by MrWeiCodes

Fine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions,

by Tokeii0

DSH web plugin: Black-box/proxy-audit sidebar workspace (P0–P7, per-finding SRC reports).

by bainianling

DSH Jailbreak Mode standalone plugin — Armor Break Mode plugin (for learning and exchange purposes only, and authorized security research)

by Shaky77

Weiwen's Law (Weiwen's Law) White-box Risk Control DSH Plugin — DeepSeek Harness Causal Constraint Middleware

by omdsh-dev

DSH Local Security Audit Plugin: Configuration/Plugin Origin/Session/Network Exposure Surface, Read-Only Desensitized Risk Report

by cuddly-guacamole

LLM-assisted auto approval + timeout fallback for the DeepSeek Harness Auto preset

by wonderandyou

DSH plugin: Adds an "Administrator" tier to the permissions menu (full access + never ask), with built-in official computer use, control prompts, and autonomous iteration buttons.

by PerryLink

PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer,

by HorusJiang

Jev judgment, not generation: prune long tool output, screen fetched pages for injected instructions, and gate completion claims inside DeepSeek Harness.

by cherrchen

Multi-folder workspace: Let the DSH (DeepSeek Harness) Agent read and write not only the primary directory, but also read and write other folders you add at the same time.

by 0QwQ0

Authentication gate for the DeepSeek Harness Web UI: login covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies, IP-based login lockout, a us

by Ox0400

Encrypted credential vault for DeepSeek Harness — AES-256-GCM + TOTP, model tools + Settings UI

by hchao3335-maker

A DSH intranet access plugin — a plug-and-play gateway that lets LAN devices securely access the local DSH: local machine approval, device tokens, rate limiting, and mobile adaptation, all in a single file with zero dependencies.

by Yuuz12

WebUI Authentication: HTTP/Transport-layer forced login (four-layer protection for resources, plugin bundles, /api, WebSocket), server-side sessions + HttpOnly Cookie.

by sorsama

Authenticated remote access for a DeepSeek Harness web profile: TLS, QR/passcode device pairing, password sign-in, and per-device revocation in front of an untouched loopback harness.

by shaoshi20

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence

by litestartup-com

DeepSeek Harness's API Gateway plugin: Any third-party client can interact with your DSH Agent.

by GooDAnDReaDY

Per-provider API key rotation for DeepSeek Harness: key pools, automatic 429 rate-limit failover, cooldown probing & Settings UI

by PerryLink

Cost governance for DeepSeek Harness: aggregated token/cost metering per model, session and day, budget caps with threshold alerts and over-limit policies, carbon footprint estimation, per-model laten

by lovezi0

Windows workspace pre-authorization: adds an explicit full-control DACL ACE (including WRITE_OWNER, required by dsh >=0.1.7 sandbox startup) to user-declared workspace directories, removing the repeat

by developerdh

Add a configurable "Sandbox Authorized Directory" to the DSH default sandbox, enabling trusted modifications outside the workspace.

by onlyqzq

Risk-aware approval layer for high-risk AI Agent tool calls

by Letter2025

Model-based permission approval (approve-for-me) for DeepSeek Harness: an approval/request answerer backed by a separate reviewer model

by clarknu

HTTPS + login gateway for the DeepSeek Harness web surface: access your DSH Web UI securely from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-o