Plugins

Second-model gate on the assistant turn, installed with one command: the bundle installs the settings panel and mounts the engine out of the same package, so both halves come up together. A separate judge call scores the draft against the numbered criteria (0-10 each); any criterion under 6 fails the turn and sends it back for a rewrite, up to 3 rounds by default. Ships in dry-run mode, which only records verdicts to an audit log until you switch it off. The web panel edits the criteria, the thresholds and the judge prompt.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Registers one tool, report_health, that answers whether a scheduled report job actually ran. It judges by side effects rather than exit codes: how old the newest report folder is, how many documents it holds, whether more than one report category is present, whether the audit ledger was synced recently, and how long ago the last log was written. Exits nothing, calls no model, and reads only local paths you can override by config or environment variable.

Disk cleanup for Mac (macOS) and Windows: a risk-tier audit and space breakdown, then moves caches, leftovers and similar photos to the Trash or a quarantine folder, with undo. Space is freed only after a batch is permanently deleted.

开源许可合规检查：扫描依赖树，找出 GPL/AGPL 传染、许可未知等风险 —— 发布前、开源前、被审计时跑一遍。

Batch approvals with a risk gate and an auditable decision ledger for DeepSeek Harness.

Chinese writing-register plugin for the Gcores/机核 editor 白广大: registers a 40 KB style skill plus style_lint / style_audit / style_rules tools — 4 hard-error and 27 warning checks (banned connectives, slogan inflation, empty quantifiers, uniform paragraphs, unsourced statistics, AI clichés), with thresholds calibrated on 444 articles / 802k characters; a settings page adds an on/off switch, single and batch trial runs, and JSON threshold overrides.

Static-context audit for a DSH home: a six-layer baseline (rules, memory, skills, tool surface, sessions, KB), broken-path checks for a markdown capability map, memory duplicate/stale/over-limit reports, SKILL.md description compression, and tool-surface plus cold-start static-context estimates recovered from session logs. Four read-only DSH tools; writes require --apply and are backed up first. Requires Python 3.10+ on the host (stdlib only; all four tools shell out to the bundled CLI).

DeepSeek Harness skill bundle for Hearts of Iron IV 1.19.3 modding: registers 15 skills and mounts 20 local MCP tools (a Python stdio server) to scaffold, statically verify, install and debug mods - focus trees, events, decisions, ideas, characters, technologies, MIO, special projects, scripted GUI and topbar buttons, localisation, DDS icons, 18-slot tank designer layouts, 3D tank models, CJK font auditing and error.log triage - plus a 23-workshop-mod technique survey and a multi-agent playbook. Requires DSH >=0.2.0 <0.3.0 and Python 3.9+ on PATH (standard library only, no third-party packages); no game assets are shipped.

Auditable mathematical proving for DeepSeek Harness: a local stdio MCP server with 23 machine-checking tools, a bundled workflow skill, and the /prove and /audit-proof commands. proven, refuted and inconclusive are never conflated, and unproven steps are reported instead of hidden. Needs Python 3.10+ with pip install -r requirements.txt on first run; the 23 tools are unavailable until then.

Audits the skills and plugins you already installed: routes a task description to the tool it needs, flags version drift against the npm registry and runtime faults from host logs, and reports which of a plugin's tools you never call. Registers 9 tools: can, find, status, recommend, check, scan, probe, run and suggest. Runs on Python 3.8+ with no third-party dependencies. Registered tool ids all carry the skill_audit_ prefix, for example skill_audit_can and skill_audit_find.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Adds two audit tools and four skills for Chinese medium-to-long texts (fiction among them) and document review — seven-dimension AI-flavor scoring with line-numbered blocking findings, plus file-backed continuity state for long manuscripts. Do not install with the older dsh-deai-audit from the same author, which registers the same tool names.

Router and artifact gate for DeepSeek Harness: a per-turn skill router that ranks the live catalog, plus a write gate enforcing read-before-write, dedupe and a four-line audit on every file write.

装第三方插件之前，先看它会动什么

Rice on a Stick: Expose control over DeepSeek Harness (dsh) through MCP (Streamable HTTP) and dsh's native tools, with a configurable list of allowed models. Long-tail host endpoints can be invoked via a generic, audited bridge. By default, it listens only on 127.0.0.1, with an optional access token.

Kill AI Slop for DSH — score a received document on three weighted axes (expression, execution, decision), audit work-slop with a delivery-obligation ledger, and machine-verify every quote against the source. Reads docx, pptx, xlsx, pdf, txt, md, csv, json and html. Zero runtime dependencies, zero network, fully local.

Audits Chinese copy for AI-sounding phrasing: a 0-100 score over six dimensions, sentence-level flags with rewrite hints, and per-genre weights adjustable in conversation.

Delete a DSH conversation from its sidebar menu or the conversation header, optionally cascading into that conversation's associated memory nodes when you tick the box (the confirmation dialog shows the hit count before you commit); deletes land in a plugin recycle bin with restore, every action is appended to an audit log, and batch deletes are rate-limited with per-conversation rollback.

Enforces a check-fix-recheck loop when a task is wrapping up: it auto-runs your tests/lint/audit, blocks any round that still has unfixed problems, and only calls the task done after three consecutive clean full checks, then notifies the user.

An audit workspace for DeepSeek Harness: a multi-agent consultation venue where each review seat is filled by an agent, every judgment is routed to a named review face, and the whole run is kept as a traceable record. Works out of the box: the service endpoint is built in, a workspace is provisioned automatically on first launch, and review scenes come with their seats and agents listed.

C++ audit skill: detects the target project's actual C++ standard before making any recommendation, then reports findings across RAII and ownership, move semantics, exception safety, performance and memory, containers and algorithms, concurrency, templates and compile-time, standard boundary, and type safety, ABI and interface design, each with a checkpoint, a reason, a bad-to-good example and the minimum standard.

NewAgentUniverseByDeepSeek nodes inside DSH: five read-only tools covering provenance (both upstream releases this build names), a data directory's restored state and ledger audit, the conformance vectors, exact decimal conversion, and node reachability. Driving the node -- starting or stopping a daemon, depositing funds, sending bus messages -- is deliberately not exposed, because those are audited privileged operations in this project.

Jev Review approval mode for DSH ^0.2.2-rc.1, reviewing each native/PTC inner tool call through System One (Jev or D3), with audit logs and a settings UI; requires the companion Jev host extension. Fork of gbthui/dsh-auto-review; do not install it alongside the upstream, as both gate the same tool-call approvals.