Plugins
Browse, filter, and install DeepSeek-Harness plugins.
4271 plugins found
dsh-guardwall
iiiweiii/dsh-guardwall
Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.
dsh-injection-guard
loeanxi/dsh-injection-guard
Source-aware prompt injection guard for DSH: tracks untrusted turn context, detects injection signals, scores sensitive sinks, and blocks high-risk tool calls with explainable audit logs.
agents-plugins (task-complete-notify-for-dsh)
lxp731/agents-plugins
Sends a desktop notification and chime when a DeepSeek Harness run completes, errors, or waits for approval, with a configurable duration threshold.
dsh-backstory
meghanbao/dsh-backstory
A `/backstory` command and tool that annotate each line with the git commit that last touched it and the agent turn + prompt that wrote it, from a persistent per-line ledger (drift-proof by content hash), DSH-* commit trailers, or the live session log.
dsh-skill-manage
fuxin123z/dsh-skill-manage
Agent-managed procedural memory: a skill_manage tool that creates, patches, disables and deletes the agent's own skills in user or project scope, with delete guards (agent-created marker, pin, path confinement) and a trigger-discipline prompt.
db-connector
johnxu22786/db-connector
Safe, audited SQLite/PostgreSQL/MySQL access for dsh agents: schema introspection, enforced read-only queries, a write approval gate, and a durable JSONL SQL audit trail.
auto-mouse
fish121380/auto-mouse
Windows desktop UI context picker for Codex, DeepSeek Harness, and MCP clients: select windows, UI elements, or screen regions with hover highlighting, UI Automation, screenshots, and local OCR, then review and approve Markdown/JSON context before output.
harness-desktop (harness-memory)
988hj7tczd-oss/harness-desktop
Cross-session memory for DeepSeek Harness via the official storage domain: memories persist through ctx.storage (storageDomain table) and are injected into the system prompt through a registered section (memory:recall), with memory_save / memory_forget tools so the agent reads and writes its own memory (maxMemories configurable).
dsh-skin-background
megatronyy/dsh-skin-background
Image-background skin with four shipped wallpapers, a user wallpaper directory, custom image URLs, and live dim/blur controls in Settings.
luxueliu-usage-command
luxueliu/luxueliu-usage-command
Daily cost card for your local LLM gateway: /usage reads gateway_usage.jsonl and itemizes spend per model and per hour, covering official direct, OpenRouter relay, and in-plan metered pools.
dsh-usage-monitor
lcthe/dsh-usage-monitor
DSH Usage Monitor: auto-query provider credit balances and time-window limits from configured API keys, with input capsule and custom provider support.
dsh-zh-labels
xingkong42/dsh-zh-labels
Re-applies Chinese UI labels to the DSH client modules on every start, so translations survive upgrades.
dsh-agent-notify
chidaic/dsh-agent-notify
Windows system-level notifications when the agent finishes a task or needs your input: task-done, question, approval and plan-review alerts via the browser Notification API, click-to-open the session, background-only mode, and a first-level settings page (Settings → 任务提示).
superself
fxylabs/superself
DeepSeek Harness plugin: Superself's `self` CLI as model-facing tools plus a /self command — cross-session, cross-project project state for agents.
dsh-any-skills
wmengxiang/dsh-any-skills
Import, install and invoke Agent Skills in DeepSeek Harness from Codex, Claude Code, OpenCode, GitHub or npm — composer-side ⚡ picker inserts /skill-name into the draft, and a Skill 管理 settings page offers per-source/per-skill import, expandable source paths with skill counts, uninstall and one-click restore from .trash.
dsh-session-drafts
ne-ilyxa/dsh-session-drafts
Cursor-style New Session: every click creates a fresh blank draft session (persisted before the first message) instead of reusing the workspace's single one, plus a sidebar Drafts switcher to keep several empty chats open at once.
dsh-unified-market
jing-hy/dsh-unified-market
Unified plugin marketplace built for the DSH Desktop (EAC) shell, aggregating the curated catalog, the GitHub dsh-plugin ecosystem and the npm registry into one storefront, with source whitelisting, conflict pre-checks, trial-boot install verification, manual/batch/auto updates and .dshpack feature-pack management.
dsh-multi-candidate
wintrygrass/dsh-multi-candidate
Multi-candidate mode for DeepSeek Harness (test-time scaling): floating panel config, the agent auto-runs parallel candidates plus verifier selection, scoped to the current session.
dsh-plugin-security-review
shanhaifish/dsh-plugin-security-review
Static bundle form of the DSH plugin-install security gate: reviews cordis_define/cordis_run with a fail-safe policy, plus review/audit tools and a browser approval popup (agree / agree+whitelist / reject; agree+whitelist writes the plugin family into tru
screenshot-feedback-hook-mcp
lkh081231/screenshot-feedback-hook-mcp
Screenshot feedback for DeepSeek Harness — let your coding agent SEE what it builds
dsh-cursor-theme
auki-zy/dsh-cursor-theme
Customize the PC mouse cursor for every UI state inside DeepSeek Harness. 在 DSH 里自定义鼠标各种状态的图案。
dsh-draft-polish
max-null/dsh-draft-polish
Draft polish for the DSH composer: one-click AI polish of the input draft (sparkles button next to send), with optional conversation context and a configurable model channel.
dsh-voice-input-cn
schumchanvi/dsh-voice-input-cn
China-ready voice input for the composer. Requires a local Python bridge (pip install dashscope websockets, run bridge/voice-bridge.py) — the plugin alone does not work. Browser mic streams 16 kHz PCM to the bridge, which runs Alibaba Cloud DashScope ASR (paraformer-realtime-v2); interim text fills the draft at the cursor, silence auto-stop, optional auto-send.
dsh-action-outbox
jimchengchina/dsh-action-outbox
Stages exact DSH tool calls without dispatch, presents complete canonical arguments in a durable Batch Review Inbox, invalidates approvals after edits or restarts, and commits only a matching SHA-256 digest plus single-use nonce through the normal DSH tool pipeline.