: workspace file/folder picker menu, plain-text colored mention tokens via the platform lexicon scan, and a nested-git-aware file index.