Plugins

Docker container panel for the DSH Web GUI: containers (optionally including stopped), docker inspect details, logs, stats snapshots, image list and one-shot exec on the local machine or SSH hosts — read-only by default (mutations and exec are permission-gated), with a per-container terminal drawer embedded via the tty plugin.

Side-panel Chrome and Firefox extension that lets DSH drive the tab you are on: pages reach the model as structured text with a numbered element list, and clicks, typing and navigation wait for your approval. Beyond upstream it adds viewport screenshots, opening a URL in a new window, scrolling inside nested scroll containers (chat transcripts, side panes, modal bodies), permission-mode, model and slash-command controls in the composer, and an opt-in developer-tools group (elements and CSS, page JavaScript, network requests) that is off by default and approved per call. The install is two halves: the bridge plugin comes from the prebuilt release tarball, and the companion extension ships as a tgz in the same release and is loaded unpacked, which is the only way Chrome accepts it. This project is a fork of omdsh-dev/dsh-browser: https://github.com/omdsh-dev/dsh-browser

Runs the agent's shell and file tools in disposable Podman containers, so its access is constrained to the workspace project by default, and adds container, image, volume and secret management with approval-gated control.

DeepSeek Harness sandbox provider backed by MXC (Microsoft eXecution Containers): wraps ctx.sandbox.confine() argv as `wxc-exec --config-base64 <policy> -- <command>` on the BaseContainer backend. One runtime dependency (@microsoft/mxc-sdk, for the wxc-ex

C++ audit skill: detects the target project's actual C++ standard before making any recommendation, then reports findings across RAII and ownership, move semantics, exception safety, performance and memory, containers and algorithms, concurrency, templates and compile-time, standard boundary, and type safety, ABI and interface design, each with a checkpoint, a reason, a bad-to-good example and the minimum standard.

Manage Proxmox VE through conversation: 116 read + 116 write tools covering VMs, containers, storage, nodes, clusters, backups and firewalls, with API-token or username/password (ticket) auth.

Skill that deploys a folder to a public HTTPS address on Back4app with the Back4app CLI, on a temporary account with a claim link to keep the web app.

Host-side TTS bridge for dsh that synthesizes speech over the Edge TTS protocol and serves MP3 on a same-origin route, for containers with no audio device.

One DSH tool that runs a command on any execution surface the machine has -- WSL, MSYS2, Git Bash, PowerShell, nushell, interpreters, throwaway containers, ssh, real terminal windows and a real console -- and reports the version each one gives and the capabilities it has.

Remote Linux server manager in the Harness Web UI: browse and edit files, inspect host status, start/stop/restart Docker containers, inspect images, configure Docker registry mirrors, manage firewalld/ufw rules, switch apt sources, and detect developer tools or install/upgrade them with apt.

Web management panel for Docker on DeepSeek Harness: manages Docker MCP servers (deploy/remove, official catalog search/pull, gateway start-stop-restart, custom deploy) and containers/images (list, start/stop/restart, remove, logs, inspect, interactive terminal, create, pull, build, load) across local CLI and SSH remote targets with one-click switching. Credentials are encrypted with Windows DPAPI, HTTP is loopback-only, and command parameters are whitelist-filtered. Build-free pure ESM; client is zero-dependency.