by theinfluencecompany

Realtime Avatar (realtimeavatar.ai) for agents: the developer API key held by the harness credentials store, the public docs as five on-demand skills, rta_* tools over the public REST API (balance, av

by wxjgit

When the current session or a background session is waiting for permission approval, the plugin displays an approval card in the corner of the page, allowing you to choose "Allow Once" or "Deny" without switching back to the original session.

A LAN password gate for the Web UI: phones and tablets on the same network log in with a shared key and see the same sessions in real time, with a built-in randomUUID polyfill for plain-HTTP origins.

by sujingkpo

This project only addresses "automatic approval"; it does not solve the unattended operation problem.

Runtime security guard for DSH: loader import confinement, HTTP Host header validation, and source patch for VM sandbox escapes (4 CVEs). AI-assisted.

Stages exact DSH tool calls without dispatch, presents complete canonical arguments in a durable Batch Review Inbox, invalidates approvals after edits or restarts, and commits only a matching SHA-256

by jxboop

A mobile bridge plugin for DeepSeek Harness: send images from your phone, dispatch tasks, and view output in real time. Supports LAN / USB sharing / Cloudflare tunnel for external network access.

by Anguis-L

DSH Plugin: Read-only audit plugin — whether HTTP routes truly implement authorization fences (fenced / open / absent / unknown)

LLM approval answerer for sandbox escalations beyond workspace-write: a deterministic regex filter first, then a clean-context reviewer model; humans are asked only when it is unsure. Requires the bun

by koking0

DeepSeek Harness plugin for Google Calendar & Google Tasks - 30 tools, natural-language scheduling, zero runtime dependencies

by WYR-233

DSH Foolproof Plugin: `safe_kill` tool (automatically excludes itself and the ancestor process chain) + bash command pre-check + extensible rule library. Zero-dependency safety guard for DeepSeek Harness.

by AhYi8

Rewrites agent-issued delete commands (PowerShell `Remove-Item` and its aliases, Bash `rm`/`unlink`/`rmdir`, CMD `del`/`erase`/`rd`/`rmdir`) into system recycle-bin operations on Windows, Linux and ma

Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.

by takasurazeem

No project description is available for this repository yet.

Static security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.

by icyaaaww

Blocks high-confidence secrets before dsh-TUI sends them to a model, compliant with dsh ecosystem manifest v0.15.

by Luawig

Re-validates Cloudflare Access JWTs at the DSH origin so Settings, Credentials, Agent Preset management, and model discovery work from a remote hostname.

by nengong-ai

Pure JavaScript macOS Keychain credentials provider for DeepSeek Harness, replacing plaintext .credentials.yaml storage and fully supporting both refs and records without native builds, signing, or Xc

by JackZo400

Egress guard for dsh: public addresses only, every redirect hop re-checked, size capped while streaming.

by ArisuYuuko

DSH Approval Popup AI Annotator: When the model requests operations beyond its granted permissions, use the model's own reasoning to explain the significance and risks of the operation.

by 863683348

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict

by kaijia323

TypeSafe Jev (System One decision model) as a native jev_decide tool plugin for DeepSeek Harness

by zhaoxuejie

DeepSeek Harness Tool Call Security Guard (Firewall) Plugin: Dangerous Command Interception, Path Whitelisting, Sensitive File Blacklisting, Manual Approval, and Audit

Taints the agent when tool results carry untrusted content, gates the privileged calls that follow, and refuses credentials passed to network-capable tools in every mode.