플러그인

Static and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web panel, and allowlist.

One-command bundle of the three AgentFrame plugins: memory-director, compaction, and aura-scheduler together.

Manage and organize your agent skills by category, tags and collections in DeepSeek Harness, with a settings panel and a slash-command folder picker.

Update checker (npm edition): a settings page comparing local and latest versions of @deepseek-ai/dsh and every installed plugin, with a red-dot nav reminder and ready-made update commands.

Bidirectional Feishu/Lark channel for DeepSeek Harness: persistent conversations, true streaming replies, 40 MCP Feishu tools, slash commands, and an IM-bot status tab in the plugin settings.

Cron/one-shot scheduled tasks: run shell commands or fire webhooks on a schedule, with optional ServerChan/DingTalk/Feishu/webhook delivery of results.

Clusters arXiv, first-party lab, official artifact, hardware-vendor, and opt-in X signals into versioned release evidence bundles, then gates claim-level reproduction on commands, artifacts, metrics, and verifiers.

HTTP/API debugging toolset: full-control HTTP requests (method/headers/body/auth), curl command parsing and one-step execution, in-session request history with side-by-side response comparison, pagination-aware Link headers, and DeepSeek-branded UI cards (optional dsh-http-tools-ui).

DSH용 증분 diff 리뷰어: 배치를 승인한 후 체크포인트 이후 새 변경 사항만 표시되며, Web 리뷰 패널과 `/review` 명령이 피드백을 에이전트에 다시 주입합니다.

Pi TUI(차등 렌더링 터미널 프레임워크) 프런트엔드: 스트리밍 markdown, 사고 접기, 도구 카드, 슬래시 명령어, 승인/질문 오버레이, 공유 dsh 세션 스토어

DeepSeek Harness(dsh)용 Command Code 프로바이더 플러그인 — $1 Go 플랜을 포함한 모든 Command Code 플랜과 호환; Provider API가 아닌 /alpha/generate를 통한 Studio 인증 API 키 사용

dsh용 전역 스킬 허브: Claude Code, 프로젝트, .skill-package 스킬을 ~/.dsh/skills에 통합, 참조/복사 방식 가져오기와 슬래시 메뉴 사용 지원

에디터 위임을 위한 DeepSeek Harness ACP 번들: dsh 자격 증명과 세션 로그를 공유하는 원 명령 Agent Client Protocol stdio 서버 프로필

DeepSeek Harness(dsh)에 빠져 있던 동반 CLI: 한 명령으로 MCP 서버를 관리 — dry-run 연결 확인을 포함한 add/list/remove/test, Claude Code / Codex에서 원샷 가져오기 지원. dsh 플러그인으로도 마운트되어 에이전트가 직접 MCP를 관리 가능

DeepSeek Harness의 workspace-write와 danger-full-access 사이의 중간 권한 등급: 무해한 명령과, 설정된 신뢰 영역(현재 워크스페이스 외부 포함)을 대상으로 하는 작업을 자동 승인

/repro는 최소한의, 비밀 정보가 제거된, 재현 가능한 문제 번들을 내보냄: 세션 로그, 실패한 명령, Git diff

DeepSeek Harness의 모든 슬래시 명령어를 사용 빈도순으로 정렬해 실행 가능한 버튼으로 나열하는 플로팅 명령 데크

AlphaRSI — three-role self-improvement loop that evolves the training recipe of alpha sequence models. Operator runs walk-forward, Evaluator grades with OOS RankIC, Refiner proposes hyperparameters via TPE Bayesian search; only strictly-better recipes are kept. Offline one-command run, data bundle shipped with sha1 reconciliation, GPU auto-detect. Ships one skill.

End-of-chat visual storyboard: a storyboard tool renders a self-contained HTML card (inline SVG diagram, numbered flow, facts grid, timeline) from a JSON spec, writes it under ~/.dsh/storyboard/<session>/ and opens it in the sidebar; a system-prompt section and a /storyboard command trigger generation. Server-only, zero runtime dependencies.

Dynamically trusts every Host header that actually arrives and flips the default web binding to 0.0.0.0: wildcard or unenumerable entry domains work without editing the start command, the authentication layer is untouched, and hosts are evicted by LRU beyond a capacity cap.

Query and manage JumpServer through conversation: assets, users, accounts, permissions, sessions, command audit logs, command filters, and RBAC roles, authenticated with an AccessKeyID/AccessKeySecret pair (HTTP Signature).

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Deterministic engineering orchestration runtime for DeepSeek Harness: the orbit_controller tool and OrbitService run Commander, Executor and Smart Watchdog children through PLAN, EXECUTE, EVALUATE, bounded correction and runtime recovery, with durable state in <project>/.cx/state.json.

Exa-backed web search provider for the ctx.web seam, with Exa Dynamic Highlights on by default and the Exa-Beta header that setting requires; exposes all eight Exa retrieval types, adds an /exa command to change highlights, search type and result count at runtime, and registers an exa_search tool that takes its own result count.