Plugins

Automatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.

Cross-tool session migration plugin for the DeepSeek Harness (dsh): high-fidelity ingest, continue, knowledge extraction, bidirectional export, privacy redaction.

Adds dangerous-operation policy checks, output redaction, and a security-review workflow.

Syncs DSH skills, profile settings and AGENTS.md with a private git repository: status chip, six-section health check, pull, secret redaction, and a snapshot-then-push flow. Dry-run by default, never rebases or force-pushes.

allow/ask/deny permission gates for DeepSeek Harness tools: path/params/agents surfaces, argv decomposition, network rules, redaction, grants, dry-run, fail-closed config

Replaces identity numbers, phone numbers, bank cards, emails, addresses, customer names and secrets with numbered placeholders before a model request leaves the machine, restores the response, and keeps an encrypted local mapping plus a hash-chained audit log exportable as CSV.

Backs up a DSH profile's text configuration to an unlisted secret GitHub Gist, and syncs it back on another machine: a settings page with three buttons (status / upload / sync), a config_backup agent tool, a reversible merge-style restore, and credential stores, binaries, lockfiles and local usage counters left out of every backup and named in the UI. Needs a GitHub token with the gist scope (DSH_GITHUB_TOKEN, GITHUB_TOKEN or a signed-in gh CLI). Files are uploaded as plain text without redaction, so keys written into cordis.patch.yml or .npmrc end up in a Gist that anyone with its link can read.

Fast-execution runtime for dsh: context governance with 4 KB tool-result caps and field projection, zero-LLM fast-path templates with idempotency keys, PTC container scripts that keep intermediate results out of context, a three-tier sandbox with file/command/network rules, injection detection, secret redaction, snapshots with a recycle bin, and append-only audit logs; 10 runtime_kit_* slash commands, no business dependencies.

Mask secrets, local paths, private IPs, emails and phone numbers in session text before you share or commit it.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Reads the local NTQQ (QQ 9.9.x) message database on Windows and Linux and exports group and private chat history to txt, csv, json, md, html or sqlite. Ships sixteen model tools: qqnt_status and qqnt_doctor for environment and blocker checks, qqnt_extract_key, qqnt_index to build or inspect the sidecar index, qqnt_list_groups, qqnt_list_chats, qqnt_search, qqnt_stats for totals and monthly counts, qqnt_export_group, qqnt_export_chat and qqnt_export_batch (a chat can be named the way the user says it, and ambiguity refuses instead of guessing), qqnt_jobs for OCR, speech-to-text, chunking and model downloads, qqnt_media for a chat's downloaded images, qqnt_storage for disk usage and allow-listed cleanup, and qqnt_ask plus qqnt_recall for retrieval with citations. The local web UI on 127.0.0.1:46728 adds an incremental SQLite index, six views (chats, export, statistics, ask, settings, models), a task panel, a single-pane layout on narrow screens, sender redaction, media bundling, per-day splitting, export presets and AES-256 password ZIPs; OCR, speech and embedding components install into the plugin's own virtualenv on demand. Needs python3 with sqlcipher3 (the settings page can create a private virtualenv), and the database key is read from the running, logged-in QQ client.

Cover privacy protection for DeepSeek Harness Web, with a native lock indicator, policy editor, and local controls.

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Local-only telemetry service for DSH plugins: records operation trails and error events into a storage-domain KV table, applies a configurable redaction rule set before the write and again when the analysis reads back a record stored before a rule existed, and groups one plugin's failures by feature-code anchor, reporting the window it read, the route each group ran on, and the attempts recorded after its last failure in write order.

Replaces personal data in conversation messages with placeholders before they reach the model (Chinese names found by context, mainland-China mobile and ID numbers, emails, bank card numbers, and terms from a user word list), shows the originals only in the local UI, and creates redacted copies of CSV/XLSX files.

Control panel for a local credential-redaction gateway in DeepSeek Harness: gateway and model health, audit metrics, a dry-run leak tester, an exemption whitelist, encrypted key management, credential-protected model entries and deployment controls.

Preventive content policy for DeepSeek Harness tool results: rewrite matched text with regex rules, or drop/truncate unpredictable payloads by field path before they are normalised, rendered, or persisted. The upstream counterpart to dsh-plugin-redact.

In-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.

Preventive content policy for tool results: rewrites matched text, and drops or truncates whole fields by path before a result is normalised, rendered or persisted, so an unreviewed payload never enters it. Ships inert with no built-in category or domain blocklist.

Read-only bridge that surfaces Claude Code's existing project memory in DSH — git-root-aware resolution, credential redaction before injection, and an on-demand recall tool. Zero runtime dependencies.

Enterprise compliance for DeepSeek Harness — SOC2/GDPR automated checks, sensitive-info redaction, and a redacted tool audit trail. · DSH 企业级合规插件：SOC2/GDPR 自动化合规自检、敏感信息拦截与脱敏、操作日志审计追溯。

Share any DeepSeek Harness session as a self-contained read-only static webpage — timeline, collapsible tool calls & reasoning, default redaction, dual SHA-256 fingerprints, watermark. · 把 DSH 会话一键变成可分享的只读静态网页：单文件 HTML、离线可开、默认脱敏。

Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction

Export complete Web Sessions to local Markdown or self-contained HTML, with stable rendered previews, default redaction, and opt-in bounded tool-call details.