Plugins

Visual design studio for websites, app prototypes, posters, cards, reports, and magazines, with templates, direct element editing, selection-aware AI draft handoff, and export.

Security-analysis plugin for DeepSeek Harness: 33 tools spanning six security domains, evidence/reporting and toolbox, plus the case lifecycle, routing and tool ledger; a session-bound case workflow with an evidence chain, E-id validation and reproducible findings; 362 on-demand references; three hot-swappable persona profiles; and a four-tab workbench (armor / case / intercept / about) with case-state recovery after context compaction.

Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.

A workspace-based Studio for source-grounded reports, slides, tables, mind maps, quizzes, flashcards, audio and video, using DSH models and shared artifact services. Office generation requires Python 3.12+ with its dependencies and DSH_OFFICE_PYTHON configured; media rendering requires Chromium, and local ASR additionally requires whisper.cpp and a model.

Pi Host ABI compatibility engine: after one install, unmodified Pi extensions from npm mount as native DSH plugins with `dsh plugin add <pi-package>`. Verified end to end on stock DSH with pi-mcp-adapter (full MCP manager: OAuth, resources, prompts, MCP Apps, elicitation, sampling), @tintinweb/pi-subagents, pi-code, pi-hermes-memory and pi-background-tasks; `pi2dsh inspect` reports a package's compatibility before installing.

Deterministic industry research reports for DeepSeek Harness — company and industry research flows produce structured, verifiable reports from staged evidence.

Verifiable research-report engine for DeepSeek Harness with a content-addressed evidence ledger, versioned sealed reports where every claim carries a verification verdict and the manifest hash seals the directory, and retrieval orchestration that reuses the ctx.web and ctx.jobs seams.

Reports which skills each turn invoked (loaded by the model, typed as /name, or none) and manages the local skill directory: install from a pasted repository, folder, SKILL.md or zip address, set a Chinese display name in the skill meta.yaml, and remove a skill while keeping a backup.

Red-team engagement mode: send one target organization name; a planner session runs five execution roles (recon, asset triage, vulnerability discovery, exploitation, internal pivot) with configurable concurrency; preflight checks skills/resources; scoring uses four stages (recon, internet, boundary, internal) with server-side caps and privilege-wins dedup; findings stay in a local SQLite fact base. The persistent right-side console has nine pages and includes asset mapping, agents, sessions/tunnels, findings, score targets, reports, POC knowledge base and skill library. v0.15.2 adds automatic HTTP evidence/action records, batch ingest, scope check, tunnel pivot probe, data proof, cleanup ledger and T0-T3 asset admission to prevent scope drift. 59 redteam_* tools; 38 bundled skills.

Paste a link; the agent reads it. Xiaohongshu, Douyin, Bilibili, WeChat, articles, PDFs and audio become citable Markdown for a wiki or knowledge base. On 60 turns with vs without: finishes reading 22% -> 92% (+70 points), times out 68% -> 0%, answer quotes a real source fact 23% -> 82% (the A/B is exploratory: different time caps, no human correctness review). On 123 live links 80% came back usable (93% of the pages that answered); an unreachable link reports in 26 s. Codex, Claude Code, DSH.

Lets the agent scan Bilibili through a subagent and report what is worth watching, with per-video notes, a card wall, and an inbox for mentions, replies and shared videos.

Browses Douyin in a dedicated browser with daily viewing limits, shared local persona and interests, native settings, diagnostics, usage tracking, and reports. Replies and shares use selected conversations; group replies require a mention or configured name. Public comments require separate opt-in.

Read-only security and compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and a local configuration audit with redacted, reproducible reports.

Cleans the harness prompt-authority layer into a reviewable patch set, writes prompt-inject.md and lets each model use a different default prompt, reports which patches took effect and whether the running host loads app.asar or an unpacked tree, and swaps a sealed install to the patched tree once the desktop process is idle. Includes a status page and the dsh-purge CLI.

Diagnoses current and saved DeepSeek Harness trajectories with AgentDebugX and opens structured reports in its dashboard.

Deep-read books and articles in five modes (quick, deep, knowledge map, Feynman, full book) with claim-evidence-data reports, Mermaid/XMind mindmaps, batch comparison, budget preflight, transparent background-job progress, and MD/HTML exports from URLs, files, or pasted text.

Deterministic research reports for Chinese public mutual funds built from public-source data (Tiantian Fund and Eastmoney), pure-function metrics (performance decomposition, holdings penetration, style attribution, manager profile), and versioned reports with a per-number snapshot traceability appendix.

Engineering-discipline guard: requirements grill before the first edit, red/green test-evidence gates, forked adversary review, and a delivery report with a per-dimension verification workflow.

Daily game automation on Windows for Genshin Impact, Honkai Impact 3, Honkai: Star Rail and Zenless Zone Zero: a scheduled task per game drives BetterGI, the game-daily skill family, March7thAssistant or ZenlessZoneZero-OneDragon, with per-game switches, a foreground guard, in-run supervision that only steps in on trouble, and one report session per game that later results are appended to. Requires the DSH desktop app and the matching external engine installed.

Data quality checking for DeepSeek Harness — profiling, cleaning, and verification pipelines with structured reports.

Automate Huawei eNSP labs: generate .topo files, start and stop devices, and push configuration one command at a time with per-command error reporting. On Windows it drives the eNSP window with simulated mouse clicks and window screenshots used to locate buttons (administrator rights needed), sends commands to the device consoles over local TCP, and may force-kill running eNSP clients when it has to relaunch.

Watch a video together with a text-only agent: with ffmpeg and the bundled browser extension reporting your real playback position (not a timer), it hands over one segment at a time just before that segment ends. It ships no TTS engine — it emits timed speech events, and speaking them aloud needs your own voice/TTS setup.

Off-peak batch runner for DeepSeek Harness: users define tasks during busy hours — prompt, strategy, priority, workspace, locked files — and release them by hand; the plugin then runs the batch automatically inside user-defined off-peak windows. Each run passes five preflight checks (workspace, git HEAD, locked-file sha256, window fit, daily budget), supports four execution strategies (single / iterative / sampling / review) and three autonomy levels (L1 per-task, L2 batch, L3 full-auto), and closes the loop with a morning report containing diffs, actual spend and savings from a daily ledger aligned with official peak/valley pricing.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.