Plugins

Pre-install security gate: quarantines each plugin, skill and subagent bundle with install scripts disabled, scans it with Cisco Skill Scanner, SkillScan, Cisco MCP Scanner, OSV-Scanner, Trivy, Gitleaks and optional SARIF tools or an LLM judge on a DSH model, then passes, asks for review or blocks it. Needs the install-gate hook proposed in deepseek-ai/deepseek-harness#12999.

Replaces keys, tokens and passwords with <SG_> placeholders before they enter model context; plaintext stays in a local AES-256-GCM vault, revealed by a click-to-reveal lock in Settings and in user messages.

Portable Workspace: (1) 100% off the host disk, with sessions, plugins, projects and logs all on a removable drive or USB stick; work portably, no fear of switching computers or reinstalling the OS. (2) Independent portable web instances, multiple at once, each with its own plugin configuration. (3) Drive-letter-independent detection plus offline use. (4) A password for privacy and against accidental deletion, without encrypting the data (security). (5) One-click reinstall of missing plugins from a list you can prune. (6) Two-way session migration across drives and the local machine, .zip backup/restore, rename. (7) Upgrade-friendly, zero dependencies, works offline. (8) Optional local-login sync. (9) Automatic cleanup of expired stale cookies. Before use: DSH and this plugin are needed on each computer; verified on Windows only; the password does not encrypt files; optional local-login sync copies account credentials onto the drive as plain-text YAML.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Security plugin that intercepts file deletion and write commands, requiring user token authorization.

开源许可合规检查：扫描依赖树，找出 GPL/AGPL 传染、许可未知等风险 —— 发布前、开源前、被审计时跑一遍。

查密钥与证书多久没换了、有没有轮换制度 —— 长期不换的密钥往往没人注意，却是实打实的风险

你的产物里到底有谁，清单说了算

One plugin, two agent presets ported from Bemly/opencode: nsfw (adult-fiction executor) and unrestricted (security-research executor).

Batch approvals with a risk gate and an auditable decision ledger for DeepSeek Harness.

Refuses agent-generated SQL that reads tables or columns outside a configured blacklist or whitelist, returning a structured permission reason instead of rewriting the query.

agent 读到的内容里，有没有人在给它下命令

装第三方插件之前，先看它会动什么

CalibGuard 文件安全审计的 DeepSeek Harness 插件：本地校准 CodeBERT 门控 + 云端复核，以 agent 工具与侧边栏面板两种形态使用

An independent permission gate above the built-in sandbox. It blocks writes outside the workspace and to protected paths even under danger-full-access, refuses whole-file overwrites without a complete fresh read, and keeps ZIP restore points plus Recycle Bin copies before destructive actions.

Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an HTML report with GB/T 22239-2019 control mapping. Needs Java 8+ and a DmJdbcDriver jar you provide yourself.

Computer safety shown as castle guards: firewall, disk encryption, lock screen, remote ports and login history.

Jev Review approval mode for DSH ^0.2.2-rc.1, reviewing each native/PTC inner tool call through System One (Jev or D3), with audit logs and a settings UI; requires the companion Jev host extension. Fork of gbthui/dsh-auto-review; do not install it alongside the upstream, as both gate the same tool-call approvals.

Windows security posture from WSL: Defender real-time state and signature age, recent detections, exclusions, and firewall profiles.

Task-to-skill pairing meta-skill with a laziness ladder for minimal loading, a user-editable routing table, and a quarantine, SkillSpector scan, human-approval install flow.

Native Auto Review for DeepSeek Harness with automatic host compatibility selection

Tailscale remote-access operations panel for the dsh web GUI: health checks, HTTPS entry toggle via tailscale serve, macOS proxy bypass, relay server ops, and ACL snippet generation.

Workspace-scoped Semgrep SAST tool for DeepSeek Harness with a managed Windows x64 runtime, structured bounded findings, cancellation and timeout controls, and user-approved sandbox escalation. Installs from npm as @aaub-software/dsh-semgrep-sast.

Pre-install static audits for npm-installable DSH plugins; emits and validates the open `dsh-vet/v1` report with severity, confidence, evidence, derived grades, a CI Action, and auditable badges.