Plugins

微信公众号发布插件 for DeepSeek Harness — 把 Markdown + 封面直推草稿箱，纯 Node 零依赖，官方 cgi-bin 接口

Derived from WolfGenerals/ncm-player (ncm-player4 1.3.1 lineage, baseline published on the repo's baseline/ncm-player4-1.3.1 branch); cannot be enabled together with ncm-player2/3/4, because they all register the /ncm/api prefix. Floating NetEase Cloud Music player in the DSH web UI: search, playlists, synced lyrics with translation, a persisted queue, a collapsible mini bar, and a bottom-right note button that can be dragged and pulses with the bass; tracks that come back without a playable URL are skipped automatically.

A plugin center for DeepSeek Harness: install, update and enable DSH plugins, aggregate plugin index sources, and install from a git branch. Also publishes a subscribable format-1 plugin index.

Douyin operator for DSH: drives your own Chrome to read the feed, comments and DMs, reply in-thread, and upload a local video through the creator center - every write passes a policy gate and publishing always needs your click.

Turns a YouTube link into study notes: pulls the captions the video already publishes, optionally reads on-screen content with a vision model, then asks for your own notes and merges everything into one document. Requires python3, ffmpeg and yt-dlp on PATH (the skill stops with an install hint when they are missing).

Connects Harness to the published BeatBrowser runtime with namespaced MCP tools and a TaskSpace Skill; requires the Chrome extension and preserves manual takeover.

Three-scope rule injector for DeepSeek Harness that re-publishes the rules into long sessions, with a loop-breaker, dedupe by content fingerprint, per-session persistence, and a settings-panel editor.

Author your own skills in the Harness Settings page: every entry is published into the skill registry, so the model sees one line and loads the body on demand.

Connects DeepSeek Harness to MCPTender public Russian procurement records, source documents and published contract suppliers using a personal service API key.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Read-only DSH profile doctor: the seven config-tree checks (config-clobber, dead-patch, tool-collision, plugin-not-mounted, plugin-stale, entry diff, explain) plus eight ecosystem checks learned from real failures — pnpm store version conflicts that break `dsh plugin add`, patch insert names node_modules cannot resolve, broken junctions, duplicate-capability plugins, orphan backup dirs, GitHub-source deps, npm publish-scope hints, and the minimumReleaseAgeExclude gap. Four agent tools; every finding carries its fix.

Checks a payroll sheet against published social-insurance, housing-fund and individual-income-tax parameters, with pass, pass_with_gaps, review and fail outcomes and parameters that carry their own review date.

DSH plugin: one agent tool that audits a project for release-time infringement risk (licence contagion, copied third-party code, assets, trademarks, secrets) before publishing.

Pre-publish credential audit: walks a directory tree and flags API keys, tokens, private keys, database connection strings and hard-coded passwords before you commit, publish or ship. Zero dependencies, fully offline, findings are redacted to the first six characters.

Shows what each installed skill costs in the model context and hides a skill from the catalog without deleting it. Lists every skill found on disk with the exact catalog line the model receives (description normalized and truncated at the catalog cap), its body size and token estimate; previews the catalog message byte-for-byte as the agent will receive it, compares that with the copy already published in the current session, and reports skills on disk that never reach the catalog (invalid frontmatter, or shadowed by a higher-priority root). Hiding writes disable-model-invocation into frontmatter and keeps the file, so the skill still works via /name. Also imports skills from ClawHub, Skills.sh and GitHub URLs and uninstalls user-owned ones.

Publish size check skill: verifies a deliverable's geometric specs against a target platform before publishing - pixel dimensions, aspect ratio, dpi, file size, format, physical print width and colour mode. Geometry only: it does not review content compliance (QR codes, text-to-image ratio, copyright and prohibited content are out of scope). Pure Python standard library, no third-party packages, and inputs are never modified. Python 3.8+. Covers 10 platforms and 20 slots with per-platform confidence labels - WeChat MP, Xiaohongshu, Bilibili, Zhihu, Weibo, Douyin, WeChat Channels, journal submission, print and client delivery - and resolves a platform by id, Chinese name or alias with fuzzy matching. Two trigger modes: asked directly, or as a parasitic self-check that runs by itself once an image, poster, chart or export workflow has written a file and the user mentioned a publishing target, reporting in one line when everything passes and only expanding when something is wrong. For journal submission and print it judges by physical width (pixels / dpi), which catches files whose dpi metadata passes but whose actual printed size is too small; for multi-image posts it checks whether the whole set is consistent and names the odd one out rather than listing every file.

Manage a GitHub Pages blog from a DSH panel — browse the Markdown articles grouped by tag, edit them in a split editor with a front-matter form, and publish the changes as one commit over the GitHub REST API.

Write, check, and publish a Chinese Quarto Book: nine-step chapter writing, structure/link/figure checks, a consistent theme, and render acceptance. Loads only in type: book repositories; requires Quarto CLI and Python 3.

Config-only DeepSeek Harness bundle that mounts the in-box MCP client bridge against CursorTouch/Windows-MCP, excluding PowerShell, FileSystem, Registry, Process and Scrape by default (16 of the 21 tools upstream 0.8.8 publishes). Requires uv on PATH.

Requires Python 3.12+; Xiaohongshu reading needs the xiaohongshu-mcp backend and a QR sign-in (ffmpeg/OCR optional). Batch-read Xiaohongshu notes and WeChat public-account articles: per-note body, image text via local OCR, video frame text and comment samples, structured JSON/Markdown output, and the original source URL on every result. Read-only: it never publishes, likes, follows or comments.

System One decision runtime for dsh. Ships fast non-generative tools (choice, score, screen, gate) on a local or hosted System One gateway, and — without the model calling anything — prunes oversized tool output segment by segment, refuses repeated identical calls once System One confirms stagnation, verifies completion claims against real tool evidence, and corrects failing retries. Published on npm as dsh-harness-reflex (plugin) and harness-reflex (core, also a stdio MCP server).

Ship a local DSH plugin project to GitHub and the plugin market in one call: preflight, per-file upload with byte verification, the market registry PR, then pull every published file back and compare bytes.

Archives the QQ Zone posts you published yourself into a local library, auto-sorted into three columns — thoughts, dreams and reviews (book/film recommendations) — all three of which can be corrected by hand, one column at a time, and undoing a correction never disturbs the other two. Ships a private web viewer that can be locked with a password, repairs long posts that the upstream API truncates to its first ~500 characters, counts words by year and month, and backs up attached images for offline reading. The cookie is stored on the local machine only.

Publishes the desktop shell's file-path bridge as the host-path seam the composer reads, so files and folders dropped into the composer become @path references instead of uploaded copies (images still upload through the native image channel).