Plugins

Template-driven code review skill: five-step review flow, critical/medium/minor severity grading, four-dimension scoring (quality, security, performance, maintainability), dual text and HTML report output, and an on-demand reference knowledge base.

A WYSIWYG Typst editor for papers, reports, exams, resumes, charts, posters, sheet music, and slides exported as PPTX.

Work reports for DeepSeek Harness: gathers Git commits and local agent conversations (DeepSeek/Claude/Codex) and renders daily, weekly or monthly reports from your own templates; the agent tool is injected on demand.

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

Performance profiling and LLM cache diagnostics for DeepSeek Harness — context engineering, latency profiling, and cache behavior reports.

Preset doctor for agent presets: scans home/profile `cordis.patch.yml` declarations and legacy `.agent-presets/` dirs across host lines 0.1.0→0.2.0, shows every detected preset as an official-style card (source/era badges, broken red border, per-finding details, current DSH version + era catalog), and syncs a preset to the current syntax per-card behind an explicit confirm dialog (.bak backup + atomic write; report-level findings are never written — startup scans are report-only). npm: `dsh-preset-doctor`.

One fixed button inside the DSH window that restarts DSH and reopens it automatically, with no console window; right-click it for a built-in self check that writes a single diagnostic report.

Reports which skills each turn invoked (loaded by the model, typed as /name, or none) and manages the local skill directory: install from a pasted repository, folder, SKILL.md or zip address, set a Chinese display name in the skill meta.yaml, and remove a skill while keeping a backup.

Pixel-art whale desktop companion with 29 frame-audited states — taps the glass and flashes the tab title when an approval waits, speaks a completion report when a turn ends, and adds a slash-command palette to the web client.

Windows PowerShell 5.1 skill for downloading large GitHub release assets: it first read-only probes the host (listening local proxy ports, system proxy and env vars, an installed Clash Verge core and its config, curl version), measures KB/s of four routes in parallel (existing proxy, headless-spawned core, public mirrors, direct), runs a short time-boxed concurrency ladder on the winner, then downloads the asset in parallel curl byte ranges and verifies the byte count plus SHA256 against the release digest. Skips the ladder when the asset is under 100 MB or a single connection already reaches 3 MB/s, because concurrency only pays off when a single connection is throttled: measured 6.3x on a throttled node (1,234 to 7,759 KB/s) but 0.72x on a fast one (5,829 vs 4,175 KB/s). Needs no aria2 or 7z, never changes the system proxy, never asks the user for ports or concurrency, reports ASSET_NOT_FOUND with the real candidate names instead of silently picking a different file, and degrades to a size-only check with DOWNLOAD_SIZE_OK_NO_DIGEST when a release predates digests.

Counts agent steps and, every N of them, adds a progress-report instruction to the batch that is about to be sent, so the agent states what it is doing, what it finished and what comes next, then carries on without stopping for you. Interval, prompt text and a main-agent-only default are editable in its settings page.

Discovers other DSH instances on the local network by UDP multicast or port scan, lists them in a sidebar panel together with the capabilities each one reports, and dispatches tasks between machines in both directions over the LAN or over an automatically downloaded userspace Tailscale node.

Adds a restart button to the DeepSeek Harness desktop app — it asks before restarting while work is running, and afterwards reports how long the app was down. Entries can live in the sidebar, the conversation header, the account menu or the settings page, and each one can be turned off. Extras include checking how much sign-in data is stored (a cause of startup failures) and previewing leftover temp files, counted but never deleted. Desktop app only.

Layered token-optimization pipeline for DeepSeek Harness: output ladder, MCP lazy loading,compaction driver, cache-hit reporting. Built on real DSH plugin APIs; ~40-60% input saved in long sessions.

Laya typed decisions (`noul` yes/no, `choice`, `score`) as a first-class Cordis service (`ctx.laya`) plus the model-visible `laya_ask` and `laya_plan` tools. The plugin itself installs and downloads nothing: it is a client of a `laya-mcp serve` sidecar you start yourself, and it reports that the sidecar is not running instead of failing obscurely at the first tool call.

Kanban task board for DeepSeek Harness sessions: the main agent dispatches tasks to one-shot worker/verifier subagents, with dependency scheduling, file-level exclusion locks, arbitration hold/freeze, milestone progress reporting, and per-task token usage stats.

TRAE SOLO supplier plugin for dsh-router, ported from traework2api. Provides the traework supplier, a free SOLO chat channel, and reports single-account status to dsh-router core.

Deep research as an agent mode: one reviewed loop that plans, researches in adaptive parallel rounds driven by the gaps the researchers themselves declare, synthesises a cited report and then reviews it adversarially, instead of a script the model rewrites per call. Questions the round budget never reached are named in the report rather than dropped.

Points web_search at a self-hosted SearXNG instance instead of the native route: pages until maxResults is satisfied, and reports degraded coverage when engines fail so a thin result set is not read as a thin web.

Reverse-engineering agent preset. Mounts REA (rea-agents) as MCP tools for native binaries, JavaScript/Electron apps, managed assemblies, archives and installers — the full 170-tool catalog by default — but only inside sessions that select the preset; other presets load nothing. Ships an install-time check that reports which native analysis engine (Hopper, Ghidra, IDA) is present and prints the env snippet to wire one in. A fork of dsh-rea (JeremyWangCY, MIT) retargeted as an agent preset; do not install it together with dsh-rea.

Registration precheck plugin — checks a data asset against the national data-property registration rules: national-security sensitivity, source legality, ownership disputes, and the material-authenticity commitment, then outputs a precheck report.

Research data provenance auditor: audits lineage integrity, reproducibility and FAIR principles compliance, outputs provenance audit reports for research integrity and open science.

Geospatial data quality inspector: checks elevation accuracy, topology consistency and coordinate system compliance, outputs weighted quality scoring reports per GB/T 24356-2023.

Financial AML compliance checker: detects large/suspicious transaction thresholds, exemptions and timeliness, outputs auditable AML compliance reports across banking, insurance and securities.