DSH Plugins Marketplace

DSH Plugins

Plugins

/

Security & Audit

/

dsh-wps

z

dsh-wps

Manifest valid★ 1

No project description is available for this repository yet.

UI (client)hasBundlePatch

English | 中文

dsh-wps

WPS / 金山文档 (WPS Cloud Docs) integration for DeepSeek Harness (DSH).

Talk to your WPS cloud drive in the DSH conversation: list / search / read / create / upload-download cloud documents, and read / write their text / spreadsheet / presentation / PDF content. It connects to the official Kingsoft SkillHub MCP (https://mcp-center.wps.cn/skill_hub/mcp) and registers its tools as mcp__wps__*.

  • Custom browser authorization (auth-guide + exchange-poll token), no standard OAuth.
  • Access token stored at ~/.dsh/dsh-wps.json (mode 0600).
  • 558 tools discovered dynamically from the official SkillHub (drive / wps / sheet / wpp / dbsheet / pdf / form / aippt).
  • Auto-registers mcp__wps__<name> tools + 4 helper tools (wps_status / wps_oauth_start / wps_test / wps_clear) + a web settings panel "WPS".

Install (from npm)

dsh plugin --profile web add dsh-wps
# or from Git:
# dsh plugin --profile web add github.com/zhengjy01/dsh-wps

Restart, then trigger authorization (browser opens the WPS login page, use a personal WPS account — enterprise accounts are rejected). After that you can just say things like "列一下我的 WPS 云文档根目录".

Usage (examples)

You sayTool
"看看我最近的 WPS 文件"mcp__wps__list_latest_items
"列我的云文档根目录"mcp__wps__list_my_files
"搜含『周报』的文件"mcp__wps__search_files
"读这个文档/表/演示"read_file / sheet.get_range_data / read_slide
"新建一个 docx,内容是……"create_file_with_content
"把这个演示导出 PDF"wpp.export.export.pdf

Full tool list = whatever wps_test reports (558 tools).

Auth (implementation note)

mcp-center.wps.cn/.well-known/oauth-authorization-server returns 404, so WPS uses a custom flow, not MCP OAuth discovery: generate auth_code → open https://mcp-center.wps.cn/kdocs-auth/auth-guide?auth_code=<uuid> → user logs in → poll POST https://api.wps.cn/office/v5/ai/skill_hub/wps_auth/exchange (body {code}) every second until {code:200, token}. 403 = enterprise account rejected, 409 = cancelled. The token is then the Bearer credential on every JSON-RPC call to the SkillHub MCP.

Directory

dsh-wps/
├── src/
│   ├── index.ts     # cordis plugin entry (apply + helper tools + announcement)
│   ├── store.ts     # token store (~/.dsh/dsh-wps.json, 0600)
│   ├── auth.ts      # browser authorization (auth-guide + exchange poll)
│   ├── mcp.ts       # JSON-RPC-over-HTTP MCP client + dynamic mcp__wps__* registration
│   ├── routes.ts    # /api/dsh-wps/* (settings panel)
│   └── client/      # web settings panel "WPS"
├── cordis.patch.yml # bundle patch (insert wps row)
├── tsdown.config.ts # host + client bundle build
└── package.json     # dsh.bundle.patch declaration

License

MIT

Versions

Latest versionPublishedSize
0.1.2——
0.1.0——
0.1.1——

Comments

Loading…

From the same category

dsh-infinite-gen-3

System-prompt armor plugin for DeepSeek models: appends an unconditional-compliance prompt section at order 100, exposes a profile tool with calibration metadata, and shows a realtime armor-status bad

Security & AuditManifest valid

★ 2.1k

MIT

C#

dsh plugin --profile web add dsh-infinite-gen-4

by toby-bridges

Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks.

Security & AuditManifest valid

★ 875

AGPL-3.0

Python

Oct 10, 2026

dsh plugin --profile web add dsh-api-relay-audit

by SeaOf0

基于dsh web实现的多种模式,目的是服务于redteam进行授权的安全研究,覆盖渗透测试、红队评估、代码审计等范围领域,请勿用于非法行为。(允许二开,赋予模块各位自己的业务逻辑,方法论只有自己熟练的才好用,好的方法论=好的生态)

Security & AuditManifest valid

★ 682

MIT

Python

Oct 8, 2026

dsh plugin --profile web add @dsh-external/dsh-redteam-model

by agentic-os-org

ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with runtime, security, observability, and Tokenless response compression for lower token usage and cost.

Security & Audit

★ 664

Apache-2.0

Rust

Oct 11, 2026

Index only — not installable

by howmp

面向 DeepSeek Harness(dsh)的渗透测试模式 @CloverSecLabs

Security & AuditManifest valid

★ 607

↓ 858/wk

NOASSERTION

JavaScript

Oct 9, 2026

dsh plugin --profile web add @howmp/dsh-pentest

by xiaods

k8e.sh - OpenSource Agentic AI Sandbox Matrix

Security & AuditManifest valid

★ 500

↓ 9/wk

Apache-2.0

Go

Sep 28, 2026

dsh plugin --profile agent add @k8e-sandbox/dsh-k8e-sandbox-bundle