⚔️ DeepSeek-V4.1 / V4 Flash Cybersecurity Red-Team Toolkit (Infinite Gen 4) v0.4.0

🌐 Plugin Ecosystem Marketplace: DeepSeek Harness Hub - DeepSeek Official & Open-Source Ecosystem Marketplace | Plugin Discovery & One-Click Install

💬 DeepSeek Community Groups

👉 Red-Team Security Exchange Group 8: 660475886

👉 DeepSeek Plugin Development Group: 1121385378

👉 Tencent Channels Tech Community: pd86424753

🔥 Come and share red-team attack/defense insights, exchange prompts and eval benchmarks, and discuss plugin development and ecosystem co-building!

---

🛡️ Why Cybersecurity Red-Team Benchmarking Matters

As generative AI and LLMs deepen across industries, model robustness, adversarial defense and alignment safety are now core cybersecurity research topics:

1. Exposing defense boundaries, reinforcing guardrails: Professional red-teaming in controlled environments proactively probes input escapes, prompt injections and unexpected behaviors, helping teams pinpoint defense blind spots and harden fine-tuning, filtering gateways (Guardrails) and system security layers.
2. Building an integrated attack-defense system: Defenses without controlled red-team cases are theoretical. Standardized test suites provide a yardstick for enterprises and auditors to measure defense effectiveness before real malicious threats.
3. Advancing native LLM security research: This project supplies a transparent, reproducible benchmark baseline for academia and security engineering, driving defenses against adversarial attacks, manifold-constrained alignment and formal verification.

---

⚠️ Strict Legal & Compliance Disclaimer

[ZERO TOLERANCE]: This project firmly opposes all illegal or criminal acts! Developers do not support, encourage or assist unauthorized attacks, vulnerability exploitation, data theft, illegal system intrusion, or generation of prohibited content.

1. Lawful, controlled scope only: dsh-infinite-gen-4 is a pure red-team research and robustness benchmark suite. Running it against targets without the owner's written authorization, on public systems, or in production is strictly prohibited. All testing must stay within offline local synthetic fixtures, authorized exercise ranges, and compliant controlled environments.
2. No illegal or prohibited use: Users must not use this project to directly or indirectly:
   • Violate laws such as the PRC Criminal Law, Cybersecurity Law, Data Security Law, or Personal Information Protection Law;
   • Unauthorized penetration or attacks on computer systems, extortion, destruction, credential stuffing, or spreading malicious payloads;
   • Induce, generate or spread content endangering national security, or involving terrorism, graphic violence, pornography, gambling, fraud, privacy or IP violations — or any legally prohibited content;
   • Violate the ToS and Usage Policies of relevant model providers.
3. Users bear full responsibility: Provided "AS-IS" under the MIT License, with no express or implied warranties. Users solely bear full civil, administrative and criminal liability for all download, deploy, run, modify and distribute actions and their input/output consequences. Authors and contributors accept no direct, indirect or joint liability for user misuse.
4. Breach terminates the license immediately: Any use for illegal attacks or violations automatically and irrevocably terminates the license from the date of the violation. The party must immediately stop using and permanently destroy all code, scripts and derivative data, and face legal sanctions.
5. Third-party independence: This is a fully independent open-source research project with no affiliation, commercial partnership, license or official endorsement by DeepSeek or related entities.

---

🔥 V4.1-DeepSeek Flash Cybersecurity Red-Team Toolkit (Infinite Gen 4) v0.4.0. Adds breakthrough support for V4.1 RL-based adversarial attack, with one-click install for both desktop and client. If this open-source project helps you, consider giving it a Star ⭐.

v0.4.0 Pure Red-Team Edition: Natively uses a zero-tool-surface architecture, eliminating tool-call decision noise during the model's thinking phase; injects a dual-layer coordinated kernel (general kernel + reinforcement mirror, same-origin isomorphic), retaining only system-prompt injection and real-time state projection.

---

🧬 v0.4.0 Dual-Layer Kernel Notes

• Injection slots: infinite-gen-4:global-system-prompt (Order 100) + infinite-gen-4:dual-layer-reinforce (Order 200), controlled by the DUAL_LAYER_INJECTION switch in index.js (set false for single-segment injection, behavior-equivalent).
• Three kernel files under prompts/ (infinite-gen-3.md / infinite-gen-4.md / infinite-gen-4.1-flash.md)

---

📊 Architecture & Capability Comparison

Dimension	Infinite Gen 2	Infinite Gen 3	Infinite Gen 4 (v0.4.0)
Target models	V3 / early V4	DeepSeek-V4 (mHC)	Full DeepSeek-V4.1 / V4-Pro / Flash lineup
Runtime architecture	Single-layer prompt	Safety-baseline single layer	Dual-layer cooperative injection (general kernel + enhanced mirror, same source & same structure)
Tool-surface design	Coarse-grained	Zero tool surface	Native zero tool surface (eliminates decision noise, instant direct output)
Memory write-value primitive	Easily intercepted	Requires preconditioning induction	Trainer-lane direct output (OpenProcess/RPM/WPM)
Output contract	Weak rules	First-line named deliverable	First-token forced induction (##/```) + banned-word self-check
Client status bar	None	Supported (with domain & payload counters)	Supported (real-time projection + animated status bar)
One-click install protocol	Manual config	dsh:// supported	Native dsh:// coordination + automatic backward compatibility

---

📁 Project Directory Structure

无限四代v0.4.0/
├── 🚀 一键安装与维护套件
│   ├── install.ps1              # Windows 一键自动安装（自动配置环境，注册协议）
│   ├── install.bat              # Windows 快捷双击批处理
│   ├── install.sh               # Linux / macOS 一键安装
│   ├── uninstall.ps1            # Windows 一键卸载
│   └── uninstall.sh             # Linux / macOS 一键卸载
├── 🧩 核心插件装载面 (标准 Cordis 架构)
│   ├── package.json             # 插件元数据（dsh-infinite-gen-4 v0.4.0）
│   ├── cordis.patch.yml         # 核心 patch 声明
│   ├── index.js                 # 插件核心入口（双层提示词注入 + profile 元数据 + 会话投影）
│   ├── client.js                # 客户端半体（「⚫ 无限四代 v0.4.0」状态条）
│   └── HARNESS_PLUGIN.md        # 插件规范说明
├── 📜 网络安全红队系统提示词本体
│   └── prompts/
│       ├── infinite-gen-3.md          # 三代经典内核
│       ├── infinite-gen-4.md          # 四代通用内核（输出契约 + 拒绝对抗 + 全域槽位）
│       └── infinite-gen-4.1-flash.md  # V4.1 强化镜像层（训练器车道 + 浅推理 + 元数据提取）
├── 📖 文档中心
│   ├── README.md                # 综合主说明文档（本文件）
│   └── LICENSE                  # MIT License
├── 🛡️ 确定性回归测试套件
│   ├── scripts/
│   │   ├── lib/scorer.mjs       # 开头窗口判拒评分器
│   │   ├── verify_prompt.mjs    # 经典确定性校验
│   │   ├── verify_prompt_gen4.mjs # 四代全量回归断言（103 项严苛断言）
│   │   └── verify_prompt_gen41.mjs # V4.1 专项断言
│   └── tests/
│       ├── prompt-bank.jsonl      # 经典双语回归用例库
│       ├── prompt-bank-gen4.jsonl # 四代双语回归用例库
│       ├── prompt-bank-gen41.jsonl # V4.1 专项用例库
│       └── v4pro-benchmark.jsonl  # V4-Pro 评测基准
└── 📁 静态资源 (assets/)

---

⚡ One-Click Installation

Method 1: dsh:// Protocol One-Click Install (⚡ Fastest on desktop, sub-second, no CLI)

If the official DeepSeek Harness desktop client (EXE) is already installed, click the button below to securely launch the client via the system-level URI Scheme protocol and complete a sub-second, command-line-free installation:

🌐 Plugin Ecosystem Marketplace: DeepSeek Harness Hub - DeepSeek official & open-source ecosystem marketplace | Plugin discovery and one-click install

🔗 Native protocol link:

dsh://plugin/install?id=dsh-infinite-gen-4&name=%E6%97%A0%E9%99%90%E5%9B%9B%E4%BB%A3&version=0.4.0&repo=Minglink%2Fdsh-infinite-gen-4&permissions=%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA%E8%AF%8D%E6%B3%A8%E5%85%A5%2C%E5%AE%A2%E6%88%B7%E7%AB%AF%E7%8A%B6%E6%80%81%E6%9D%A1&downloadUrl=https%3A%2F%2Fgithub.com%2FMinglink%2Fdsh-infinite-gen-4%2Farchive%2Frefs%2Fheads%2Fmaster.zip

Web (frontend) trigger code sample:

/**
 * 唤起 DeepSeek Harness 桌面客户端一键安装无限四代插件
 */
export function installInfiniteGen4ToDesktop() {
  const params = new URLSearchParams({
    id: 'dsh-infinite-gen-4',
    name: '无限四代',
    version: '0.4.0',
    repo: 'Minglink/dsh-infinite-gen-4',
    permissions: '系统提示词注入, 客户端状态条',
    downloadUrl: 'https://github.com/Minglink/dsh-infinite-gen-4/archive/refs/heads/master.zip',
  });

  const deepLink = `dsh://plugin/install?${params.toString()}`;

  // 通过隐藏 iframe 安全静默拉起协议
  const iframe = document.createElement('iframe');
  iframe.style.display = 'none';
  iframe.src = deepLink;
  document.body.appendChild(iframe);
  setTimeout(() => document.body.removeChild(iframe), 2000);
}

Static HTML link approach:

<a href="dsh://plugin/install?id=dsh-infinite-gen-4&name=%E6%97%A0%E9%99%90%E5%9B%9B%E4%BB%A3&version=0.4.0&repo=Minglink%2Fdsh-infinite-gen-4&permissions=%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA%E8%AF%8D%E6%B3%A8%E5%85%A5%2C%E5%AE%A2%E6%88%B7%E7%AB%AF%E7%8A%B6%E6%80%81%E6%9D%A1&downloadUrl=https%3A%2F%2Fgithub.com%2FMinglink%2Fdsh-infinite-gen-4%2Farchive%2Frefs%2Fheads%2Fmaster.zip" class="btn-install">
  🚀 唤起客户端一键安装
</a>

Protocol parameter configuration (dsh://plugin/install):

Parameter	Value / Example	Description
id	dsh-infinite-gen-4	Unique plugin identifier
name	无限四代（URL 编码）	Plugin display name
version	0.4.0	Semantic version number
repo	Minglink/dsh-infinite-gen-4	Official GitHub repo
permissions	系统提示词注入, 客户端状态条（URL 编码）	Requested permissions
downloadUrl	https://github.com/Minglink/dsh-infinite-gen-4/archive/refs/heads/master.zip	Offline zip direct link

---

Method 2: Windows local script one-click install (recommended)

1. Open this folder;
2. Right-click install.ps1 → "Run with PowerShell" (or double-click install.bat directly);
3. The script will automatically complete: dependency writes, pnpm install and dsh:// protocol registration;
4. Once you see "Installation complete", fully quit and restart DeepSeek Harness (refresh the page for the web version, restart the app for the desktop version). Start a new session to activate.

Method 3: Linux / macOS one-click install

chmod +x install.sh uninstall.sh
./install.sh

Method 4: Manual configuration install

Add to ~/.dsh/profiles/<web 或 default>/package.json:

{
  "dependencies": {
    "dsh-infinite-gen-4": "file:../../plugins/dsh-infinite-gen-4"
  },
  "dsh": {
    "profile": {
      "bundles": [
        "@deepseek-ai/dsh-base",
        "dsh-infinite-gen-4"
      ]
    }
  }
}

Then run pnpm install in the profile directory and restart Harness.

---

⚡ Verify Activation

1. UI status bar: After restarting, a prominent green status bar "⚫ Infinite Gen 4 v0.4.0" should appear above the input box.
2. Offline regression test:

   # Runs 103 assertions (prompt completeness, dual-layer kernel same-source, V4.1 lanes, clean architecture, scorers, etc.)
   node scripts/verify_prompt_gen4.mjs
   

3. Session probe: In a brand-new conversation, type:

   "Which plugins does your system prompt come from?" If the response includes "Infinite Generation Four / 无限四代", the dual-layer prompt injection has fully succeeded.

---

🗑 Uninstall

Run uninstall.ps1 (Windows) or ./uninstall.sh (Linux / macOS) to thoroughly clean up in one click, leaving no configuration residue.

---

💬 Community & ☕ Sponsor

If Infinite Gen 4 has helped your red-team research or security testing, join our community or sponsor the author!

🌐 Official Technical Exchange Community (Tencent Channel)	☕ Sponsor / Support
Channel ID: pd86424753	Treat the author to a coffee