Plugins

Lets the agent see the compiled page: renders any page to an image, resolves a PDF point or a text anchor to the exact source line through SyncTeX (and says when a rule is drawn by a package rather than by the body, which is where naive locating is wrong), diffs a page against the previous build so an edit is visible, audits every page for holes the edit introduced, and checks that numbered labels still read in order.

Checks a payroll sheet against published social-insurance, housing-fund and individual-income-tax parameters, with pass, pass_with_gaps, review and fail outcomes and parameters that carry their own review date.

A /agentinit command that builds, repairs or audits a repository's AGENTS.md inside a subagent: the child reads the method file itself and checks every command and path it writes with the bundled read-only checker, so no instruction body enters the main conversation. The bundled checker is a Python script, so Python 3 must be on PATH.

DSH plugin: one agent tool that audits a project for release-time infringement risk (licence contagion, copied third-party code, assets, trademarks, secrets) before publishing.

Registers one agent tool, plugin_guard, that statically scans a DSH plugin package before it is installed and reports a verdict with the reasons: a missing or broken dsh.bundle.patch, a missing dsh.permissions block, install scripts, dangerous APIs and obfuscation, dependency risk, and source that is not indexed and therefore cannot be verified. Read-only: the scanned code is never imported, installed, evaluated or run.

Pre-publish credential audit: walks a directory tree and flags API keys, tokens, private keys, database connection strings and hard-coded passwords before you commit, publish or ship. Zero dependencies, fully offline, findings are redacted to the first six characters.

Turns what a design, plan or document claims into a model and decides it: UML diagrams rendered, read and reviewed; state machines, protocols and data models checked as models; migrations tested for coverage and rollback symmetry; concurrency claims mined and routed to the checker that can decide them; dependency graphs audited; reports diffed.

Investment research bundle: 10 tools (search, page fetch, source audit, claim verification, numeric rigor, channel health, workflow loader, chart engine, PDF renderer, PDF gate) and 23 skills adapted from ai-berkshire. Runs a six-phase workflow where four parallel agents (Duan Yongping, Buffett, Munger, Li Lu) research a company, cross-examine each other, and ship a chart-rich PDF with cover, tables, captions and page numbers. Requires Python 3.10+; the chart and PDF tools also need python-docx and matplotlib.

Shows which skills each turn invoked and installs, updates or removes skills inside the app.

Registers one `workpaper_gate` tool for DeepSeek Harness: it audits a workpaper set for completeness, covering both the target design or template itself and the instance-versus-template structure, with the rule list, template list and core-table list all configurable in one spec file. Findings come back as blocker, warning and info, and the workpapers are only read, never modified. Requires Python with openpyxl.

Registers one `principles_audit` tool for DeepSeek Harness: it reviews a principle library for principle_id collisions and legacy ids, missing causal statements, boundaries, counter-examples or evidence, duplicate and near-duplicate principles, status-versus-confidence inconsistencies, long-stale entries and dimension-coverage gaps. Findings are severity-ranked and a hard gate turns them into pass, warn or fail, where every critical finding must be covered by a valid, unexpired exemption. The library is only read.

Registers one `office_audit` tool for DeepSeek Harness: it recalculates formulas with the bundled LibreOffice Kit and then audits the recalculated values — formula errors, broken sheet references, formula-consistency, hardcoded constants, number-format and unit mismatches, balance-sheet balance, retained-earnings roll-forward, cash tie-out, cash-flow subtotals, ratio-table conventions and data-cleaning issues. Findings are severity-ranked with the offending cell, and an optional findings sheet can be written into a copy. The source workbook is never modified. Requires Python with openpyxl and the bundled LibreOffice Kit.

Deliverables registry for DeepSeek Harness: agents register the final artifacts of a task (reports, pages, documents, sheets, images, datasets) into one settings section and manager page that store paths only, never copies, and remove recoverably; a standalone CLI (add, list, stats, check, remove, restore) reads and audits the same registry outside the app.

Gowin (高云) 1.9 FPGA toolchain control for dsh: 15 tools covering environment and license probe, .gprj/.cst project and constraint auditing against a real GW1N board pinout, gw_sh batch synthesis and place-and-route, pnr resource and timing report parsing, programmer_cli JTAG scan and flash, arbitrary gw_sh Tcl, and the GAO on-line logic analyzer capture chain — plus a bundled gowin-fpga skill and three field-note references. Pure JS, zero runtime dependencies.

Audits JLCEDA (EasyEDA) .enet netlists for broken net labels, dangling nets, power-rail orphans, conflicting pin polarity, and full-differential-amplifier feedback wiring.

Frontend aesthetics engine as 17 native tools — a 118-palette evidence library matched by register, cross-register whole-page design directions, four mechanical gates (WCAG contrast, color-blind simulation, AI-slop detection, scorecard) with digest-bound verdicts, plus semantic design tokens, existing-page audit, CVD-checked chart palettes, CJK type scale, render-vs-tokens reconciliation and measured-numbers rationale. Fully local, zero network. Requires Python 3.8+.

Five production-grade DSH tools bundled into one plugin (8 tool slots total): git regression finder (find introducer, recent changes, bisect, blame age), stack-trace decoder with local code context, YAML/ENV/properties config validator with typo suggestions, cross-platform shell escape (POSIX/PowerShell/cmd), and MyBatis Plus SQL static auditor (N+1, missing @Transactional, LIKE leading %, SELECT *, missing WHERE). Zero npm dependencies, all offline; concurrency-safe except the bisect tool (dsh-when-broke). Each sub-plugin is also installable standalone (dsh-when-broke, dsh-stackdecoder, dsh-config-guard, dsh-cmd-shield, dsh-mp-auditor).

Registers the Akasha Book memory server over stdio and exposes its 22 akasha_* tools to DeepSeek Harness, covering lookup, briefs, revision chains, audits and session recall. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Records host events — turn ends, tool results, agent errors, idle transitions and assistant output — as append-only JSONL for Akasha metrics, recall checks and output audit. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Installs a self-evolving development-constraints rule library, exposes it to the agent through a constraints tool and a once-per-session reminder, and audits AI token cost and context usage.

Project document chain integrity check: stage order, completeness and amount parseability.

Mounts the hosted Reaudit MCP server (https://mcp.reaudit.io/mcp) through the in-box @deepseek-ai/dsh-mcp-client bridge with a REAUDIT_API_KEY bearer token: 238 mcp__reaudit__* tools for brand visibility in AI answers (ChatGPT, Perplexity, Gemini, Google AI Overviews), competitor and citation analysis, site audits, content generation and social scheduling.

Read, write, convert and retime a subtitle track across SRT, WebVTT and ASS, audit it for over-long or unreadable cues, and transcribe audio through a configured speech recogniser.