Plugins

Brain-inspired cognitive plugin: episodic, semantic, procedural and emotional memory with reinforcement-learning signals, a goal stack with time triggers, curiosity-driven autonomous web research and proactive initiatives.

Hardening guard for mcp__omni__parse in DeepSeek Harness: a tools/pre-execute listener that denies private/reserved host URLs (SSRF), enforces an allow-list or ask (consent), and is fail-closed when allowedRoots is empty.

Per provider/model generation concurrency, with a settings card: a cap on how many sessions may stream at once, enforced at the stream and again at subagent spawn, where a fan-out past the cap waits in a FIFO queue instead of failing.

Execution-discipline suite for DSH with identical-retry interception, forced reflection, todo enforcement, memory deduplication, and experience-to-skill promotion (11 plugins + 6 skills).

Executor/advisor workflow ported from pi-advisor-flow: the executor calls ask_advisor for a second opinion at key decisions, after repeated failures and before completion; equivalent repeated tool calls are intercepted before execution for an advisor review with a proceed/revise/blocked verdict, and hard mode force-reviews every turn before it closes. Per-call token and cost ledger with /advisor status readout, privacy tiers for repo context and file contents, six-shape secret redaction, and a web settings card; advisor failures never stall the main loop.

Exposes the local DSH web GUI to one chosen CIDR range only (Tailscale by default) instead of binding 0.0.0.0: the proxy listens on addresses inside that range, rejects peers outside it, and admits clients by either a tokenised URL or a 4-12 character alphanumeric access code. Remote pages can be forced into a phone layout without changing the local UI, and the official appearance, font size, transcript view, code view and performance settings can be stored in the plugin config and re-applied on every remote page load.

Takes over the compaction threshold on every mounted engine: forces headroomTokens to -1e6 so the ratio is the only term in the trigger, keeps retention below it on every write path, reroutes the compaction call to a chosen model, and adds a panel with a one-click compaction button and a per-session compaction log.

Database explorer panel for DeepSeek Harness: connect SQLite, MySQL/MariaDB, PostgreSQL, SQL Server, MongoDB, ClickHouse, Redis, Elasticsearch and Qdrant from a third Conversation tab — browse schemas, page through data, edit cells, insert rows, design and drop tables, run SQL, import/export CSV/JSON/SQL/Markdown, and draw editable E-R diagrams. Read-only connections enforce statement-level allowlists, agent tools ship read-only by default with an opt-in write flag, and every write (including refused attempts) lands in an auditable log. Ships an MCP stdio server exposing the same connections to external AI clients.

AST-based context compression, test log filtering, and token budget guard for DeepSeek Harness: strips redundant syntax, prunes noisy log lines, and enforces a token ceiling so the context window never overflows.

Chinese industry and technology research report skill with an offline DOCX build pipeline (build_docx.py). Enforces a 9-chapter structure with a plain-language timeline (Section 2.1), 5-dimensional technical bottleneck criteria, and Make-vs-Buy cost/compensation trade-offs, verified by check_threads.py and compiled to .docx with a 3-level auto TOC. Requires Python 3.9+ with lxml.

Discovers rule files from every convention OMP supports and injects them into the system prompt as an always-apply layer plus a rulebook index, then enforces them with time-traveling stream rules that abort violating output mid-turn, deny a matching tool call, fold a reminder into that call's result, or ask a judge model about the finished reply. The same tool lets the model write new rules, and an audit panel on the Plugins page says why each rule is in force.

Agent discipline guard for DeepSeek Harness: four gates enforced at the harness boundary — loop circuit-breaker, token-cost fuse, route-switch warning, plan approval — where prompt-level reminders can't reach, so an agent can no longer burn a weekly quota in minutes; one-click 🛡 chip, hot-reloadable thresholds, and presets from invisible-but-armored to warn-only.

DeepSeek Harness plugin that catches the wrong package manager for the repo (npm install in a pnpm repo, pip install in a uv/poetry project, and so on) and gives the model the exact right command.

Browse, preview and install public Agent Skills from inside the DSH web GUI, aggregating five sources (claudeskills.info, skillsmp.com, the awesome-claude-skills repository list, the official anthropics/skills repo, and skill packs shipped by installed DSH plugins). Skills install pinned to a commit rather than a branch name, so what you previewed is what lands; the panel reports provenance, whole-tree update checks and a trash instead of deleting. Before writing anything it validates the skill name and frontmatter against the rules the harness silently enforces, lists files that SKILL.md references but the fetch did not bring, flags partial fetches, and offers overwrite, rename or skip when a name is taken.

Groups the DSH model picker by provider: the menu lists sources with their model counts, and hovering a source slides that provider's models out in a side panel (default); in panel mode a click opens the same panel, and double-clicking a source title cycles hover -> panel -> inline (expand below the title). The active model stays visible at a glance. Pure DOM enhancement with zero intrusion - the panel is plugin-owned DOM mounted on body and selection happens by programmatically clicking the real menu buttons, so no React-managed node is moved or removed, keeping the host rendering intact and coexisting with other UI plugins. Styling follows the host by reusing the official --dsw-* theme tokens, with an enforced opaque background, sufficient contrast, and one shared set of sizing and colour tokens for both menu levels. No network access and no telemetry. Built for DSH kernel 2.0.15-next.

Unit conversion toolbox covering 20 categories — length, mass, temperature, area, volume (incl. US cooking units), speed, time, data sizes (decimal MB vs binary MiB), data transfer rates (Mbps vs MB/s), acceleration incl. g-force, illumination (lux / foot-candle), pressure, energy, angle, frequency, power incl. three horsepower definitions, force, torque, typography (px/pt/em/rem), and fuel economy (mpg ↔ L/100km). Two tools — convert_unit and list_units — zero runtime dependencies, pure arithmetic; each result includes the formula applied.

Connects DeepSeek Harness to a local SiYuan (思源笔记) desktop app: registers its note tools as mcp__siyuan__<tool>, exposes the AI configured in SiYuan together with its agent loop as one more tool, ships a notes skill, and enforces a readonly/authoring/full profile on every call while keeping the tool list available when the app is closed.

Runs AItelier pipelines from DSH over MCP: 39 tools (22 read, 17 write) to generate, run, inspect, edit, export and import multi-step SkillFlow pipelines. The steps execute in AItelier rather than in the DSH session and are polled by run_id, pause at engine-enforced checkpoints answered with answer_checkpoint, and leave per-step traces and step outputs to read afterwards; add_provider / map_model / edit_role point an individual role at a local or cheaper endpoint. Bundles an aitelier-pipelines skill.

Task control for DeepSeek Harness: one-click emergency stop and force-termination of stuck downloads and tool calls, download progress, stuck detection, pwsh activity monitoring, and append-condition / pause / resume with invisible recovery.

Adds session, project, and global controls in the DSH WebUI for skills, MCP servers, tools, prompt injections, approval escalation, and safety guards; enforcement is scoped to the current agent.

Engine-enforced guardrails for DeepSeek Harness agent swarms: quality gates reject half-done work, crash-safe checkpoints resume in place — keeps AI teams from breaking, not just running.

Plugin trust pipeline for DeepSeek Harness: deterministic static scan with verdicts, opt-in runtime guard with honeypot lures, agent audit-protocol skill, and a browser shield status light. Alarm-only, never an enforcer.

Forked from j62268781-alt/dsh-skills-mcp-manager (MIT) at its 0.5.6 baseline and substantially reworked since; it registers the same plugin id, so it cannot be installed alongside the original. Adds lossless cordis.patch.yml writes (JS expression values preserved), save-gated per-tool filters, skills governance over the DSH roots plus 10 external agent directories with per-skill/per-source switches enforced through the agent-scope skills provider (disabling actually hides a skill from the model), categories and a restorable trash, GitHub-repository install/update/rollback, zip and SKILL.md import, skills.sh/ClawHub market, workspace view, sidebar panel, dark/light contrast fixes, and update checks against the published npm package (same source as market installs; npm publication carries OIDC provenance).