Plugins

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

Dead-code detection for AI-generated codebases: graphlint builds a dependency graph, finds code unreachable from any entry point to enable codebase cleanup and functional‑effectiveness understanding, and exposes graphlint_query / graphlint_build / graphlint_config tools plus a graphlint skill to DSH agents.

Session bridge for DeepSeek Harness: drive other real DSH sessions straight from your prompt — create top-level sessions in any workspace, message or steer any session, wait for replies and stream them segment-by-segment (chain-of-thought included), resume offline sessions, find sessions across workspaces, run a background watchdog that monitors and schedules a main task (nudge when stalled, correct drift, cancel when stuck), and archive sessions with one command.

Structural code intelligence for DeepSeek Harness — gives the agent codegraph and codegraph_index tools to find where a symbol is declared, what calls it, what a change reaches, and how one symbol reaches another, from a tree-sitter index it builds itself

Four-module session companion: smart conversation export (Markdown/PDF/JSON/PNG long-image with privacy redaction and batch ZIP), context handoff summaries with template save/import, API cost optimization (live official pricing, peak/off-peak scheduling, daily/monthly budgets, model routing), and global conversation search with in-chat find (Ctrl+F, CSS Custom Highlight API).

Search titles and saved text across ordinary DeepSeek Harness (DSH) conversations in all workspaces, optionally including archived chats, with Ctrl+F / Cmd+F search inside the current conversation.

UI enhancement suite for DeepSeek Harness: one-click workspace open (copy path, reveal in Finder, open in an auto-discovered editor), DeepSeek-web-style user-message nav rail, session to-do marks, flat-list polish, and a hard-restart button.

Let the Blue Big Fat Fish browse Bilibili for you: it comments on your behalf, DMs you interesting finds, writes a diary, and keeps a memory for long-term summaries. It filters videos to your taste, creates Markdown digests, and can watch comments and reply for you. In Circle Mode, it replies only inside threads explicitly invited by the video uploader in a top-level comment — ordinary viewer requests do not count, and it never starts a new top-level comment. Commenting, DMs, auto-run, and comment watch are off by default. Needs Node 22, DSH 0.1.7-rc.1+, a signed-in Bilibili account, a model route and Python.

Cache-first code exploration: the rdd_explore tool queries the project's .rdd/exploration index and, on a miss, dispatches a read-only worker subagent to explore and register findings; rdd_models serves the live model catalog for dispatch-time model selection.

A retro macOS System 7-style workstation UI for DeepSeek Harness with desktop windows, Workspace and Agent management, Finder, Terminal, Monitor, context tools, and desk accessories.

Diagnoses and fixes "duplicate loader entry id" boot crashes - finds duplicate loader rows across profile bundles and converts them into id-targeted patches via a zero-dependency CLI (detect / preview / fix / verify).

11 shareable workflow skills (handoff, triage, to-spec, to-tickets, wayfinder, teach, wait-what, dsh-mode-routing, ask-matt, overnight-execution, full-throttle) as an installable skill pack.

Gitee/GitHub AI employee: @ the bot on an issue (Gitee or GitHub), it clones the repo, implements the fix on the branch you name, opens a PR to that branch, and can auto-merge and auto-close the issue. v1.2 adds security scanning: configure scan repos, audit with built-in/custom prompts, deduplicate, and file new findings as issues.

Drive the user's real browser through the local Kimi WebBridge daemon: navigate, find-tab, snapshot, click, fill, evaluate, CDP, screenshot, network, upload, PDF export and tab-management tools that reuse existing login sessions.

Evidence-first vulnerability research workbench for DeepSeek Harness: native audit views, 29 OMV tools, Evidence.v1 findings, reproducible runs, Campaign workflows, and isolated PoC evidence.

Meme search, the fun way: describe the vibe, and the agent finds and sends a real meme that actually fits.

File search palette for the DSH workspace: find files by name or content, open results in DSH's native right-sidebar preview, and edit text files inline with version-conflict checks.

Preset doctor for agent presets: scans home/profile `cordis.patch.yml` declarations and legacy `.agent-presets/` dirs across host lines 0.1.0→0.2.0, shows every detected preset as an official-style card (source/era badges, broken red border, per-finding details, current DSH version + era catalog), and syncs a preset to the current syntax per-card behind an explicit confirm dialog (.bak backup + atomic write; report-level findings are never written — startup scans are report-only). npm: `dsh-preset-doctor`.

GitHub project search and analysis: describe your idea in one sentence and the agent searches GitHub for related projects, ranks them by relevance weighted with stars, and returns a structured card — last updated, relevance, stars, weighted score, language and a one-line description for each project. Pick a few repositories and it reads their README, dependency manifest, directory tree and key files to lay out their architecture — so you stand on the shoulders of giants before you start building.

Security-audit facts AI coding agents cannot compute, plus a verdict gate: euthyna history attributes deleted lines to commits and flags those from security fixes (--origins finds the first introducer), euthyna coverage reports which changed symbols no test ever invoked, and euthyna gate checks each finding against six gates, downgrading any without evidence to an observation.

Per-turn file-change card for DSH Desktop: +N −M badges, aligned diffs, and Mac/Windows file open (system app, Finder/Explorer, VS Code).

Registers a /code-review slash command with five parallel review lenses and per-finding confidence scoring, for both pull requests and local code.

AI-driven source-code security scanning workbench: 5 model tools (start/finding/status/report/list) plus a /hawkeye web UI and JSON/Markdown/HTML vulnerability reports; zero-dependency Cordis plugin, installable as agent preset or npm package.

Turn a phone camera into a live viewfinder and photo input for your dsh session, over LAN or USB.