Plugins

PC environment diagnostics & port control board: zero-dependency inspection of system, CLI toolchains, active listening ports with hover-to-kill release, and model key readiness. No external calls, zero plaintext secrets.

Irreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.

DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.

Keeps plugin inventories in sync across machines through a secret GitHub Gist, and updates installed plugins to their newest npm or GitHub release. Push shows a diff first: version conflicts default to the newer side, entries only the Gist has stay by default, and entries only the local machine has are pushed. Each update can pick the npm or the GitHub channel, and every install goes through the plugin manager with a live log.

A local task board with secretary, CEO, and historian roles, plus a desktop whale-girl companion for DeepSeek Harness.

Black-box GUI testing for DeepSeek Harness: an AI tester drives a real Windows virtual machine using only screenshots and mouse/keyboard, so its verdicts rest on pixels instead of logs or source code. Ships the dsh-vm-tester plugin with twelve vm_* tools (status, UI tree, screenshot, click, type, type-secret, key, basic key, wait, snapshot, upload, download), a reverse-tunnel guest agent for Windows, and run verification scripts. Needs Windows, VirtualBox 7 and a Windows guest VM with the bundled agent before any vm tool works.

Read-only Sentry tools: project listing, issue search at organization or project scope, single issue detail, and the latest or a specific event with a trimmed stacktrace. Local variables, request headers and bodies, query strings, packages and secret-looking tags are removed before the event reaches the model, and oversized events degrade through source context, breadcrumbs and frames rather than failing.

Register models, assist with portraits, and select the Agent model from a secret-free catalog for DeepSeek Harness.

Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.

Deterministic code security review: 40+ rules, secret entropy detection, staged-diff review, SARIF export, baseline acceptance, SBOM-lite dependency inventory and health self-check. A step-by-step first-run guide (4 steps) now opens inside its settings panel.

Redacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.

Redacts secrets, cookies and personal data in every model request at the host process undici dispatcher and restores the placeholders in the reply, so one interception covers every provider, adapters that plugins add included; per-kind actions mask / warn / block, an optional same-shape fake key, records written to disk by the day and a statistics card.

Four-step WHOOP account connection (you create your own WHOOP developer app and paste its Client ID/Secret) with automatic sync on dashboard visits, plus recovery, strain, sleep and workout charts inside DeepSeek Harness.

查密钥与证书多久没换了、有没有轮换制度 —— 长期不换的密钥往往没人注意，却是实打实的风险

Sync DSH user-level assets (skills, plugin manifest, config, memory) across machines with one-click restore, automatic plugin reinstall and secret scanning.

Standalone QQ-bot extension pack for DeepSeek Harness — fully independent, no other plugin required. Two-layer SQLite memory with hippocampal recall, a persona that keeps learning from daily chats, group tiers, local-model quick replies with a single-brain arbiter, TTS outbox, sticker library, an approval-gated video studio, and a four-form desktop pet (three custom characters plus the stock fish) playable over a public invite link with access-code login, single seat and brute-force protection. Chat bridging is deny-by-default: c2c/group access defaults to a care mode that only responds to the special-cared people and groups of the owner (shared with the persona system, zero extra config); allowlist, open and disabled modes remain available. Requires QQBOT_APPID and QQBOT_SECRET, and Node.js 22.5 or newer.

Union IM bridge for DSH — an independent implementation uniting the capability sets of community peer plugins (xmanrui/dsh-im, MichengAI/dsh-im-connect). Drive your agent session from 15 channel adapters across 12 platforms (including email; WeCom/DingTalk/QQ each contribute two: bot + self-built app or notify tier) — WeChat (official iLink QR bind), Feishu/Lark (long-connection + streaming cards; the voice tier requires system ffmpeg), Telegram, Discord, WeCom intelligent bot & self-built app (signed callback), DingTalk (stream + AI Card and custom-robot notify), QQ official bot (plus notify tier), Slack (Socket Mode), WhatsApp (Baileys QR pairing; the dependency ships as an optionalDependency of the plugin package), Matrix, iMessage (macOS only), Email (IMAP/SMTP thread routing). The cross-version narrow waist auto-adapts settings gen1/gen2/gen3 across hosts 0.1.2-rc.1→0.2.1-rc.2 (12-tag enum; rc.2 verified by a real desktop-profile install with double read-back) using capability probing only, never version branches. In chat: a 25-command panel, tool-approval and question loops answered in the originating chat (deny-by-default, initiator-only, 5-min expiry), image/file input gated on host model metadata, deliverable file return, a delivery log with bounded retry (uncertain is never re-sent), proactive delivery and fragment composition. It also splits the native sidebar into self-owned Tasks / Channels tabs (standing down entirely when another plugin already owns the slot), registers an `im-concise` agent preset plus reply sanitisation that keeps GenUI fences and raw HTML out of text-only chats, renders `svg` fences to PNG images, guards model choice with an allowlist, and mirrors each turn's final answer to notify channels via `/relay` (addressed by account ID or alias, never guessed on ambiguity). Secrets are one-way into the vault and never echoed back. npm: `dsh-im-union`.

Blocks API keys pasted into the composer or written by tools, logs leak events, and scans the workspace for exposed secrets.

Alibaba Cloud / Qwen balance card above the Settings row in the DSH web sidebar: account available and cash balance, coupon balances with expiry dates (student vouchers included) read through the BSS OpenAPI, and OpenAI-compatible relay quota. An official DashScope sk- key has no balance endpoint at all, so real money and coupons require an Alibaba Cloud AccessKey with bss:DescribeCoupons + bss:DescribeAcccount (AliyunBSSReadOnlyAccess is enough); secrets stay in the host process, the browser only sees a masked AccessKey ID, and /api/dsh-qwen-balance/* is loopback-only.

Round-table meetings for DeepSeek Harness 0.2.0-rc.2 on Windows desktop, reusing existing Agent sessions with discussion, editable task cards, sequential and parallel steps, shared meeting files, and secretary minutes.

Read and write Apple iCloud Calendar over CalDAV through five tools: list calendars, read a window with recurring events expanded, create an event, and delete behind a dry run that must confirm the exact object count. Credentials come from DPAPI, Keychain or libsecret, or from an environment variable.

A secret store for DSH Desktop that keeps API keys in one place and injects them into the assistant's shell as $DSH_* variables.

Read-only pass / age secrets with allowPrefixes; reveal defaults to false.