Plugins

Safe, audited SQLite/PostgreSQL/MySQL access for dsh agents: schema introspection, enforced read-only queries, a write approval gate, and a durable JSONL SQL audit trail.

Static bundle form of the DSH plugin-install security gate: reviews cordis_define/cordis_run with a fail-safe policy, plus review/audit tools and a browser approval popup (agree / agree+whitelist / reject; agree+whitelist writes the plugin family into tru

Security and governance for dsh: rule-based tool denial, full tool-call audit trail, and governance reports.

Verification gate for DSH agents: every acceptance criterion must be backed by server-stamped real tool evidence before the completion gate lets a goal through (advisory audit, enforce gate, durable permits).

GEO brand audit skill bundle: AI-search visibility, recommendations, citations, competitor presence and content-gap diagnosis across 17+ AI engines (ChatGPT/Perplexity/Claude/豆包/DeepSeek/Kimi/文心一言).

Local semantic-token theme editor with palette extraction, WCAG auditing, preview, and export.

Lightweight OMDSH Runtime and Profile Pack toolkit for auditable DSH composition, signing, candidate installs, and rollback

Rust dev domain plugin for DeepSeek Harness (dsh): verification pyramid fmt→clippy→build+test→miri+audit(+semver) as model-facing tools + graph-layer governance (anti-Goodhart 8 rules incl. #[allow] density / deleted tests, blind-spot via Cargo.toml & pub

Conversational DSH plugin finder: four-source unified index, BM25 pre-filter plus LLM semantic ranking, candidates carry evidence grades and local static security audit, safe install flow with post-install verification.

Ecosystem-wide plugin health audit: syncs the dsh-plugin topic into a local scored catalog (maintenance / docs / npm + weekly downloads / ecosystem, 0-100, A-D), static security scan with high-finding grade veto, star history snapshots, web leaderboard and agent tools.

Live CVE/supply-chain audit for your workspace's own project dependencies (npm/pip/go), backed by OSV.dev, with a `cve_audit` tool plus optional automatic re-scan on lockfile changes.

Spec-driven development discipline for dsh: five keel skills (anchor/spec/probe/build/audit), three review tools and six spec templates enforce specs-before-code, assumption verification and scope control.

Reviews every file the agent wrote in a session from the session header, with per-file hunks and refused writes counted apart from changes.

Build auditable KB packs (SQLite FTS5) from md/txt/docx/pdf with deterministic retrieval and original-text reading.

Bounded local memory with CBDC authority gating: SQLite + FTS5 claims, scoped recall with explainable use/verify/ignore decisions and a full audit trail, /memory commands, ≤3-claim/1200-char injection per call, no extra model call.

Chinese accounting and tax knowledge base for DSH agents, served by the hosted Quaesto service at api.accountingllm.site (needs network access; no account or API key, but your queries leave the machine): answers questions on CAS enterprise accounting standards, the small-enterprise accounting standards, CSA auditing standards and tax law with original articles, decision procedures, applicability checks and tax-accounting differences, exposed through 10 MCP tools and a china-accounting-standards skill.

Session install radar for DeepSeek Harness: lists what each conversation installed (pip, npm, git clones, winget-like installers) with size, path, creation time, purpose, why it was installed, and what removing it costs. Ships a sidebar panel, 10 agent tools, a timestamp sweep of temp directories, a process-command-line audit, and a two-step confirmed cleanup limited to temp directories. An optional scheduled cleanup of old temp directories is off by default.

Real session deletion for DSH: trash by default, plan before delete, audit log, residue receipt

QQ bridge for the dsh-memory-agent (Echo) companion: OneBot 11 plus an optional official QQ text transport, bounded group context, file handling and delivery auditing. Requires dsh-memory-agent; the OneBot path also needs a OneBot 11 client such as NapCat or SnowLuma, and the official transport is a separate opt-in package in the same repo.

Database workbench inside DSH: import the connections DBeaver already stores (data-sources.json, decrypting saved passwords locally) or register SQLite, PostgreSQL, MySQL and Oracle sources by hand, then hand them to the agent through eight mcp__db__ tools — list_datasources, list_tables, describe_table, sample_rows, execute_sql, explain_query, get_ddl and test_connection. Sources start read-only; one global switch enables INSERT/UPDATE/DDL, every call is row-capped and appended to a JSONL audit log. Also covers groups, bulk actions, a read-only schema browser and a bundled Python MCP server whose dependencies install from the panel. No DSH files to edit.

Local DSH companion plugin with long-term memory, graph-assisted retrieval, emotional state, reflection, group context, and audit views. Targets Windows with Node 24 and Python 3.14 (the basic engine uses the Python standard library, no pip; without Python it falls back to the JS retrieval path).

A Windows disk cleaner for DeepSeek Harness that scans known-safe cache locations, shows their sizes, reclaims the space from a Web panel, and offers a read-only audit of what it cannot clean automatically.

Run AI commands in real NyaTerm terminal sessions, reusing saved groups, jump hosts and local terminals, with a per-workspace allowlist; commands stay visible and auditable in NyaTerm.

Cleanup Mode agent preset for DSH: read-only scans of leftovers (including duplicate detection), a manifest before anything is deleted, trash-first removal only after confirmation, and a per-session audit log. Cleaning outside the workspace requires a danger-full-access session; under workspace-write it can only inspect and will ask you to raise the permission.