Plugins

Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.

Pacote completo de skills de engenharia reversa (85 arquivos SKILL.md) como um plugin Cordis do DeepSeek Harness: roteador de skills para engenharia reversa, pentest autorizado e pesquisa de segurança.

Modo Auto para o DeepSeek Harness (dsh): uma opção Auto no seletor de Permissões cujos prompts de aprovação são respondidos pela política do OpenGuardrails em vez de um humano — além do motor de proteção OGR completo por trás. Sem alterações no núcleo.

Remote DeepSeek Harness with full server-side API access (`settings.*` / `credentials.*` / `host.listDirectory`). Token-gated reverse proxy, per-device sessions, phone invite QR, fence self-check, optional approval / CIDR / idle timeout / local TLS, WebSocket/SSE.

Auditoria de segurança local: configuração, origem dos plugins, sessões, exposição de rede — relatório de risco somente leitura e com dados sensíveis ocultos.

Portão de login para a web UI do DSH: proteção por senha com configuração na primeira execução, bcrypt + criptografia em repouso (AES-256-GCM/HMAC), bloqueio contra força bruta, log de auditoria, TLS 1.2+ com redirecionamento 80→443, CSRF e anti-framing.

MCP bridge that lets ChatGPT Web create, view, continue, and supervise DeepSeek Harness agent sessions and goals while preserving DSH's native approval, sandbox, and workspace security model.

Always-on dependency security for DSH plugins: tracks exact installed paths, OSV vulnerabilities, npm releases, and breaking-change signals, then routes project evidence to a DSH Agent.

Alternative plugin market for DSH: curated catalog plus live GitHub browsing, zh/en cross-language search, a fail-closed pre-install static security audit with an install-hook block, and per-plugin README viewing with garbled-encoding repair.

Remote access & authentication for DeepSeek Harness web UI: account/password login gate, MFA (TOTP), signed session cookies, role-based access, in-browser directory picker, account management settings, fully localized in English and Chinese.

Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.

Agent security guardrail: intercepts and audits every tool call, requiring human confirmation on sensitive operations.

Loja de plugins no estilo Steam Workshop para a Web UI do DSH: navegue, pesquise e instale com um clique plugins da comunidade, com aceleração via mirror, UI de progresso, verificações de segurança e descrições em chinês.

Template-driven code review skill: five-step review flow, critical/medium/minor severity grading, four-dimension scoring (quality, security, performance, maintainability), dual text and HTML report output, and an on-demand reference knowledge base.

Redige padrões de segredos suportados na cópia exportada de `session-telemetry/record` antes que os backends de telemetria configurados a recebam.

Login gate for the dsh web surface: password or shared-token authentication, session cookies, rate limiting, and a user-management CLI (dsh.bundle manifest since 0.4.1, one-command `dsh plugin add` mounting).

Tested-curation lab for DSH plugins: every entry passes real install/static-scan gates in an isolated environment, with full logs and reproduction commands (Chinese-first).

Agentic Control Plane para o DeepSeek Harness — verifica cada chamada de ferramenta em relação às suas políticas antes da execução e mantém um registro durável do que foi permitido e por quê

Plugin de provedor opcional para o dsh-skill-pack-security: registra a edição skills/ (zh) ou skills-en/ (en) do pacote em ctx.skills. Ambas as edições vêm embutidas em pack/

Verifica skills e configurações MCP em busca de injeção de prompt, homóglifos, Unicode oculto, comandos de shell perigosos e vazamento de credenciais

DeepSeek Harness community Bundle for the skill-security-guard static scanner

Provenance-aware execution security for DeepSeek Harness. Track sensitive data across tool calls and stop risky side effects before execution.

Ecosystem-wide plugin health audit: syncs the dsh-plugin topic into a local scored catalog (maintenance / docs / npm + weekly downloads / ecosystem, 0-100, A-D), static security scan with high-finding grade veto, star history snapshots, web leaderboard and agent tools.

Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.