Plugins

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

Dark-only starry-sky theme for the Web UI: both Light and Dark resolve to one deep-space night palette with a twinkling click-through starfield and four constellation figures, and the appearance preference is pinned to Dark while the plugin is enabled.

Writes a model-generated annotation into every DSH escalation approval prompt — what the command does, what the model intends, how risky it is and why, and what each choice means — and keeps a searchable history of past approvals at /dsh-approval/history, with a diagnostics page at /dsh-approval/diag.

Connects DeepSeek Harness to Fuxux over MCP: list connected social media accounts and draft, schedule or publish posts to Instagram, Facebook, TikTok, YouTube, LinkedIn, X, Threads, Bluesky, Pinterest, Discord, Kick and Twitch; adds a fuxux workflow skill.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

Computer Use for macOS desktop applications: reads any app's accessibility tree as text with element indices, then clicks, types, pastes, scrolls, drags, selects text and sets values through it, plus screenshots read back as images. Driven by a persistent JavaScript REPL — the agent gets two tools (`js`, `js_reset`) and calls an `sky` API inside them, so state survives between calls and the tool schema stays fixed as capabilities grow. Accessibility trees come back as diffs after the first read; actions address elements by index and indices from a stale read are refused rather than misapplied; typing waits for keyboard focus and reads the field back; paste restores the clipboard. Requires macOS 14.4+, Accessibility permission (Screen Recording only for screenshots) and Node 20+; ships a prebuilt native module, so nothing compiles at install time.

Semantic risk grading and progressive authorization: classifies tool calls into safe/risky/redline, asks before irreversible actions, auto-allows only approved-and-succeeded signatures.