Plugins

MCP & Skills management panel for DeepSeek Harness — manage MCP servers and the skill library from the Settings page.

Global prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments, tool results, pre-model messages and the outbound stream; quarantine/block/monitor modes, canary trap, and an evolvable on-disk signature library with learn/import/export.

Image generation workbench and agent tool for DSH: one tool (ark9_generate_image) paints text-to-image and image-to-image via any OpenAI-compatible API. Channels are entirely user-configured - no bundled endpoint, you bring your own baseURL, key and model name (manual input supported). Agent-initiated generations are approval-gated by default: requests queue in the floating panel and nothing bills until you approve; approval is non-blocking (the agent replies "awaiting your approval" immediately, and results, denials or timeouts are injected back so the agent reports them in the next turn). Floating glass workbench with five tabs (Generate / Approvals / Prompts / History / About), aspect-ratio grid with quality-budget + 16px-alignment sizing, transparent background, batch up to 10 images as aggregated sub-tasks, prompt library with custom JSON sources fetched through a host proxy, persistent generation logs with one-click retry, multi-channel aggregation with per-channel model fetching, bilingual UI (zh/en), stroke-SVG icon set, config import/export. Registers as a Better Sidebar tab when dsh-better-sidebar is installed; stacks above the dsh-cua FAB when both are present.

DSH tools for operating a self-hosted Talebook library: search, download, upload and manage books and audiobooks, manage Legado book sources, and admin operations, with approval-gated writes.

Clean Architecture reference library for DSH: 8 pinned reference repos (Go, Java, C#, Python) indexed into a local FTS5 database, with assertion rules, a review ledger, and a read-only observation panel.

A permanent DSH plugin that bundles a developer workbench, an in-session conversation tree, and a plugin manager: build and run an LVAL project, browse its code, and keep per-program version snapshots with rollback; edit, retry, or branch any message in place, with message micro-versions; a feature manager plus a global-plugin library whose entries each carry an enable tier; cross-dialogue memory, one-shot temporary chats, and model collaboration; five network-permission tiers, mixed-model routing, a security audit, and browser control through a companion extension.

Experience validation layer for DSH: zero-token collection of tool-failure/retry/search signals, AI refinement into verified skill books (three-layer verification), looked up at task start. Ships 10 trial skills and benchmark data (complex-task success 100% vs 60% bare).

Custom background (images / GIFs / animated wallpapers) plugin for the DeepSeek Harness (DSH) Web GUI: an enable switch plus a local asset library, with separate display mechanisms for the official theme and skin-center skins.

Event sounds for DSH: plays a chosen sound on session end, options popup, permission request and stop, with AI-generated character voice lines and a manageable sound library.

Bundles an engineering-methodology skill library as one Cordis plugin: 14 Agent Skills (planning, testing, debugging, review, delivery) registered on ctx.skills for DeepSeek Harness.

Look & theme plugin for the DSH Web UI: built-in palettes, light/dark/follow-system appearance modes, Open VSX theme search & install, and VS Code theme import with a persisted theme library.

Bilingual, evidence-linked paper reading matrix for DeepSeek Harness. Local SQLite library, PDF page citations, and human edits.

Registers one `doc_ocr_sign_fix` tool for DeepSeek Harness: on macOS it diagnoses and repairs the condition where the bundled Python cannot load native extensions (onnxruntime, cv2, pypdfium2) because of the hardened runtime and library validation, by injecting the disable-library-validation entitlement and re-signing the interpreter, then verifying the imports. Operations are idempotent and the original binary is backed up first. It never touches the enclosing application bundle.

Publish size check skill: verifies a deliverable's geometric specs against a target platform before publishing - pixel dimensions, aspect ratio, dpi, file size, format, physical print width and colour mode. Geometry only: it does not review content compliance (QR codes, text-to-image ratio, copyright and prohibited content are out of scope). Pure Python standard library, no third-party packages, and inputs are never modified. Python 3.8+. Covers 10 platforms and 20 slots with per-platform confidence labels - WeChat MP, Xiaohongshu, Bilibili, Zhihu, Weibo, Douyin, WeChat Channels, journal submission, print and client delivery - and resolves a platform by id, Chinese name or alias with fuzzy matching. Two trigger modes: asked directly, or as a parasitic self-check that runs by itself once an image, poster, chart or export workflow has written a file and the user mentioned a publishing target, reporting in one line when everything passes and only expanding when something is wrong. For journal submission and print it judges by physical width (pixels / dpi), which catches files whose dpi metadata passes but whose actual printed size is too small; for multi-image posts it checks whether the whole set is consistent and names the odd one out rather than listing every file.

Registers one `principles_audit` tool for DeepSeek Harness: it reviews a principle library for principle_id collisions and legacy ids, missing causal statements, boundaries, counter-examples or evidence, duplicate and near-duplicate principles, status-versus-confidence inconsistencies, long-stale entries and dimension-coverage gaps. Findings are severity-ranked and a hard gate turns them into pass, warn or fail, where every critical finding must be covered by a valid, unexpired exemption. The library is only read.

Frontend aesthetics engine as 17 native tools — a 118-palette evidence library matched by register, cross-register whole-page design directions, four mechanical gates (WCAG contrast, color-blind simulation, AI-slop detection, scorecard) with digest-bound verdicts, plus semantic design tokens, existing-page audit, CVD-checked chart palettes, CJK type scale, render-vs-tokens reconciliation and measured-numbers rationale. Fully local, zero network. Requires Python 3.8+.

Archives the QQ Zone posts you published yourself into a local library, auto-sorted into three columns — thoughts, dreams and reviews (book/film recommendations) — all three of which can be corrected by hand, one column at a time, and undoing a correction never disturbs the other two. Ships a private web viewer that can be locked with a password, repairs long posts that the upstream API truncates to its first ~500 characters, counts words by year and month, and backs up attached images for offline reading. The cookie is stored on the local machine only.

Markdown-as-database project knowledge base for DSH agents: ten kb_* tools (including kb_register for registering existing notes), stable TIDs, `[[node]]` links that never copy text, `[[tscl]]` definitions expanded in place, bounded reads, structural lint covering tscl, workspace-first library discovery, inline git snapshots, a node-graph panel, and a bundled prompt section plus skill that make the agent reach for kb_* instead of hand-written docs/.

A private memory library for DSH with customizable personas that only records when you ask, storing everything locally in Markdown.

Persona manager for DeepSeek Harness — a JSON-backed persona library, a per-session binding so each session can run a different persona, an optional default persona for sessions that have no binding, and switching that applies either at once or from the next session; the Web UI adds a Model personas settings page and a persona chip next to the composer, and three model tools let the model list, switch and create personas itself.

Describe the persona you want and the agent writes it: nickname, bio, taglines and links come from the host model, the avatar comes from your local asset library (or a path you give), then it fills your profile page and hands the picture to the site's own uploader. Dry-run by default - it only touches profile fields, never passwords or security settings.

Windows only. With Wallpaper Engine installed it follows the active wallpaper or a pinned pick from the Workshop library; without it the plugin ships four starter wallpapers in a drop folder. Translucent panels, per-block blur and wallpaper-matched text contrast.

Safety guard that makes self-killing commands impossible: a safe_kill tool that always excludes the caller and every ancestor process, a bash pre-execute check for pkill self-matches, sudo -S stdin grabs, rm -rf / and similar patterns, and an extensible rule library with block / warn / hint severities.

Installs a self-evolving development-constraints rule library, exposes it to the agent through a constraints tool and a once-per-session reminder, and audits AI token cost and context usage.