dsh-remote-shell
Manifest validBundles the remote-shell skill for secure SSH, SFTP, Telnet, and WinRM remote operations, with an encrypted credential vault whose login and execution scripts never accept plaintext passwords.
dsh-remote-shell
A DSH (DeepSeek Harness) plugin that bundles the remote-shell skill: secure SSH / SFTP / Telnet / WinRM remote operations with an encrypted credential vault (Fernet + PBKDF2-HMAC-SHA256).
中文说明见 README.zh.md。
Installation
From the npm registry (once published):
dsh plugin --profile web add dsh-remote-shell
From a local checkout (development / testing):
dsh plugin --profile web add /path/to/dsh-remote-shell
Then restart dsh web for the plugin to take effect. The skill appears in the skill catalog as remote-shell (provider dsh-remote-shell, source bundled).
Features
The bundled skill provides:
- Remote command execution over SSH / WinRM / Telnet: single commands, batch execution, script execution, remote system information, and health checks.
- SFTP file transfer: upload, download, and directory listing.
- Encrypted credential vault: login/execution scripts never accept plaintext passwords (there is no
-pflag); credentials are always fetched from the encrypted vault. Usecredctlto add, list, update, and remove credentials. - Safety interception: mutating commands are blocked by default and only run after explicit user confirmation (
--auto-confirm).
How it works
The plugin is a Cordis plugin that injects a single skills provider. On load it scans the bundled skills/ directory for SKILL.md files, parses each file's YAML frontmatter, and registers the skill with the host's skill registry (rank 600, source bundled). The provider is immutable: it performs no file watching or polling, and a missing or malformed skill degrades gracefully (skipped, never thrown).
Line-ending policy
The bundled skill files are copied verbatim from the source skill, which uses mixed line endings. .gitattributes pins each file to its source line ending so checkouts (under any core.autocrlf setting) reproduce the source bytes exactly. SKILL.md is pinned to LF because the provider's frontmatter detection requires exact --- lines — a CRLF checkout would make the provider skip the skill entirely.
Development
Run the unit tests (Node.js built-in test runner, no extra tooling):
node --test
Dependencies
The skill's scripts are written in Python 3 and require third-party libraries such as paramiko (SSH/SFTP) and pywinrm (WinRM). Install them on first use following the instructions in the skill's SKILL.md.
Security Notice
Installing this plugin runs third-party code on your machine. The credential vault master password is managed by you; the plugin does not store or transmit it.
License
MIT — see LICENSE.
Compatibility
Versions
| Latest version | Published | Size |
|---|---|---|
| 0.1.0 | — | — |
Comments
Loading…
Similar plugins
Remote-SSH-style workspaces: turn an SSH host and a remote directory into a native DSH workspace; the agent operates the remote filesystem directly via 12 rw_* tools (SFTP/exec), with workspace-confin
★ 0
dsh plugin --profile web add dsh-rwDSH plugin: password SSH into a remote host — a natural-language tool (connect/exec/close/status) over a persistent ControlMaster session, plus a browser terminal panel (right-side floating) with a real PTY over WebSocket.
★ 0
dsh plugin --profile web add dsh-ssh-shellSSH remote execution set: give a session an ssh:// workspace and every file, command, and shell operation runs on the remote host.
★ 0
dsh plugin --profile web add dsh-ssh-remoteby weisiren000
SSH remote ops for DSH: pair servers over SSH or a one-time-code remote-hostd, then run commands, manage background jobs, and read or write remote files with reviewable changes (host_pair/host_bash/ho
★ 3
JavaScript
Aug 17, 2026
dsh plugin --profile web add dsh-remote-ssh-opsby flymysql
Remote-work assistant for DeepSeek Harness (DSH): connect SSH (key or password), pick a remote workspace, operate with rw_* tools, and SFTP-mirror it into a real local DSH workspace.
★ 199
MIT
JavaScript
Oct 28, 2026
dsh plugin --profile web add dsh-remoteSSH session manager for DeepSeek Harness: saved profiles, agent ssh_run, interactive terminals, and SFTP with secrets kept in the DSH credential center.
★ 1
MIT
JavaScript
dsh plugin --profile web add dsh-remote-ssh-tools