Plugins

Replaces identity numbers, phone numbers, bank cards, emails, addresses, customer names and secrets with numbered placeholders before a model request leaves the machine, restores the response, and keeps an encrypted local mapping plus a hash-chained audit log exportable as CSV.

Windows host rules for DSH agents: one skill with nine individually switchable rules (UTF-8/BOM, CRLF-LF per file type, build output, SmartScreen, _scratch isolation, screenshot privacy gate, teardown, shared-doc lock, local trust marks) and six bundled dependency-free scripts.

Windows-wide Bluetooth earbud shortcuts for AI work: a left-earbud volume-down gesture starts or stops Windows voice typing (Win+H), and a right-earbud volume-up gesture sends Backspace. The DSH settings page offers manual key mapping, test actions, Backspace count, volume-gesture detection, and a 1.6-second cooldown so one triple-tap performs one action. The helper is compiled locally from included C# source. The plugin itself does not record or upload audio; Windows voice typing processes speech under its own privacy settings.

A password lock screen for DeepSeek Harness so passers-by cannot see a running session while you step away.

DSH host bundle for the ShyPie privacy-first workflow: extracts attached images and PDF/Office files locally before they enter the session log (requires poppler pdftotext/pdftoppm on PATH and a local OCR engine — Windows OCR on Windows, optionally tesseract; without them attachments are rejected, not forwarded); default filter mode keeps text local (optional local masking); blocks unmaskable media/BLOB; provides local privacy_extract, privacy_ocr, privacy_scan and privacy_rehydrate tools; denies read_image and binary/document reads outside allowPaths; and enforces a fail-closed llm/stream egress guard before DSH dispatches a model request (the default provider allowlist is the local Magpie gateway).

Mask secrets, local paths, private IPs, emails and phone numbers in session text before you share or commit it.

Privacy guard for git workflows: before git commit, git push or gh repo sync it scans the content that would enter git (local paths, user info, API keys, private keys, connection strings) and blocks anything not approved in the DSH approval UI; approved items go into a manageable, masked whitelist. Native DSH Config schema with live settings, first-push full-repository scan, fail-closed checks, zero npm runtime dependencies.

Draws every question and answer in the DSH Web conversation blurred until the pointer rests on that row, and locks the mask to always-blurred while the window is unfocused; one control below the composer switches between off, hover to reveal, and always blurred, remembered per browser.

查应用里有没有展示 ICP/APP 备案号、隐私政策入口、运营者信息 —— 都是法定义务

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

One-off two-person password chat in the DeepSeek Harness right sidebar: end-to-end encrypted (the server sees ciphertext only), with images and screenshots, fully cleared on end.

Session password lock plus an encrypted directory vault for DeepSeek Harness.

Deterministic, one-way PII anonymizer for everything the DeepSeek Harness sends to the model: prompt, system prompt, context, and tool results

Hands secrets and PII to the agent without them entering its context, with checksum-validated extraction and masked content classification.

dshBrutalDelete permanently deletes DSH sessions from disk — single-row or cross-workspace bulk delete, with Ctrl+A select-all and Delete shortcut, wiping transcripts, projection cache, workspace slots, attachments and subagent data. Irreversible.

Cover privacy protection for DeepSeek Harness Web, with a native lock indicator, policy editor, and local controls.

Rewrites the model-visible copy of system, developer, user, assistant and tool messages into stable HMAC placeholders before a request leaves the machine, while local session logs, the chat transcript and restored tool calls keep real values.

Replaces personal data in conversation messages with placeholders before they reach the model (Chinese names found by context, mainland-China mobile and ID numbers, emails, bank card numbers, and terms from a user word list), shows the originals only in the local UI, and creates redacted copies of CSV/XLSX files.

Zero-token on-demand translation for the DeepSeek Harness web GUI: hover a block to translate it in place, drag-select text for a popup or in-place translation. Never auto-translates the page.

Scene-awareness probe for DSH on macOS: a privacy-first, pull-model `look` tool that reads the frontmost non-self window (app info, AX title/selection, gated local OCR), plus a summon-hotkey snapshot captured the instant you press.

Control panel for a local credential-redaction gateway in DeepSeek Harness: gateway and model health, audit metrics, a dry-run leak tester, an exemption whitelist, encrypted key management, credential-protected model entries and deployment controls.

Preventive content policy for DeepSeek Harness tool results: rewrite matched text with regex rules, or drop/truncate unpredictable payloads by field path before they are normalised, rendered, or persisted. The upstream counterpart to dsh-plugin-redact.

In-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.

Preventive content policy for tool results: rewrites matched text, and drops or truncates whole fields by path before a result is normalised, rendered or persisted, so an unreviewed payload never enters it. Ships inert with no built-in category or domain blocklist.