by PerryLink

PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer,

by HorusJiang

Jev judgment, not generation: prune long tool output, screen fetched pages for injected instructions, and gate completion claims inside DeepSeek Harness.

by cherrchen

Multi-folder workspace: Let the DSH (DeepSeek Harness) Agent read and write not only the primary directory, but also read and write other folders you add at the same time.

by Ox0400

Encrypted credential vault for DeepSeek Harness — AES-256-GCM + TOTP, model tools + Settings UI

by 0QwQ0

Authentication gate for the DeepSeek Harness Web UI: login covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies, IP-based login lockout, a us

by Yuuz12

WebUI Authentication: HTTP/Transport-layer forced login (four-layer protection for resources, plugin bundles, /api, WebSocket), server-side sessions + HttpOnly Cookie.

by sorsama

Authenticated remote access for a DeepSeek Harness web profile: TLS, QR/passcode device pairing, password sign-in, and per-device revocation in front of an untouched loopback harness.

by GooDAnDReaDY

Per-provider API key rotation for DeepSeek Harness: key pools, automatic 429 rate-limit failover, cooldown probing & Settings UI

by litestartup-com

DeepSeek Harness's API Gateway plugin: Any third-party client can interact with your DSH Agent.

by shaoshi20

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence

by PerryLink

Cost governance for DeepSeek Harness: aggregated token/cost metering per model, session and day, budget caps with threshold alerts and over-limit policies, carbon footprint estimation, per-model laten

by lovezi0

Windows workspace pre-authorization: adds an explicit full-control DACL ACE (including WRITE_OWNER, required by dsh >=0.1.7 sandbox startup) to user-declared workspace directories, removing the repeat

by developerdh

Add a configurable "Sandbox Authorized Directory" to the DSH default sandbox, enabling trusted modifications outside the workspace.

by Letter2025

Model-based permission approval (approve-for-me) for DeepSeek Harness: an approval/request answerer backed by a separate reviewer model

by onlyqzq

Risk-aware approval layer for high-risk AI Agent tool calls

by yauntyour

DeepSeek Harness Credential Encryption Plugin — secures credentials end-to-end with full encryption and verification powered by AES-256-GCM + SHA3-256, driven by a user-set password. Data is decrypted temporarily only at runtime, ensuring memory safety.

by rice-awa

Securely expose the DeepSeek Harness Web GUI to your local network or the public internet, with built-in password authentication and optional TLS support.

by NEVSTOP-LAB

DSH Approval Mode plugin, adds an "Approval Mode" button next to the permission dropdown (Read Only / Workspace Write / Full Access) in the DSH window, automatically allowing tool calls in Workspace Write mode.

by clarknu

HTTPS + login gateway for the DeepSeek Harness web surface: access your DSH Web UI securely from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-o

by m1khal3v

Seamless API-key rotation for DeepSeek Harness

by yzxxy010

Adds a workspace-write++ permission that keeps file tools inside the workspace while skipping the Windows process sandbox for wildcard-allowlisted executables such as Git Bash.

by bruc3van

The only DeepSeek Harness marketplace built around security, advocating review before installation. A deep scan takes just 5 minutes, so you can use it with peace of mind every day. npm: dsh-desktop-safe-market

by deepseekv41flash

Backfill the host-measured context usage for the DSH model every round, and prevent the misjudgment of "context nearly exhausted" from being inherited by the compressed summary.

by log-li

Claude Code-style auto approval layer for DeepSeek Harness: deterministic rules + two-stage classifier, circuit breaker, fail-to-human. Shadow mode day one.