awesome-dsh-plugins
其他 活跃维护

awesome-dsh-plugins

coolbat/awesome-dsh-plugins

收录经证据核验的各类扩展插件,依托不可变提交留存全量核验依据,提供中英文双语检索能力,插件状态永久可溯源,方便开发者快速定位适配需求的扩展工具。

2
Stars 标星
0
Forks 分支
2
Watchers 关注
1
Open Issues
TypeScript
主要语言
MIT
开源协议
929 KB
仓库大小
1 个月前
最后推送
一键安装扩展 / 插件指令
dsh plugin --profile web add github:coolbat/awesome-dsh-plugins
git clone https://github.com/coolbat/awesome-dsh-plugins.git
git clone git@github.com:coolbat/awesome-dsh-plugins.git
README.md main

Awesome DSH Plugins — an evidence-led directory with fixed source snapshots

English · 简体中文

Awesome DSH Plugins

An independent, evidence-led directory for
DeepSeek Harness plugins.
Every listed entry was inspected at an immutable commit for its bundle
manifest, referenced patch, license signals, package identity, lifecycle
scripts, and material capability signals.

This is a compact reviewed subset, not a mirror of every repository carrying
the dsh-plugin topic. It complements the broad
Awesome DeepSeek Harness Plugin
discovery list with fixed-source evidence and an explicit hold queue.

[!CAUTION]
A structural review is not a security audit or a runtime compatibility test.
DSH plugins execute third-party code with your permissions. Read the source,
inspect lifecycle scripts, and prefer immutable versions before installing.

Website

This repository is also the source for the bilingual static website. The site,
generated README catalogs, plugin detail pages, review log, sitemap, and counts
all read from data/plugins.json, so a reviewed catalog
change and its presentation ship in the same commit.

npm install
npm run dev

Production verification uses npm run check && npm run build. The static
export is written to out/ and is ready for Cloudflare Pages. See the
deployment guide. No AI, authentication, database,
payment, or third-party plugin execution is part of the website.

Automatic candidate discovery

GitHub Actions runs bounded GitHub API discovery every six hours and a full
query pass weekly. It resolves each matching repository to a 40-character
commit, inspects package.json and the referenced patch path without cloning,
installing, or executing third-party code, and opens a review PR only when the
candidate queue materially changes. A separate bot branch stores the incremental
checkpoint, so empty runs do not create or churn review PRs. Candidates are
never promoted into data/plugins.json automatically.

The query set and request budgets live in
config/discovery.json. A maintainer can also run
GITHUB_TOKEN=... npm run discover -- --dry-run locally.

What is different here

  • Immutable evidence: every decision links to a full 40-character commit.
  • Native bundle check: package.json must declare dsh.bundle.patch and
    the referenced patch must exist.
  • Separate facts: structure, license, identity, compatibility, lifecycle,
    and capability signals are not collapsed into a single “safe” score.
  • Visible uncertainty: incomplete or conflicting candidates stay in the
    hold queue instead of receiving an install recommendation.
  • No popularity theater: stars and topic membership are discovery hints,
    not proof of trust or compatibility.

Status model

Status Meaning
Reviewed Native bundle structure was confirmed at the linked commit. Runtime behavior and security remain unverified.
Held DSH-oriented candidate with a specific identity, structure, or compatibility blocker.
Excluded Fixed-source evidence says it is not currently eligible as a native DSH bundle.

Catalog

Snapshot: 2026-08-21 · 606 candidates · 451 reviewed · 154 held · 1 excluded

Reviewed native bundles

UI & Workspace

  • DSH Progress Viz · 2008924/dsh-progress-viz@0be31d8 — A headless-session progress plugin that writes live stage and timeline JSON for a local dashboard.

    • Evidence: manifestpatch · Identity: dsh-progress-viz-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-events filesystem-write progress-data headless local-install · Review: The nested plugin documents a local profile install and rc.6 session peer; no event stream or progress file was read or written.
  • DSH WSL Workspace · 6Mikao9/dsh-wsl-workspace@89905a8 — Workspace support for using DeepSeek Harness across Windows and WSL paths.

    • Evidence: manifestpatch · Identity: dsh-wsl-workspace
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem cross-platform-paths · Review: Broad DSH peer ranges leave runtime compatibility unknown.
  • DSH Toolbox Web · AbcdefgXW/dsh-toolbox-web@322c260 — A Web toolbox for session, trash, workspace-directory, search, preset, configuration, archive, and scheduled-heartbeat management.

    • Evidence: manifestpatch · Identity: dsh-toolbox-web
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data filesystem-write scheduled-tasks external-messaging client-injection · Review: The public package maps to this repository; session and configuration writes plus optional IM heartbeat delivery are visible and were not executed.
  • DSH Client UI Aqua Unofficial · afrel1024/dsh-client-ui-aqua-unofficial@a175ff4 — Adds a configurable glassmorphism theme, animated surfaces, and wallpaper controls to DSH Web.

    • Evidence: manifestpatch · Identity: dsh-client-ui-aqua-unofficial
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: client-injection theme browser-storage dynamic-wallpaper settings-write · Review: The fixed source and npm identity both expose 1.4.1 from the same repository; no browser effects, settings writes, wallpaper loading, or build was executed.
  • DSH Effort · AI-Galaxy-GPU/dsh-effort@edbb063 — Adds a Web control for selecting the current session model's supported reasoning-effort level.

    • Evidence: manifestpatch · Identity: dsh-effort
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data model-selection client-injection local-storage · Review: The fixed source uses session model RPCs and browser storage; the repository has no detected license file and declares no DSH peer range.
  • DSH Sound · AI-Galaxy-GPU/dsh-sound@f5f25dc — Plays configurable browser sounds for task completion, approvals, questions, plan review, blocking, and failures.

    • Evidence: manifestpatch · Identity: dsh-sound
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-events local-file browser-storage client-injection · Review: The fixed source stores configuration in localStorage and audio in IndexedDB; the documented npm target currently exposes no published version and no runtime behavior was tested.
  • DSH Update Checker · Airmetro/dsh-update-checker@bea57c0 — Auto-check DeepSeek Harness and third-party plugin updates, notify in the Web GUI, one-click update with backup/rollback and restart watchdog.

    • Evidence: manifestpatch · Identity: dsh-update-checker
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Sidor UI · AKI2253/Sidor_UI@89fbabe — SIDOR — DeepSeek Harness 控制台皮肤:开屏动画 / 星野 / 余额徽章 / 设置页特效 / 低余额警告体系(Sidor 附属插件平台)

    • Evidence: manifestpatch · Identity: sidor-ui
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Kanban · alpacachen/dsh-kanban@9f6de7d — A kanban board plugin for DeepSeek Harness: a 'Board' tab in conversations plus 13 kanban_* AI tools, per-workspace isolation and disk persistence. Built with React, TypeScript, dnd-kit, shadcn/ui and Tailwind CSS.

    • Evidence: manifestpatch · Identity: @alpacachen/dsh-kanban
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Desktop · anywhere-labs/deepseek-harness-desktop@6074088 — An Electron desktop shell composed as a DSH Cordis plugin with terminal, profile, diagnostics, package, and update surfaces.

    • Evidence: manifestpatch · Identity: dsh-plugin-desktop
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: subprocess external-network credentials client-injection process-control system-prompt prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Context · bowenliang123/dsh-context@aca38b2 — A context insight panel for request history, compactions, injections, model switches, and composition changes.

    • Evidence: manifestpatch · Identity: dsh-context
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepare · compatibility unknown
    • Signals: session-data client-injection browser · Review: The host/client bundle structure is confirmed; the prepare hook invokes Husky and the package declares no DSH peer range.
  • DSH Client UI Skins · caoyiwei850/dsh-client-ui-skins@21ad7f5 — Adds built-in and custom-image skins to the DSH Web client with a settings surface.

    • Evidence: manifestpatch · Identity: dsh-client-ui-skins
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: client-injection theme browser-storage settings-write · Review: The fixed source and npm package both expose 0.1.10, although npm metadata has no repository mapping; no skin rendering, storage, or settings write was executed.
  • DSH Stop Server · caozhikun/dsh-stop-server@baa9b9c — Adds a Web action that calls a host shutdown route to stop the DSH process and close the current interface.

    • Evidence: manifestpatch · Identity: dsh-stop-server
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: process-exit web-route client-injection · Review: The fixed host source registers a shutdown route with appExit, process.exit, and SIGTERM fallbacks; the repository has no detected license file and shutdown was not executed.
  • Captain DSH Web UI All · CAPTAIN1275/dsh-ui-web@04422dd — An aggregate Web UI bundle for task boards, Git views, pets, remote access, live statistics, settings, and bundled skins.

    • Evidence: manifestpatch · Identity: @captain1275/dsh-web-ui-all
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: aggregate-scope remote-access filesystem-write git client-injection · Review: The public aggregate identity maps to this repository and represents its component candidates; broad remote, file, Git, session, and UI surfaces were not executed.
  • DSH Pomodoro · causebefore/dsh-pomodoro@5ce97fa — Adds configurable focus and break timers with sidebar access and a draggable DSH Web panel.

    • Evidence: manifestpatch · Identity: dsh-pomodoro
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: client-injection settings-write timer browser-ui prepublish-check · Review: The fixed source and npm identity both expose 0.4.0 from the same repository; no timer, panel, settings, or prepublish behavior was executed.
  • DSH TUI · ccch1mneyyy/dsh-TUI@ee83376 — A full-screen terminal client with live status, streaming thoughts, tools, approvals, and filesystem access.

    • Evidence: manifestpatch · Identity: @deepseek-harness-tui/dsh-tui
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: terminal subprocess filesystem credentials broad-agent-surface · Review: The bundle exposes a broad agent surface; structure confirmation is not a runtime endorsement.
  • DSH Cerrda Theme · Cerrda/dsh-cerrda-theme@7390edf — A dark rose and purple visual theme for DSH Web with a custom composer and animated background.

    • Evidence: manifestpatch · Identity: dsh-cerrda-theme
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: web-theme client-injection webgl npm-package · Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no CSS, fonts, animation, or WebGL behavior was loaded.
  • DSH Sticky Notes · charrywhite/dsh-sticky-notes@e2653fc — A persistent sticky-note panel with host-side JSON storage, browser UI, and model-facing note tools.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-write web-route client-injection model-tools private-package · Review: Local-link and source installation are documented for the private package; note storage, HTTP routes, and model tools were not exercised.
  • Castorice Theme · chemicalcat250/dsh-theme-castorice@c55e467 — Applies a violet dark Castorice-inspired visual theme to the DSH Web interface.

    • Evidence: manifestpatch · Identity: dsh-theme-castorice
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection theme browser-storage · Review: GitHub-source installation is documented and the client code injects theme styles and browser preferences; it was not loaded in a browser.
  • DSH Security Doctor · ChenChen913/dsh-security-doctor@abaa3f5 — One-click local security checkup for the DeepSeek Harness Web UI: a sidebar button that runs read-only checks (!!js config, third-party plugins, credential file permissions, instruction files, endpoint config, protection services) and shows a severity-graded report. / DSH 安全医生:一键本机安全体检插件,只读检查、分级报告、不外发数据。

    • Evidence: manifestpatch · Identity: dsh-security-doctor
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH DeepSeek Balance · Choi-Peng/dsh-deepseek-balance@45d7444 — Displays DeepSeek account balance and editable warning thresholds in the DSH Web sidebar.

    • Evidence: manifestpatch · Identity: @choi-p/dsh-deepseek-balance
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: account-balance credentials external-network settings-write web-ui · Review: The fixed source is 0.3.2 while npm exposes 0.3.1 from the same repository; balance requests and profile setting writes were not executed.
  • DSH DeepCompute · cipher2026/dsh-idle-deepcompute@619dbef — A terminal-styled idle laboratory game embedded as a full-width DSH Web page.

    • Evidence: manifestpatch · Identity: dsh-deepcompute
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: web-ui idle-game client-injection github-only · Review: The repository documents a commit-pinnable GitHub install; no client module, game state, or browser storage behavior was loaded.
  • DSH Browser Notify · classfieldseason-cmd/dsh-notify-plugin@8f386ca — Shows browser desktop notifications when a DSH conversation turn completes.

    • Evidence: manifestpatch · Identity: dsh-browser-notify-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: browser-notification session-events client-injection · Review: The public package identity matches this repository and the client listens for session completion before calling the browser Notification API; no notification was triggered.
  • DSH Wallpaper · codeMonkey-Pine/dsh-wallpaper@6ab97b2 — Scans a local Wallpaper Engine library and exposes wallpaper selection, configuration, and rendering in DSH Web.

    • Evidence: manifestpatch · Identity: dsh-wallpaper
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: filesystem-read subprocess local-http client-injection model-tools · Review: The fixed source and npm identity both expose 0.1.2 from the same repository; no library scan, preview process, route, browser rendering, or agent tool was executed.
  • DSH Web UI Skin · crack-time/dsh-web-ui-skin@1124dea — Adds a pastoral cottage wallpaper and frosted-glass presentation to the DSH Web client.

    • Evidence: manifestpatch · Identity: @crack/dsh-web-ui-skin
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection theme browser-ui github-only · Review: A pinned root Git source identity exists while npm has no matching scoped package; no build, asset load, DOM injection, or browser rendering was executed.
  • DSH Glassmorphism · czw63/dsh-glassmorphism@e1f0466 — Adds a mobile-aware liquid-glass theme with optional wallpaper, blur, and refraction effects.

    • Evidence: manifestpatch · Identity: @local/dsh-glass-theme
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection theme browser-storage · Review: A local-file installation path is documented and the client stores visual preferences in the browser; no style bundle was loaded.
  • DSH Delete Session · dream12347/dsh-delete-session@e0f052a — A Web session manager for trash, restore, permanent deletion, archived sessions, activity statistics, pause, and log-folder access.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-data filesystem-delete archive-registry client-injection browser-storage · Review: Pinned GitHub installation and rc.6 peers are documented; destructive session and workspace actions remain user-triggered and were not executed.
  • DSH Popout Sidebar · e2mcc/dsh-popout-sidebar@7485171 — Adds an artifact sidebar that can open its content in a larger browser tab.

    • Evidence: manifestpatch · Identity: dsh-popout-sidebar
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection browser-ui external-window github-only · Review: A pinned root Git source exists while npm has no package; no build, browser panel, artifact rendering, or popout was executed.
  • DSH Unarchive · edfrey0044/dsh-unarchive@52a5194 — Restores archived DSH sessions through a command and tool that update the global archive registry.

    • Evidence: manifestpatch · Identity: dsh-unarchive
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: session-data archive-registry workspace-state · Review: Git-source installation is documented and the bundle removes session identifiers from the global archive set; no registry or session state was changed.
  • DSH Balance · eka3os/dsh-balance@0ffde6c — DeepSeek Harness Web plugin that shows the API balance beside Settings in the sidebar.

    • Evidence: manifestpatch · Identity: @ek3os/dsh-balance
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Notes · ErrorLst/dsh-notes@1e0bda1 — Adds a full-height notes rail with session cards and global or workspace todo items.

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-notes
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection session-data workspace-data browser-ui github-only · Review: The root manifest is private and npm has no matching package, but a pinned root Git bundle exists; no note persistence, session card, or browser UI was executed.
  • DSH OpenCode Palette · FeatherHunter/dsh-opencode-palette@4c3660a — Adds a persistent selector for dozens of OpenCode-inspired color themes in the DSH Web interface.

    • Evidence: manifestpatch · Identity: dsh-opencode-palette
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection theme browser-storage · Review: The fixed source version is older than the observed registry release but maps to the same public identity; theme injection and persistent browser settings were not executed.
  • DeepSeek Harness Wallet · feibi-mochi/deepseek-harness-control-center@1a3b34b — A local-first account, usage, recharge, completion, layout, and session control center for DSH Web.

    • Evidence: manifestpatch · Identity: deepseek-harness-wallet
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: account-balance usage-accounting credentials external-network session-control web-ui · Review: The fixed source and npm identity both expose 0.1.4 from the same repository; no credential request, accounting, recharge link, notification, or session action was executed.
  • DSH Balance Widget · FeilongRong/dsh-balance-widget@79cd46d — Sidebar balance widget for the DSH Web GUI: a "余额" button in the sidebar footer opens a panel showing each provider's account balance (DeepSeek live query, MiniMax / Qwen / SCNet console links, Ollama local). · DSH Web GUI 侧边栏余额插件:侧边栏底部的「余额」按钮弹出面板,展示各服务商账户余额(DeepSeek 实时查询,MiniMax / 百炼 / SCNet 控制台链接,Ollama 本地)。

    • Evidence: manifestpatch · Identity: @feilongrong/dsh-balance-widget
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH UI Crystal · gityanglijun/dsh-ui-crystal@37e321c — Adds a blue-violet Crystal theme and whale-girl background to the DSH Web shell.

    • Evidence: manifestpatch · Identity: dsh-ui-crystal
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection theme large-assets browser-ui github-only · Review: The package declares MIT but no repository license file or npm package was found; no build, asset load, DOM injection, or browser rendering was executed.
  • StyleVault · GptsApp/dsh-stylevault@26eee2d — A theme vault with configurable styles and shareable appearance packs for DSH Web.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: theme client-injection browser-storage github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Remote QR Button · huaxiren6/dsh-remote-qr-button@8427d46 — Floating phone-pairing QR button for the DSH WebUI. Companion UI for dsh-remote-link: opens its /qr pairing page in an in-app overlay.

    • Evidence: manifestpatch · Identity: dsh-remote-qr-button
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Clean Desktop Shell · Icather/dsh-clean-desktop-shell@352820e — Clean desktop shell for DeepSeek Harness (DSH) as a DSH plugin — reuses your web profile, tray/single-instance/auto-launch, zero visual changes. DSH 插件形态的纯净桌面壳:复用现有 web profile,托盘管理后端,零视觉改造。

    • Evidence: manifestpatch · Identity: dsh-clean-desktop-shell
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH OMC TUI · ipromise2021/dsh-omc-tui@d2307dc — A keyboard-first terminal interface that composes DSH sessions, approvals, jobs, tools, skills, and model selection.

    • Evidence: manifestpatch · Identity: dsh-omc-tui
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: terminal-ui session-control approvals model-tools profile-overrides github-only · Review: The patch replaces several base tool and prompt rows to compose the TUI; no terminal, profile override, session, approval, or tool was run.
  • DSH RPG Workstation · Jay-R-J/dsh-rpg-workstation@84fc0de — Adds conversation XP, levels, achievements, streaks, and a floating RPG dashboard to DSH Web.

    • Evidence: manifestpatch · Identity: dsh-rpg-workstation
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: gamification session-events filesystem-write web-ui npm-package prepublish-build · Review: The fixed source matches npm 0.3.0; no build, session event, XP state, filesystem write, or dashboard rendering was executed.
  • DSH Session Admin · Jemius/dsh-session-manager@191a1f3 — Adds archive, restore, export, and permanent deletion controls for DSH sessions.

    • Evidence: manifestpatch · Identity: dsh-session-admin
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: session-archive session-delete data-export web-ui prepare-build repository-renamed · Review: GitHub confirms dsh-session-manager redirects to the same repository ID now named dsh-session-admin; the fixed source is 0.1.2 while npm exposes 0.1.3, and no session mutation was executed.
  • DSH Balance Bubble · Jescoi/dsh-balance-bubble@dbfaef5 — A persistent floating DeepSeek account-balance bubble backed by a host endpoint.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: account-balance credentials local-web-server client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • La Feng UI · JimingYang25/Lafeng-UI-A-snazzy-personalized-custom-UI-plugin-for-DeepSeek-Harness-Cordis-.@bfd81d8 — A customizable Web UI pack with skins, animated wallpapers, music, audio visualization, and personas.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: theme audio client-injection browser-storage persona · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Survey · jinhuang712/dsh-survey@9f36ef1 — A model tool and rich Web form for multi-question surveys, skips, Markdown answers, and recaps.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: model-tools interactive-form session-data client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Strata · jsdvjx/dsh-strata@e2f8585 — Session strata for the DeepSeek Harness Web GUI: the transcript's scrollbar becomes a to-scale, colour-coded map of the whole run — user messages emphasised, clickable anchors, auto-loading history, and a hover deck of every prompt in the session.

    • Evidence: manifestpatch · Identity: dsh-strata
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Memes · kagura-agent/dsh-memes@68a528d — Lets agents select reaction media by semantic tags and render it in DSH conversations.

    • Evidence: manifestpatch · Identity: dsh-memes
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: media-picker model-tools external-media web-ui github-only · Review: Plugin code is MIT but reaction media is fetched from a separate library under its own source rights; no tag fetch, selection, or media render was executed.
  • DSH App · Karbo123/DSH-EvoResearch@ea6d4df — EvoResearch 自定义浏览器表面 bundle:复用 DSH host 引擎(dsh-base 的全部服务与工具),自建前端工作台(不加载官方 ui-* 外壳,替换官方 dsh-web-app 表面)

    • Evidence: manifestpatch · Identity: @evoresearch/dsh-app
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection database system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Bottom Bar · kc0ed/dsh-bottom-bar@01d8433 — A configurable input-footer statistics row with cost estimates and a persistent local usage ledger.

    • Evidence: manifestpatch · Identity: @kc0ed/dsh-bottom-bar
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: token-meter cost-estimation browser-storage client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH WhaleGirl · KLnormal/dsh_whalegirl@6cf1b30 — A desktop-native animated companion driven by DSH session events.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package SEE LICENSE IN ASSET_LICENSE.md · lifecycle none · compatibility unknown
    • Signals: desktop-app session-data audio subprocess external-model-download · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Workspace Drag · lanscer/dsh-workspace-drag@d134d9c — DSH Web UI plugin — drag a conversation onto any workspace in the sidebar to organize it. / DSH Web UI 插件:在侧边栏把对话拖到任意工作区即可归类整理,可在设置页开关。

    • Evidence: manifestpatch · Identity: dsh-workspace-drag
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Bell Notify · Laplace-bit/dsh-bell-notify@943e178 — Synthesized Web Audio bells and status cues for agent lifecycle events.

    • Evidence: manifestpatch · Identity: dsh-bell-notify
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: audio agent-events client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Stats HUD · lauytgary/dsh_hud_plugin@e3285fc — Sci-fi HUD: turns the session stats line into game-style level bars, a speedometer and a rolling token counter.

    • Evidence: manifestpatch · Identity: dsh-stats-hud
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Client UI Android · LeMonXi-i/dsh-client-ui-android@2dccd80 — Adds Android detection and a touch-first responsive layout to the DSH Web interface.

    • Evidence: manifestpatch · Identity: dsh-client-ui-android
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: mobile-layout android client-injection responsive-ui github-only · Review: The fixed source documents npm and GitHub installation but npm has no matching package; no user-agent detection, layout mutation, or browser rendering was executed.
  • DSH Keyboard · lhf6623/dsh-keyboard@4ecb1b7 — An on-screen keyboard and mouse visualizer that highlights live input events.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: input-events client-injection keyboard-visualizer github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Neu Theme · Lhy723/dsh-neu-theme@c6ecbe4 — A light and dark neumorphic theme for DSH Web.

    • Evidence: manifestpatch · Identity: dsh-neu-theme
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: theme client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Prompt Recall · liguanyu/dsh_PromptRecall@6040210 — Codex-style up and down history recall for the Web prompt input.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: input-history client-injection browser-storage · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • My Better DSH · lilwhich/my_better-dsh@b903e95 — A beginner-oriented Web bundle combining file navigation, session tools, UI packs, checkpoints, and global settings.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: aggregate-bundle filesystem-write session-data client-injection configuration-edit · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Pelican · Little-Star888/dsh-pelican@f5bb404 — Adds an animated pelican cyclist and global message-status indicator to DSH Web.

    • Evidence: manifestpatch · Identity: dsh-pelican
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection animation session-state browser-ui · Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no animation, message observation, session state, or browser rendering was executed.
  • DSH Session Rewind · LiuJunheng/DeepSeekHarnessGreen@b352856 — 在 WebUI 设置页可视化分析会话(逐回合/错误统计),并支持按回合「回退」——从选定回合之后派生干净的续接会话(官方 session.fork),等效于移除失败消息后继续对话

    • Evidence: manifestpatch · Identity: dsh-session-rewind
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Balance · lynnss-ai/dsh-balance@685bb40 — Real-time DeepSeek API balance viewer: Host query via curl, browser UI in the settings trigger row

    • Evidence: manifestpatch · Identity: @lynnss-ai/dsh-balance
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: external-network credentials client-injection process-control prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Frosted Glass · makuralymi/dsh-webUI-Glass-Theme@9822e4a — A global frosted-glass theme with animated light/dark switching and scheduling.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
    • Signals: theme client-injection timer github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Chat Rail · Max-Null/dsh-chat-rail@a75058b — Adds a scroll-aware right-side message navigation rail to DSH conversations.

    • Evidence: manifestpatch · Identity: @max-null/dsh-chat-rail
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: conversation-ui session-projection client-injection filesystem-read · Review: The fixed source, patch, licenses, exact npm gitHead and documented install identity were reviewed statically; conversation UI behavior was not run.
  • DSH CoT Summarization · MeowLynxSea/dsh-cot-summerization@dd69071 — Hides raw reasoning and displays a summary generated through a configurable Chat Completions endpoint.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: reasoning-data external-network credentials model-request client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Sticky Note · Meredith2328/dsh-sticky-note@ebabb6c — A Web sticky-note panel that saves notes and TODO items into an archive directory.

    • Evidence: manifestpatch · Identity: dsh-sticky-note
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: filesystem-write persistent-data client-injection · Review: The host and Web client faces are structurally confirmed; wildcard DSH peers and persistent note writes were not runtime-tested.
  • DSH Visualize · Nagi-ovo/dsh-visualize@e3254f7 — In-conversation generative UI with streaming interactive HTML cards and sandboxed rendering.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
    • Signals: github-only dynamic-content sandbox · Review: The package is private; only GitHub-source evidence was observed.
  • DSH Simplified Chinese UI · ngk3pori/dsh-zh-cn-ui@ea388ec — Localizes DSH browser interface text into Simplified Chinese through client-side data and DOM translation.

    • Evidence: manifestpatch · Identity: dsh-zh-cn-ui
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: localization dom-mutation client-injection manual-git-install · Review: The fixed source, patch, licenses and documented Git clone installation identity were reviewed statically; browser translation code was not run.
  • DSH Pet Whale · nzl153/dsh-pet-whale@952551a — A Web desktop whale pet whose animation reacts to agent state.

    • Evidence: manifestpatch · Identity: pet-whale
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-pet agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Annotation · omdsh-dev/dsh-annotation@0b0ceb6 — Adds numbered annotations to selected assistant text and carries them into the next message.

    • Evidence: manifestpatch · Identity: @omdsh-dev/dsh-annotation
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: client-injection conversation-data · Review: The Web client injection and native bundle row are fixed-source confirmed; no DSH package peer range establishes runtime compatibility.
  • DSH Better Sidebar · omdsh-dev/DSH-better-sidebar@5d2d6e5 — A sidebar workbench with file editing, terminal, Git, media, and extensible tabs.

    • Evidence: manifestpatch · Identity: dsh-better-sidebar
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: terminal filesystem-write git native-build remote-installer · Review: Direct package installation exists, but remote installer scripts and native builds warrant review.
  • DSH GenUI · omdsh-dev/dsh-genui@0e756ef — Interactive inline UI for layouts, charts, forms, quizzes, Mermaid, 3D scenes, and action events.

    • Evidence: manifestpatch · Identity: dsh-genui
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: git-source dynamic-content client-injection web-routes · Review: Git-source install and dynamic client rendering are explicit review surfaces.
  • Ostar DSH Left Sidebar · ostar999/ostar-dsh-left-sidebar@5399969 — DSH 左侧边栏工作区管理器:批量删除工作区 / 批量·单选删除会话 / 一键折叠·展开全部工作区和会话。官方工作区浏览器的全部功能与交互完整保留,管理功能以同尺寸按钮叠加在工作区按钮行。

    • Evidence: manifestpatch · Identity: ostar-dsh-left-sidebar
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Task Control · p2coder/dsh-task-control@a20e79b — Composer controls for pausing, resuming, or cancelling the active conversation task.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: task-control session-data client-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Harness UI Enhancer · Physicolor/harness-ui-enhancer@3357651 — Polishes DSH Web styles and exposes live controls for layout scale, typography, and chat width.

    • Evidence: manifestpatch · Identity: harness-ui-enhancer
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: client-injection theme settings-write browser-storage prepare-build · Review: The fixed source and npm identity both expose 0.4.0 from the same repository; no prepare build, style injection, setting write, or browser rendering was executed.
  • DSH Invest · Pikapiku09/dsh-invest-plugin@8260090 — A 股多角色投研流水线常规插件:invest_run 工具(选股/消息/深度/总判断 4 角色子代理 + Tushare 实时数据 + 三级缓存 + 报告归档),GUI 工具卡片(分阶段标签 + 推理过程 + SVG 图表内联渲染)。Hot-pluggable — mounted via profile package.json bundles + dsh.bundle.patch, no dsh source changes.

    • Evidence: manifestpatch · Identity: dsh-invest
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Personal Center · PolinniZhong/dsh-personal-center@047ed94 — DSH 个人中心:设置 →「个人」分区(个人资料统计 UI + 个性化自定义指令);统计数据待接入

    • Evidence: manifestpatch · Identity: dsh-personal-center
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection mcp · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH BigFish · QCYTSN/dsh-dafeiyu@fba38c1 — A desktop-native BigFish companion driven by DSH session events.

    • Evidence: manifestpatch · Identity: dsh-dafeiyu
    • Licenses: repo MIT / package SEE LICENSE IN ASSET_LICENSE.md · lifecycle none · compatibility unknown
    • Signals: desktop-app session-data audio subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • MyPet · qiqikuaidianpao/mypet@f9de0bf — A browser Tamagotchi-style pet that reacts to coding sessions, levels up, and collects skins.

    • Evidence: manifestpatch · Identity: mypet
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: desktop-pet session-data browser-storage client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Rhine Lab Theme · ReLuckyLucy/dsh_Rhine_Lab_themo@54c2f26 — A reversible Arknights Rhine Lab archive-terminal theme for DSH Web.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: theme client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Riesbri DSH TUI · riesbri/dsh-tui@e051d01 — Provides an in-process terminal interface over DSH agent, command, session, and approval services.

    • Evidence: manifestpatch · Identity: @riesbri/dsh-tui
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: terminal session-data approval-flow prepare-build workspace-dependencies · Review: The fixed source now declares repository metadata and both the TUI and renderer packages have public identities; no build or terminal interface ran.
  • DSH Task Chime · ruazero/dsh-task-chime@6575057 — Ring a real system sound when a DeepSeek Harness agent finishes a task OR needs your input: custom sounds, 4 intensity levels, auto escalation, and a settings card in the GUI.

    • Evidence: manifestpatch · Identity: dsh-task-chime
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Mobile · saya-ch/dsh-mobile@3ac054e — Adds mobile-oriented DSH Web surfaces and a secure local-network gateway for Android and browsers.

    • Evidence: manifestpatch · Identity: dsh-mobile
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · compatibility unknown
    • Signals: mobile-ui lan-access tls-certificate device-discovery client-injection prepack-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Workbench UI · seedaylight/dsh-workbench-ui@43777c9 — A workbench-style UI for DeepSeek Harness: task panel with six-stage pipeline, telemetry field, command console, dual light/dark themes, privacy mask for screenshots. | 为 DeepSeek Harness 打造的工作台式 UI:任务面板与六阶段流水线、遥测场、命令控制台、浅色/深色主题、截图隐私模式。

    • Evidence: manifestpatch · Identity: dsh-workbench-ui
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Network Mode · SeekTureWorld/dsh-network-mode@9397592 — Switch DSH between localhost (127.0.0.1) and LAN (0.0.0.0) bind from the Settings page (LAN access off by default), with a crypto.randomUUID polyfill for non-secure LAN origins.

    • Evidence: manifestpatch · Identity: dsh-network-mode
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Codex Pet · skr311/dsh-codex-pet@6aa7b86 — Imports sprite-sheet pets and renders them as agent-state-linked Web overlays.

    • Evidence: manifestpatch · Identity: dsh-codex-pet
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-pet image-assets agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Song Memory · songoao25/dsh-song-memory@5783750 — Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.

    • Evidence: manifestpatch · Identity: dsh-song-memory
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: external-network credentials client-injection database prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Worktime Board · spacexun2/dsh-worktime-board@8fe6243 — Daily, weekly, monthly, and academic-calendar work-time statistics with a cultivation-style progression system.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
    • Signals: time-tracking gamification client-injection browser-storage · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Message Index · stnt04/dsh-msg-index@8b9834b — A floating frosted control that indexes user messages and jumps to them in the current session.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: session-data message-navigation client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Frieren DSH Theme · SuperKSP/dsh_theme_Frieren@84276f9 — Applies a Frieren-inspired parchment, gold, magic-circle and petal theme to the DSH web interface.

    • Evidence: manifestpatch · Identity: dsh-client-ui-skin-frieren
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: theme client-injection visual-assets git-source-install · Review: The fixed source, patch, licenses and repository-specific Git install identity were reviewed statically; assets, animation and client injection were not run.
  • DSH Minecraft Theme · SuperLS-X/dsh-minecraft-theme@06863f0 — Minecraft 主题插件(DeepSeek Harness):方块纹理背景铺满页面、像素字体、MC 风格按钮与点击音效、纹理导入与管理、音乐播放器(16 首 Minecraft 原声 + 本地音乐文件夹)。

    • Evidence: manifestpatch · Identity: @superls-x/dsh-minecraft-theme
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Codex · syncended/deepseek-harness-openai-codex@4486d15 — OpenAI Codex (ChatGPT Plus/Pro) provider for DeepSeek Harness, with Web UI and CLI device-code OAuth login.

    • Evidence: manifestpatch · Identity: @syncended/dsh-codex
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Picture in Picture · syncended/deepseek-harness-picture-in-picture@591e7d1 — A picture-in-picture mini chat surface for DSH Web.

    • Evidence: manifestpatch · Identity: @syncended/dsh-pip
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: picture-in-picture session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH macOS Desktop · Taylor-Cat/dsh-macos-desktop@c56f308 — A retro System 7 and Mac OS 9 desktop shell containing chat, files, terminal, browser, docs, and knowledge views.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-shell terminal filesystem-read client-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Live2D Companion · Tisitan/dsh-live2d-companion@9e03a01 — Adds an AI-state web widget and optional always-on-top Live2D desktop companion.

    • Evidence: manifestpatch · Identity: dsh-live2d-companion
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: live2d desktop-pet client-injection desktop-window github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Pet Companion · ToBeWin/DSH-Pet-Companion@53fc630 — Adds animated local-only desktop pets to DSH Web using artwork bundled by the author.

    • Evidence: manifestpatch · Identity: @tobewin/dsh-pet-companion
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: desktop-pet bundled-media client-injection browser-storage prepack-build github-only · Review: The unpublished package documents a fixed GitHub source install and describes its bundled pet artwork as original; no build, media load, browser state, or animation was executed.
  • DSH Pet Nutri · uckkk/dsh-pet-nutri@83bef20 — 营养补充

    • Evidence: manifestpatch · Identity: dsh-pet-nutri
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Pet Pack · uckkk/dsh-pet-pack@3a9c606 — 宠物旅行清单

    • Evidence: manifestpatch · Identity: dsh-pet-pack
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Conversation Nav · UlaBe/dsh-conversation-nav@df424f6 — A right-edge drawer that lists user messages and jumps to their positions in the conversation.

    • Evidence: manifestpatch · Identity: @ulabe/dsh-conversation-nav
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data message-navigation client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Archived Chats · Ultronen/dsh-archived-chats@8a6912e — A settings page for browsing, searching, restoring, and deleting archived sessions by workspace.

    • Evidence: manifestpatch · Identity: dsh-archived-chats
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data archive-registry filesystem-delete client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Unarchive · uwu9039/dsh-unarchive@5f10e58 — An archived-session recycle bin with previews, restoration, and optional archive confirmation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data archive-registry filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Chatflow Rail · veritas501/dsh-chatflow-rail@485a978 — A left-side conversation-flow rail with position navigation and a docked previous-message card.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: session-data message-navigation client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Compact Activity · wallpap/dsh-compact-activity@6ef1278 — Codex-style one-line disclosures for reasoning and tool activity.

    • Evidence: manifestpatch · Identity: dsh-compact-activity
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: reasoning-data tool-activity client-injection prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Billing Community Bundle · Wanbinyu/dsh-billing@198e54d — Aggregates host-side billing projections and a DSH Web usage and cost interface.

    • Evidence: manifestpatch · Identity: dsh-billing-community-bundle
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: billing-data usage-accounting session-data filesystem-write client-injection github-only · Review: The repository provides a fixed GitHub aggregate bundle over local component packages; no build, session projection, ledger write, or browser UI was executed.
  • DSH Achievements · WJNCT55555/dsh-achievements@ce6ceb3 — A Web achievement gallery with toasts, trophies, dock integration, crossovers, and opt-in anonymous statistics.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: gamification client-injection browser-storage optional-telemetry · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Dock · Wntediluvian/dsh-plugins@7f6fe53 — Adds a persistent usage dock with provider balances and guarded restart or stop controls.

    • Evidence: manifestpatch · Identity: dsh-dock
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: provider-usage credentials external-network process-control subprocess filesystem-write client-injection · Review: The fixed source, package license file, bundle structure and monorepo Git-path install identity were reviewed statically; provider requests and process controls were not run.
  • DSH Model Balance · wycto/dsh-model-balance@79e0903 — Displays balances for configured model providers in a DSH Web sidebar panel.

    • Evidence: manifestpatch · Identity: @wycto/dsh-balance-panel
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: account-balance credentials external-network custom-endpoints web-route client-injection · Review: The fixed source and npm identity both expose 0.1.1 from the same repository; no credential resolution, provider request, custom endpoint, or browser panel was executed.
  • DSH Image Create · xiaoyuink/dsh-image-create@90ed40c — AI 生图 (image generation) plugin for the dsh web GUI: text-to-image and image-to-image through a configurable OpenAI-compatible endpoint, with multi-provider support, model discovery, and agent tool registration. 与 @xiaoyuink/dsh-image-vision 同系列的图像插件。

    • Evidence: manifestpatch · Identity: @xiaoyuink/dsh-image-create
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: filesystem external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Session Timeline · XiLuovo/dsh-session-timeline@55f3268 — A collapsible conversation timeline with scroll tracking, message jumps, and preview tooltips.

    • Evidence: manifestpatch · Identity: dsh-session-timeline
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-data message-navigation scroll-spy client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Deepseek Web · y-wi/dsh-deepseek-web@7ada18c — Unofficial DeepSeek Web LLM provider plugin for DeepSeek Harness. Lives in packages/plugin of the public workspace; npm tarball ships built lib/ and prebuilt WASM.

    • Evidence: manifestpatch · Identity: dsh-deepseek-web
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: credentials client-injection browser prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Fold · Yancey2023/dsh-fold@f1b5212 — Folds conversation turns and tool rows in the DSH web interface to reduce visual noise.

    • Evidence: manifestpatch · Identity: dsh-fold
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: conversation-ui client-injection session-data custom-install-script · Review: The fixed source, patch, licenses and GitHub-source install identity were reviewed statically; custom install scripts, tests and browser UI were not run.
  • DSH Enhance Workspace · yangshen830-eng/dsh-enhance-workspace@9f9fc69 — DSH web plugin: enhance the workspace panel with multi-directory (multi-root) workspaces — group several directories as one workspace, pick one when starting a conversation, and edit roots in place.

    • Evidence: manifestpatch · Identity: dsh-enhance-workspace
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Usage Stats · Ychris12138/dsh-usage-stats@8f33be3 — Token usage heatmap, provider balances, and subscription quotas for the dsh web GUI

    • Evidence: manifestpatch · Identity: dsh-usage-stats
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Omp Tui · yiran-ye/dsh-omp-tui@c10b6d7 — DeepSeek Harness native OMP-style terminal mode bundle

    • Evidence: manifestpatch · Identity: dsh-omp-tui
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection mcp process-control system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Wallpaper Share · YRN-playmaker/dsh-wallpaper_share@a271e7f — Synchronizes and shares wallpaper state through a DSH host and browser client bundle.

    • Evidence: manifestpatch · Identity: dsh-wallpaper_share
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: wallpaper external-network filesystem-write client-injection · Review: The fixed source, patch, licenses and GitHub-source install identity were reviewed statically; polling, routes, storage and client behavior were not run.
  • DSH Icon Theme · yzke/dsh-icon-theme@2e341d8 — Adds auto-detected and user-customizable icons to DSH settings and sidebar surfaces.

    • Evidence: manifestpatch · Identity: dsh-icon-theme
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: icon-theme settings-write filesystem-read client-injection prepare-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Context Panel · zhangxiang1993621/dsh-context-panel@aa2c80c — Displays skills, rules, and files used by the active conversation inside a layout pane.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data filesystem-read client-injection local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Web UI All · zhu1090093659/dsh-web-ui@5153e9a — An aggregate Web UI bundle combining task board, Git, terminal, remote UI, stats, pets, and skins.

    • Evidence: manifestpatch · Identity: @linxin666/dsh-web-ui-all
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepare · compatibility unknown
    • Signals: aggregate-scope terminal ssh git native-build · Review: Broad aggregate scope and a prepare build require elevated review before use.

Developer Tools

  • DSH Mcmp · Aampidy/dsh-mcmp@9013691 — DeepSeek Harness 插件:数学建模论文自动化流水线 v2(8 步骤 × 19 迭代 × N 轮:图表视觉自检与修复、评审问题修复闭环、跨步骤缺陷台账与向上修复、论文兜底定稿、质疑驱动、断点续跑、进度面板)

    • Evidence: manifestpatch · Identity: dsh-mcmp
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Request Flight Recorder · abinzhao/dsh-request-flight-recorder@319e3bf — Records bounded content-free diagnostics for request timing, streaming phases, failures, and session correlation.

    • Evidence: manifestpatch · Identity: dsh-request-flight-recorder
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: request-metadata session-data stream-diagnostics client-injection · Review: Exact rc.6 DSH peers and the native bundle are fixed-source confirmed; privacy properties, timing hooks, and the prepack build were not runtime-tested.
  • DSH Python Tempfile Shim · AngelosZou/dsh-python-tempfile-shim@20b84cd — A temporary Windows sandbox shim that injects a local sitecustomize path into confined Python command process trees.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: windows-only environment-injection shell-runtime python-environment github-only · Review: The author documents local-clone installation and removal after an upstream fix; no shell resolver, environment, or Python process was modified.
  • DSH Eval Harness · BiBoyang/dsh-eval-harness@035d1c6 — A headless evaluation harness for measuring agent behavior and task outcomes.

    • Evidence: manifestpatch · Identity: dsh-eval-harness
    • Licenses: repo unknown / package MIT · lifecycle prepack · compatibility unknown
    • Signals: headless evaluation · Review: A README owner spelling defect was observed; only a broad Cordis peer is declared.
  • DSH Zh Kit · CatmaoU/dsh-zh-kit@2d00abe — DeepSeek Harness 中文工具包:模型中文优先(推理/回答)+ 轨迹视图中文化与「人话」解释(融合 deepseek-harness-zh-cn 与 dsh-trajectory-zh)

    • Evidence: manifestpatch · Identity: dsh-zh-kit
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · mixed peer ranges
    • Signals: filesystem external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Codegraph · CC19990113/dsh-plugin-codegraph@94b0fd3 — Builds a tree-sitter and SQLite code graph and exposes symbol, caller, reachability, and indexing tools to DSH agents.

    • Evidence: manifestpatch · Identity: dsh-plugin-codegraph
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-read filesystem-watch sqlite tree-sitter model-tools · Review: The fixed source is 0.1.0 while npm exposes 0.1.4 from the same package directory; no source scan, watcher, native parser, database, or tool was executed.
  • DSH Change Center · Chance-Wu/dsh-change-center@fbe60fc — Captures tool-driven file changes for diff review, verification, rollback, and optional Git staging or publication.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: filesystem-write git-write session-data tool-results llm-review high-trust-surface · Review: The fixed source can persist file-change evidence, apply or roll back edits, and invoke Git add, commit, and push; no filesystem, Git, or model action was executed.
  • DSH Reviewer Bot · chaojixinren/dsh-reviewer-bot@77228ae — Automates repository review workflows across GitHub and GitLab with configurable trust, diagnostics, and write controls.

    • Evidence: manifestpatch · Identity: @dshrb/bundle
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: credentials external-network repository-write subprocess ci-data review-automation · Review: The bundle declares exact DSH rc.6 compatibility and supports forge credentials plus optional repository writes; its automation, subprocesses, and remote calls were not executed.
  • DSH EasySSH Workspace · chenw2759-wq/dsh-IDE@607ff87 — An SSH workspace mode that routes file and subprocess operations to remote hosts while exposing remote browsing and agent tools.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle prepare · declares rc.6 peers
    • Signals: ssh credentials remote-execution filesystem-write prepare-build · Review: Source-link installation and exact rc.6 peers are documented; remote mode bypasses the local kernel sandbox, and no credential, SSH, SFTP, or process action was executed.
  • DSH Git Ops · codehz/dsh-git-ops@bab93cf — Adds Git recommendations, local branch switching, status and diff views, and agent intent shortcuts.

    • Evidence: manifestpatch · Identity: dsh-git-ops
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: git-read git-write branch-switch subprocess client-injection agent-intent · Review: The fixed source invokes Git through the DSH subprocess surface and can stage changes or switch branches; no command or UI action was executed.
  • Arch Doc · duyanta123/arch-doc@76fcfaf — A filesystem skill that analyzes a codebase and produces architecture documentation for modules, dependencies, entry points, and run methods.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-read filesystem-write code-analysis documentation-generation github-only · Review: Pinned GitHub installation is documented; the wildcard skill-filesystem peer leaves compatibility unproven, and no codebase was read or documented.
  • DSH Workbench · ghbhiee/dsh-plugins@2017411 — A browser workbench combining a terminal, file explorer, and file preview.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: terminal subprocess filesystem-read filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Grayprint · HongzhongL/dsh-grayprint@5d43d2c — GrayPrint — live reasoning-style fingerprints for the DeepSeek Harness web chat. Compares grayscale-vs-current writing style and independently tracks Let me exploratory openers versus We need planning openers.

    • Evidence: manifestpatch · Identity: dsh-grayprint
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Tool Visual Primitives · InkshadeWoods/dsh-tool-visual-primitives@d7957c4 — DSH 视觉原语工具:参考 DeepSeek《Thinking with Visual Primitives》论文,将图片路由到外部视觉模型并返回带视觉基元的文本分析。纯文本循环,对话模型无需原生视觉能力即可'看见'图片。

    • Evidence: manifestpatch · Identity: dsh-tool-visual-primitives
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: external-network credentials client-injection prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Console · Isanti2016/dsh-console@8d31014 — Console commands for Web service and SSH-tunnel management, one-shot prompts, and TUI launch.

    • Evidence: manifestpatch · Identity: dsh-console
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: command-line ssh subprocess service-management · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Context Lens · KinomotoMio/dsh-context-lens@e00745a — Shows the model context contributed by DSH plugins through host and client inspection surfaces.

    • Evidence: manifestpatch · Identity: @kinomotomio/dsh-context-lens
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: model-context session-data system-prompt client-injection host-api github-only · Review: A matching fixed GitHub source exists while npm has no package; no model context, session data, host API, client UI, test, or build was executed.
  • DSH Selection Highlight · kxSenlin/dsh-selection-highlight@6ece433 — Selection Highlight(选区高亮)for dsh Web:双击/拖选对话文本后,对话区域内的相同文本片段淡高亮。VS Code Selection Highlight 风格的纯浏览器侧 dsh 插件。

    • Evidence: manifestpatch · Identity: dsh-selection-highlight
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Ops Kit · LeslieWylie/dsh-ops-kit@c4ba835 — Operational tools and skills for development workflows inside DeepSeek Harness.

    • Evidence: manifestpatch · Identity: dsh-ops-kit
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: tools skills · Review: DSH skill and tools peers declare rc.6; runtime compatibility was not tested.
  • DSH Proxy Config · lhf6623/dsh-proxy-config@e3d5934 — A settings panel that persists HTTP or SOCKS proxy values into the host process environment.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: proxy process-environment configuration-write credentials subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH SCNet · lql341/dsh-scnet@24070df — SSH and Slurm tooling for SCNet and similar domestic HPC clusters.

    • Evidence: manifestpatch · Identity: dsh-scnet
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: ssh hpc remote-execution filesystem-write subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Exec Extension · LvDAO/dsh-exec-extension@1a7c4e1 — Official-pattern dsh bundle: replace headless-startup with per-invocation CLI flags without writing settings

    • Evidence: manifestpatch · Identity: dsh-exec-extension
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: filesystem external-network credentials client-injection mcp native-helper prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Bash Terminal · MAXeaglet/dsh-bash-terminal@6894913 — A Windows shell tool that routes commands through PowerShell, Git Bash, or WSL with a configurable default.

    • Evidence: manifestpatch · Identity: dsh-bash-terminal
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: subprocess shell windows configuration-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Session Control · mouliangyu/dsh-plugins@4c03d96 — Global session and workspace management for DeepSeek Harness

    • Evidence: manifestpatch · Identity: dsh-session-control
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Session Lifecycle · mrzhangkris/dsh-session-lifecycle@2020895 — 会话生命周期管理:one-shot 子代理完成后自动清理 + 总量保底 + 连带清理 projcache,从源头杜绝缓存膨胀与卡顿。

    • Evidence: manifestpatch · Identity: dsh-session-lifecycle
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: external-network credentials · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Large Project Performance · orangeofcarl0-sys/dsh-large-proj-perf@cb957b4 — Large-session optimizations for fork initialization, projection warming, cache refill, materialization, LRU pruning, and heap detection.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: performance-patch session-data cache memory-management github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Superpower · pai535Huang/dsh-superpower@c35de08 — DeepSeek Harness preset adapter for obra/superpowers

    • Evidence: manifestpatch · Identity: dsh-superpower
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH UE Assets Operator · QSWWLTN/dsh-UEAssetsOperator@2dbb683 — Native tools for Unreal Engine uasset inspection and Blueprint edits through built-in UE Python.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: unreal-engine asset-inspection filesystem-write subprocess python · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH NeoForge · r05En1cU/dsh-neoforge@7bbee40 — A plugin API layer with runtime mixins, snapshot and restore, and a Cordis-native event bus.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: plugin-api runtime-mixin snapshot event-bus prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Structured Output · royenheart/dsh-plugin-structured-output@1116e33 — JSON Schema structured-output tools, a command, and native result validation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: structured-output json-schema model-tools validation local-installer · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Restart Systemd · RoyougiShiki/dsh-restart-systemd@90ab7ea — A Web and command trigger for safely restarting a user systemd service and resuming the session.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: service-restart systemd subprocess session-data local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Code IDE · SakalioLabs/dsh-code-ide@51d49f4 — Adds an optional browser IDE with file editing, search, terminals, and language-aware CodeMirror surfaces.

    • Evidence: manifestpatch · Identity: dsh-code-ide
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-read filesystem-write terminal subprocess native-dependencies websocket client-injection alpha-release github-only · Review: The alpha bundle has a fixed GitHub identity and native terminal, ripgrep, FFI, and browser surfaces; none was built, installed, or executed.
  • DSH Lean · sjh9714/dsh-lean@df646af — Audits prompt-prefix token usage and proposes reductions to lower model cost.

    • Evidence: manifestpatch · Identity: dsh-lean
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: token-audit cost-optimization prompt-analysis filesystem-read · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Minimal PowerShell · skydog221/dsh-minimal-powershell@aa53185 — Keeps minimal-mode shell calls working through PowerShell on Windows.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: powershell shell sandbox-policy windows prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Vimina · Sunse666/dsh-vimina@85b04c9 — Exposes Windows GUI scanning, input, screenshots, windows, mouse, and VMA scripting through native tools.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: gui-automation windows subprocess screenshot model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Git · taontech/dsh-git@bbe81b5 — A Git tab for repository status, history, branches, initialization, and operations.

    • Evidence: manifestpatch · Identity: @taontech/dsh-git
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: git filesystem-write subprocess client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Archify · tt-a1i/archify@cffdd42 — Architecture knowledge and diagrams exposed to DSH through a nested integration bundle.

    • Evidence: manifestpatch · Identity: @tt-a1i/archify-dsh
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: nested-bundle filesystem-skill dynamic-yaml · Review: Native structure confirmed in a nested package; runtime compatibility was not tested.
  • DSH Air Plant · uckkk/dsh-air-plant@d018d28 — 室内绿植

    • Evidence: manifestpatch · Identity: dsh-air-plant
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Bone Aid · uckkk/dsh-bone-aid@9ee1200 — 骨折扭伤

    • Evidence: manifestpatch · Identity: dsh-bone-aid
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Curtain Pick · uckkk/dsh-curtain-pick@97a3e78 — 窗帘选择

    • Evidence: manifestpatch · Identity: dsh-curtain-pick
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Kitchen Exhaust · uckkk/dsh-kitchen-exhaust@54e88e4 — 烟灶选购

    • Evidence: manifestpatch · Identity: dsh-kitchen-exhaust
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Mover Pick · uckkk/dsh-mover-pick@21172d9 — 搬家公司

    • Evidence: manifestpatch · Identity: dsh-mover-pick
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Multi Furniture · uckkk/dsh-multi-furniture@e6e040d — 多功能家具

    • Evidence: manifestpatch · Identity: dsh-multi-furniture
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH No Main Light · uckkk/dsh-no-main-light@159615e — 无主灯方案

    • Evidence: manifestpatch · Identity: dsh-no-main-light
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Red Packet · uckkk/dsh-red-packet@7b039db — 红包礼仪

    • Evidence: manifestpatch · Identity: dsh-red-packet
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Robot Setup · uckkk/dsh-robot-setup@7f4ffc1 — 扫地机器人

    • Evidence: manifestpatch · Identity: dsh-robot-setup
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-bundle · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Git Inspect · Wanbinyu/dsh-plugin-git-inspect@51e98c3 — Exposes read-only Git status, diff, log, branch, and repository inspection tools to DSH.

    • Evidence: manifestpatch · Identity: dsh-plugin-git-inspect
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: git-read subprocess filesystem-read model-tools prepare-build github-only · Review: The fixed GitHub bundle invokes Git through the DSH subprocess service and accepts rc.5 through rc.6 peers; no prepare build, command, or tool was executed.
  • DSH Git Graph · WhitePlusMS/dsh-git-graph@4e4621a — A read-only Git graph view with refs, worktree state, search, filtering, and history pagination.

    • Evidence: manifestpatch · Identity: dsh-git-graph
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: git workspace-read · Review: Exact rc.6 DSH peers were declared; runtime compatibility was not tested.
  • DSH Git Worktree · wloops/dsh-git-worktree@17945c5 — Experimental worktree-backed session targets with isolated sessions, review views, confirmed delivery, and cleanup.

    • Evidence: manifestpatch · Identity: dsh-git-worktree
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: git-worktree session-data approval-gate filesystem-delete prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Hooks Ordering · xinyuehtx/dsh-plugin-hooks-ordering@3f9f79f — Coordinates deterministic before-and-after ordering across independently contributed Cordis hooks.

    • Evidence: manifestpatch · Identity: @tengxiaohtx/dsh-plugin-hooks-ordering
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: hook-ordering agent-events tool-events model-stream filesystem-write prepublish-build · Review: The fixed source and npm identity both expose 0.2.0 from the same repository; no hook takeover, ordering graph, log write, build, or test was executed.
  • DSH Launcher · XQ-rxslcq/dsh-launcher@046acfb — A configurable launcher for hidden command-line startup and an animated desktop companion window.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: application-launcher subprocess configuration-write desktop-app · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Remote SSH · Yan-Zero/dsh-remote-ssh@21d727c — Transparent local and remote SSH workspaces spanning files, subprocesses, settings, and Web UI.

    • Evidence: manifestpatch · Identity: dsh-remote-ssh
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · compatibility unknown
    • Signals: ssh remote-execution filesystem-write credentials prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Web UI Launcher · YV3507/dsh-webui-launcher@1028c4f — Provides model tools, commands and a settings card for starting, stopping and opening the DSH web interface.

    • Evidence: manifestpatch · Identity: dsh-webui-launcher
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: process-control subprocess external-network filesystem-write client-injection native-launcher · Review: The fixed source, patch, licenses, compatibility ranges and GitHub-source install identity were reviewed statically; launchers, processes, tools, servers and browser code were not run.
  • DSH Git Bash Tool · zeroa234/dsh-preset-minimal-windows@5e33b0f — A Windows Git Bash execution tool using the host subprocess seam with output spill and timeouts.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: git-bash subprocess windows filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Agent & Workflow

  • DSH Plan Lattice · 1052326311/dsh-plan-lattice@e764f70 — Adaptive execution contracts and evidence-gated work graphs for long-running DSH agents.

    • Evidence: manifestpatch · Identity: dsh-plan-lattice
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: agent-planning filesystem-write model-tools github-release prepack-build · Review: GitHub release tarballs provide a fixed install identity; peers mix rc.5 and rc.6, and the prepack build and workflow behavior were not executed.
  • Nocode · 3dot141/nocode-evolve@1187dbf — Harrison 的个人工程工作流与规则工具箱,支持 Claude Code、Codex、Qoder、Pi 和 DeepSeek Harness

    • Evidence: manifestpatch · Identity: nocode
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: mcp process-control system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Forge · alex04130/dsh-forge@fae36ff — A broad extension bundle for cross-session mail, agent teams, model routing, runtime injection, skills, and plugin management.

    • Evidence: manifestpatch · Identity: @dsh-forge/bundle
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: multi-agent dynamic-loading package-management filesystem-write high-trust-surface · Review: The distributable npm bundle, rather than the private root source manifest, declares rc.6 peers; its broad runtime injection and management surfaces were not executed.
  • DSH Computer Use · Anionex/dsh-computer-use@76bfe86 — Computer-use tooling for screen perception and controlled desktop actions.

    • Evidence: manifestpatch · Identity: @anionex/dsh-computer-use
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: computer-use browser native-artifacts · Review: Exact rc.6 DSH peers were declared; broad computer control remains a high-trust capability.
  • DSH Expert Mode · Asher-2000/dsh-expert-mode@55d5835 — Provides a coordinator persona and eleven domain-expert subagent presets for delegated DSH workflows.

    • Evidence: manifestpatch · Identity: dsh-expert-mode
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: agent-preset subagent-delegation persona-injection github-only · Review: A pinned root Git source identity is available while npm has no matching package; no persona, agent realm, or delegation was loaded.
  • DH Multiagents · atesahmet0/dh-workspace@fb1f22c — A role-bound multi-agent bundle with enforced tool matrices, persisted delegation, reusable presets, philosophy skills, and worktree operations.

    • Evidence: manifestpatch · Identity: @dh-multiagents/bundle
    • Licenses: repo MIT / package unknown · lifecycle postinstall · declares rc.6 peers
    • Signals: multi-agent filesystem-write git-worktree model-routing postinstall · Review: The public bundle identity resolves and documentation targets rc.6; its approved postinstall mirrors presets, and no lifecycle or agent action was run.
  • DSH CC Agents · Bcy2020/dsh-cc-ecosystem@486441b — An adapter that turns Claude Code agent definitions into DSH subagents with persona, tool filters, skills, and model aliases.

    • Evidence: manifestpatch · Identity: dsh-cc-agents
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: multi-agent filesystem-read prompt-injection tool-filtering model-routing · Review: The public package maps to this monorepo; wildcard DSH peers leave compatibility unproven, and no Claude asset or subagent was loaded.
  • DSH Captain Call · Daisy2048/dsh-captain-call@d2b7406 — A desktop call-style notifier for AgentTeams completions with local speech synthesis, optional microphone replies, and archived conversations.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-data filesystem-read audio microphone external-model-download · Review: Local source installation is documented for the private package; audio, model download, microphone, and AgentTeams state access were not executed.
  • DSH AE Team · ddddjaak/dsh-ae-team@35a7494 — An application-engineering team pack with seven role definitions, professional skills, and Mermaid graph templates for DSH Web.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: multi-agent filesystem-skill prompt-injection dynamic-mermaid github-only · Review: Source-link installation is documented; the manifest declares no DSH peer range, and no role, skill, prompt, or graph template was loaded.
  • DSH AUX · DoloresCaritasAngelus/DSH-AUX@8c1ef2c — Routes auxiliary LLM tasks for vision, Web extraction, and text compression with fallback, concurrency, and session status controls.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: official-looking-namespace core-patch installer-script external-network credentials llm-routing session-data · Review: The independent Git source uses an official-looking unpublished package name and an installer that symlinks files and patches DSH core for image, session, and settings bridges; no installer, patch, or model request was executed.
  • DSH TaskSwarm · february2015/dsh-taskswarm@bec7d32 — Persistent multi-agent task orchestration with dependency waves, isolated worktrees, cross-model review, merge handling, and a live dashboard.

    • Evidence: manifestpatch · Identity: dsh-taskswarm
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: multi-agent git-worktree filesystem-write local-web-server prepare-build · Review: The public package maps to this repository, but wildcard DSH peers leave compatibility unproven; no build, agent, Git, merge, or dashboard action was run.
  • DSH Prompt Enhancer · Fishsb/dsh-prompt-enhancer@d42b2b4 — Uses an independent LLM call to rewrite draft prompts in the DSH composer with undo support.

    • Evidence: manifestpatch · Identity: dsh-prompt-enhancer
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: llm-call client-injection external-network credentials · Review: The client peers declare rc.6 and the native patch is present; prompt disclosure to a configured model and updater network behavior were not executed.
  • LinkHealth Intake Triage · fmlin0429712024/linkhealth-triage@fa89c59 — A healthcare business-intake workflow with role prompts, scoring, routing, and a deterministic PHI review guardrail.

    • Evidence: manifestpatch · Identity: linkhealth-intake-triage-dsh
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: healthcare-workflow skills filesystem-write human-review sensitive-data github-only · Review: The canonical nested source includes a PHI-to-human-review invariant and writes a local triage log; no health data, role prompt, guardrail, or log write was processed.
  • DSH Timer Scheduler · GMH13552/dsh-timer-scheduler@5b9c563 — Lets an agent schedule a future wake-up and shows reminders in a DSH Web panel.

    • Evidence: manifestpatch · Identity: dsh-timer-scheduler-ui
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: scheduled-wakeup agent-events local-http-server web-ui github-only · Review: The source documents local installation and a future npm release; no timer, wake-up, reminder API, or browser panel was started.
  • DSH Auto Continue 429 · haochi72/dsh-auto-continue-429@924fb42 — Retries DSH sessions after rate-limit errors and exposes a browser toggle for automatic continuation.

    • Evidence: manifestpatch · Identity: dsh-auto-continue-429
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: rate-limit-recovery session-continuation client-injection browser-ui · Review: The fixed source and npm identity both expose 0.1.0 from the same repository; no retry, continuation, session mutation, or browser toggle was executed.
  • DSH Nudge · huangmouren2023/deepseek-harness-toolkit@ea3ed50 — Automatically follows up after terminal failures or interruptions so the agent explains or resumes.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: agent-steering terminal-events prompt-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Team · huxint/dsh-team@66835a7 — Persistent named agent teams with shared tasks, mailboxes, virtual workspaces, and a live team room.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: multi-agent session-data filesystem-write mailbox client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Ikanban · isomoes/ikanban@5925d26 — Keyboard-oriented iKanban web application bundle for DeepSeek Harness

    • Evidence: manifestpatch · Identity: @isomoes/dsh-ikanban
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: external-network credentials client-injection mcp process-control database system-prompt prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Discussion Intent · JinPLu/dsh-plugin-discussion-intent@f81b5d1 — An intent-calibrated discussion mode that keeps complex conversations evidence-led and action-oriented.

    • Evidence: manifestpatch · Identity: @jinplu/dsh-plugin-discussion-intent
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: agent-steering system-prompt session-data client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Clawock DSH · KCNyu/clawock@428320b — An investment-decision workflow with evidence, an opposing case, deterministic settlement, and a scorecard tab.

    • Evidence: manifestpatch · Identity: clawock-dsh
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: investment-workflow skills external-network filesystem-read filesystem-write web-ui source-behind-registry · Review: The nested integration is a real published package, not a fixture; the fixed source is 0.1.6 while npm exposes 0.1.8, and no market fetch, decision, or settlement ran.
  • Orcana Runtime Pack · Leo-Ayh-Oday/dsh-orcana@abf4b60 — A general Orcana runtime profile bundle for DSH.

    • Evidence: manifestpatch · Identity: @leooday/dsh-bundle
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: profile-bundle workflow-runtime package-bundle · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plan Execute · leotangjc/plan-execute@f236fde — A three-stage workflow that grills decisions, compiles plans, and executes with acceptance checks.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: workflow-orchestration model-tools agent-steering github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Voice · meomeo-dev/dsh-voice@b4b989c — Session, workspace, and user-level conversation-tone switching with bundled voice skills.

    • Evidence: manifestpatch · Identity: @meomeo-dev/dsh-voice
    • Licenses: repo unknown / package unknown · lifecycle prepare · mixed peer ranges
    • Signals: system-prompt filesystem-skill client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Agency Agents · MichengAI/dsh-agency-agents@9770f19 — A summonable roster of bundled domain experts with remote and DSH Web integration surfaces.

    • Evidence: manifestpatch · Identity: @michengai/dsh-agency-agents
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · mixed peer ranges
    • Signals: expert-agents subagents remote-api client-injection web-ui prepublish-build source-behind-registry · Review: The fixed source is 0.1.17 while npm exposes 0.1.19 from the same repository; no build, expert invocation, remote request, subagent, or UI was executed.
  • DSH Waker Trigger · msilita/dsh-waker-trigger@b10322d — Durable any/all triggers over schedules, files, commands, HTTP, processes, and ports that wake an agent at a safe boundary.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: scheduler filesystem-watch subprocess external-network agent-events · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Cron · omdsh-dev/dsh-cron@9c4b5fa — Durable cross-session jobs driven by five-field cron rules and injected into agent sessions.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: scheduler session-data agent-steering filesystem-write prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH LLM Fallbacks · omdsh-dev/dsh-llm-fallbacks@69ec1fe — Adds configurable provider and model fallback chains after retry, authentication, quota, or rate-limit failures.

    • Evidence: manifestpatch · Identity: dsh-llm-fallbacks
    • Licenses: repo MIT / package unknown · lifecycle prepare · declares rc.6 peers
    • Signals: llm-routing client-injection prepare-build · Review: The DSH peers declare rc.6 and the fallback row is fixed-source confirmed; prepare builds code and provider switching was not runtime-tested.
  • DSH More Agent Presets · R-LEI2536/dsh-more-agent-presets@fef064f — 多个可选择的 DeepSeek Harness Agent Presets 集合

    • Evidence: manifestpatch · Identity: dsh-more-agent-presets
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Rules · rj-jiangyichen/dsh-rules@dd5d211 — Activates rule prompts and Markdown documents when agent file activity matches configured globs.

    • Evidence: manifestpatch · Identity: dsh-rules
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: filesystem-read file-globs prompt-injection agent-events prepublish-check · Review: The fixed source and npm identity both expose 0.1.0, though registry metadata does not map the repository; no file matching, rule load, prompt injection, or test was executed.
  • DSH Trellis · SajoLuo/dsh-trellis@401b117 — Trellis workflow integration for DeepSeek Harness: per-turn workflow-state breadcrumbs, utility commands, and native session identity.

    • Evidence: manifestpatch · Identity: dsh-trellis
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: external-network credentials client-injection prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • HA Orchestrator · Saktawdi/ha-orchestrator@83b80a6 — Model failover and subagent fanout, pipeline, and supervisor orchestration.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: model-failover multi-agent workflow-orchestration external-network prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Bash Scripting · satan9394/dsh-bash-scripting@e9b421d — Bash 脚本防御模式:set -euo pipefail、参数校验、错误处理、可调试。受 wshobson/agents(38k★ MIT)启发。

    • Evidence: manifestpatch · Identity: dsh-bash-scripting
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH LLM Eval · satan9394/dsh-llm-eval@7690b6a — LLM 评估:输出质量评估、幻觉检测、基准测试、回归守护。受 wshobson/agents(38k★ MIT)启发。

    • Evidence: manifestpatch · Identity: dsh-llm-eval
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Taskboard · shengsheng90/DSH-taskboard@f15e324 — Provides a local project taskboard with cards, attachments, automations, agent tools, and a DSH Web UI.

    • Evidence: manifestpatch · Identity: @shengsheng/dsh-taskboard
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: task-management filesystem-write sqlite attachments automation model-tools client-injection · Review: The fixed source and current public package both expose version 0.1.1; no database, attachment, automation, tool, or browser action ran.
  • DSH Swift Cycle · Solismuchengxue/dsh_plugin_swift_cycle@d44bee7 — A DSH adapter for the Swift Cycle governance skill.

    • Evidence: manifestpatch · Identity: dsh-plugin-swift-cycle
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: governance filesystem-skill workflow · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Octie DSH · StarChen-Cycler/octie-dsh-plugin@457bc4e — A persistent task-graph state machine with model tools, a client panel, presets, skills, and immutable snapshots.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: task-graph model-tools filesystem-write snapshot identity-collision · Review: The npm identity maps to the upstream Octie repository, so this record is pinned to the author's documented Git plugin source and does not claim the npm package.
  • DSH Project Kanban · StruggleYang/dsh-project-kanban@1337489 — A workspace-isolated persistent Kanban board with browser UI and model tools.

    • Evidence: manifestpatch · Identity: dsh-project-kanban
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: kanban model-tools filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Yogacara · tancheng33/dsh-yogacara@daa16f8 — A Yogacara self-model with consciousness states, mental factors, durable seeds, and a self-grasping meter.

    • Evidence: manifestpatch · Identity: dsh-yogacara
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: self-model long-term-memory system-prompt model-tools prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Expert Team · tipus0731/dsh-expert-team@0d08ec9 — Role-bounded expert agents with acceptance-driven dispatch and unanimous cross-validation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: multi-agent task-dispatch cross-validation model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Subagent Roles · trynewthin/dsh-subagent-roles@83f118c — Role-based model routing and Web configuration for subagent delegation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: multi-agent model-routing configuration-write client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Qingagent · void2anything/dsh-qingagent@c8e3a7d — DeepSeek Harness × 青简写作桥:QingML 起草工具与右侧宣纸预览。

    • Evidence: manifestpatch · Identity: dsh-qingagent
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: external-network credentials client-injection system-prompt prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Adaptive Performance · winliyou/dsh-plugins@cc3bce5 — Adds adaptive tool and runtime-context behavior for standard DSH agent presets.

    • Evidence: manifestpatch · Identity: @chaoset/adaptive-perf
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: adaptive-performance agent-tools runtime-context sandbox-interaction prepublish-test · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • Computer Use Win · Yu-tao-Li/computer-use-win@27d0e28 — Connects DSH to Windows desktop automation through an MCP server and PowerShell UI Automation backend.

    • Evidence: manifestpatch · Identity: computer-use-win
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: windows-only computer-use mcp powershell subprocess screenshots ocr keyboard-input mouse-input high-trust-surface github-only · Review: Pinned GitHub installation is documented for the Windows-only MCP bundle; no server, PowerShell process, screenshot, OCR, mouse, keyboard, or desktop action was executed.

Files & Data

  • DSH Usage Billing · 940842546/dsh-usage-billing@96ff9fc — Aggregates model token usage and estimated DeepSeek charges into persistent session and time-range dashboards.

    • Evidence: manifestpatch · Identity: dsh-usage-billing
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-data usage-metrics filesystem-write client-injection · Review: The DSH tools peer declares rc.6 and the fixed source writes aggregated usage data; pricing accuracy and runtime behavior were not verified.
  • DSH Input File Ref · AFAP/dsh-input-file-ref@fe62f66 — An at-mention file picker that browses and searches relative workspace paths before inserting the selected path into chat.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-metadata workspace-read client-injection web-route github-only · Review: GitHub installation is documented; the host lists relative path metadata behind a same-origin trust fence, and no filesystem access was exercised.
  • DSH Usage · Aisland-SJL/dsh-usage@4b9a952 — Shows persistent balances and token-usage dashboards across DSH sessions and optional Claude Code usage logs.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data credentials external-network filesystem-write identity-collision · Review: The author documents GitHub-source installation; the private manifest name collides with another npm repository, so no npm identity is listed and usage, balance, and file access were not executed.
  • DSH Session Export · bwndlct/dsh-session-export@eb18389 — Exports DeepSeek Harness sessions into portable files for reuse or archival.

    • Evidence: manifestpatch · Identity: dsh-session-export
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-data filesystem-write · Review: Command, session, and tools peers declare rc.6; exported data may contain sensitive context.
  • DSH File · chengzhi43/dsh-file@ae933f7 — A VS Code-style browser, editor, and markdown viewer for files in the current DSH workspace.

    • Evidence: manifestpatch · Identity: dsh-file
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: filesystem-read filesystem-write web-ui markdown source-ahead-registry · Review: The fixed source is 0.1.0 while npm exposes 0.0.1 without repository metadata; file reads, edits, markdown rendering, and browser loading were not executed.
  • DSH Cloud Sync · dickpy/dsh-cloud-sync@fa3dfa5 — Synchronizes portable DSH profiles and local plugin sources through WebDAV or object storage.

    • Evidence: manifestpatch · Identity: @dickpy/dsh-cloud-sync
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: cloud-sync filesystem-read filesystem-write credentials external-network release-check · Review: The fixed source is 0.20.0 while npm exposes 0.20.5 without repository metadata; no profile upload, download, credential use, or release check was executed.
  • DSH Drag to Attachment · djt889/dsh-drag-to-attachment@620ad6e — Turns dropped or pasted host files and folders into DSH attachments or absolute filesystem paths.

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-drag-to-attachment
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
    • Signals: native-executable subprocess filesystem folder-attachment absolute-path client-injection · Review: GitHub installation is documented and the package bundles an Everything helper executable for local path discovery; no binary, subprocess, or file operation was executed.
  • GEML DSH Plugin · geml-spec/geml@6048f6e — Adds addressable document blocks to DSH through the GEML MCP server and bundled authoring skills.

    • Evidence: manifestpatch · Identity: @geml/dsh-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: mcp-stdio subprocess document-editing skills filesystem-read filesystem-write source-ahead-registry · Review: The fixed integration is 1.0.1 while npm exposes 1.0.0 from the same repository; no npx subprocess, MCP request, skill, or document edit was executed.
  • DSH Drag-and-Drop Upload · GLFzr/dsh-file-upload@54891a4 — Adds drag-and-drop uploads to the DSH Web composer and stores files in a local dropbox directory.

    • Evidence: manifestpatch · Identity: dsh-file-upload
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: file-upload filesystem-write web-routes client-injection · Review: The dual host/client bundle is structurally confirmed; upload routes and filesystem writes were not runtime-tested.
  • DSH File Upload · HongMing-Huang/dsh-file-upload@7aac111 — Composer file upload with removable chips, content sniffing, Markdown conversion, and document tools.

    • Evidence: manifestpatch · Identity: dsh-file-upload
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: file-upload filesystem-write document-parsing · Review: DSH peers declare rc.6 while Cordis is broad; runtime compatibility was not tested.
  • DSH File Picker · JackeyWilder/dsh-file-picker@a8741fb — A native Windows file picker and attachment rail that injects selected paths into the session.

    • Evidence: manifestpatch · Identity: @jackeywilder/dsh-file-picker
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: native-dialog filesystem-read session-data client-injection windows · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH FileScope · KunIsMe/dsh-filescope@e84692e — A workspace file-explorer drawer with live file previews.

    • Evidence: manifestpatch · Identity: dsh-filescope
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-read file-preview client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Tree · lyhue1991/dsh-tree@31130cd — DSH 项目资源管理器:右侧 details 列文件树(并列网格、宽度与左侧工作区一致 264-420px),Session log 右侧 📁 切换按钮;支持多选、双击展开/打开、右键菜单(系统打开/重命名/废纸篓/新建/复制路径)、拖拽移动、上传。

    • Evidence: manifestpatch · Identity: @lyhue1991/dsh-tree
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH DBHub Live · mr-mihu/dsh-dbhub-live@77b8bbd — Bridges DBHub into DSH with persistent multi-source servers, workspace tools, and temporary database connections.

    • Evidence: manifestpatch · Identity: dsh-dbhub-live
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: database mcp external-network credentials model-tools workspace-data · Review: The fixed source and npm identity both expose 2.0.0 from the same repository; no database, MCP server, credential, network connection, or agent tool was executed.
  • DSH Download Progress · nanshanzhaoji/dsh-download-progress@052917d — Adds a download tool with percentage tracking and a floating progress panel in DSH Web.

    • Evidence: manifestpatch · Identity: dsh-download-progress
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: file-download external-network filesystem-write model-tools client-injection github-only · Review: A fixed GitHub source identity is available while npm has no matching package; no download, file write, HTTP route, or browser panel was executed.
  • DSH Explorer · No-PRM/dsh-explorer@2b21a68 — An aggregate host and browser file explorer with tree browsing, search, Git status, media preview, and drag-to-reference.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: filesystem-read file-search git-status media-preview client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Chat Import · Nwflower/dsh-chat-import@3c751ce — Imports conversation histories from major coding agents and chat products as resumable DSH sessions.

    • Evidence: manifestpatch · Identity: dsh-chat-import
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: session-import filesystem-read session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH At File · omdsh-dev/dsh-at-file@9c71e52 — Codex-style @file mentions that search workspace paths and attach file contents to prompts.

    • Evidence: manifestpatch · Identity: dsh-at-file
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: workspace-read data-disclosure · Review: Workspace contents can be attached to prompts; users should review disclosure boundaries.
  • DSH Files · taxueseek/dsh-files@43887e2 — File upload cards, session-scoped storage, deduplication, cleanup, and document reading tools.

    • Evidence: manifestpatch · Identity: dsh-files
    • Licenses: repo unknown / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: file-upload filesystem-write document-parsing · Review: DSH peers declare rc.6 while Cordis is broad; repository license detection was unavailable.
  • DSH Archived Sessions · TOBYCAI/dsh-archived-sessions@a4e3cfe — DSH 设置面板「归档会话」管理器:查看、恢复、彻底删除已归档的 session,带所属工作区标签与会话日期。

    • Evidence: manifestpatch · Identity: dsh-archived-sessions
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Browser FS · whitefirer/dsh-browser-fs@d144aaf — Lets agents list, read, and write within a browser-authorized local directory over a WebSocket relay.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: browser-filesystem filesystem-read filesystem-write websocket model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH DeepSeek Attach · wqx-txdsyl/dsh-ds-attach@9cc7bab — DeepSeek-style file cards, drag-and-drop, document text extraction, and message injection for DSH attachments.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: file-upload document-extraction filesystem-write session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH File Explorer · Zalpha263/dsh-file-explorer@6cca848 — Provides a persistent web file tree with preview, editing, context actions, upload, download, and archive tools.

    • Evidence: manifestpatch · Identity: dsh-file-explorer
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: file-manager filesystem-read filesystem-write archive-operations client-injection source-registry-version-drift · Review: The fixed source version is ahead of the current matching registry release; identity was reviewed statically and no file or UI action ran.
  • Cordis Transfer Plugin · zby1211/cordis-transfer-plugin@c99f767 — Imports and exports dynamic Cordis plugins as ZIP packages through the browser.

    • Evidence: manifestpatch · Identity: cordis-transfer-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: plugin-export plugin-import file-upload filesystem-write model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Drop Any File · Zenjibad/dsh-drop-any-file@959a233 — Extends DSH Web drag-and-drop to accept arbitrary file types and save them as session attachments.

    • Evidence: manifestpatch · Identity: dsh-drop-any-file
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: drag-and-drop attachments filesystem-write client-injection github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Web Search Multi · zmh2000829/dsh-web-search-multi@558e750 — Configurable SearXNG, Brave, Tavily, Gemini, and Wikipedia search provider for DeepSeek Harness

    • Evidence: manifestpatch · Identity: dsh-web-search-multi
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: external-network credentials client-injection process-control docker prepare prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.

Vision & Media

  • DSH LLM Vision · 1710782766/dsh-llm-vision@8ff56db — Image description and OCR tools backed by an OpenAI-compatible vision endpoint.

    • Evidence: manifestpatch · Identity: dsh-llm-vision
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: vision ocr external-network credentials filesystem-cache client-injection · Review: The fixed source matches npm 0.1.0; endpoint calls, image processing, credentials, cache writes, and client injection were not executed.
  • DSH Vision Toolkit · Anionex/dsh-vision-toolkit@29850a8 — Vision tools for image Q&A, long-screenshot OCR, UI reproduction, grounding, and pixel diff.

    • Evidence: manifestpatch · Identity: @anionex/dsh-vision-toolkit
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: browser subprocess credentials python-environment · Review: High-privilege runtime preparation is visible; compatibility requires a separate check.
  • DSH Codex Media · binsarjr/dsh-codex-media@4dba264 — Adds local image and document analysis plus image generation through Codex CLI or configurable API transports.

    • Evidence: manifestpatch · Identity: dsh-codex-media
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: local-file subprocess external-network credentials image-generation · Review: The native row loads source that can read files, spawn the local Codex CLI, call APIs, and write generated images; none of those paths were executed.
  • DSH Vision · cdxDNRF/dsh-vision@e10ec00 — Bridges images to an OpenAI-compatible vision endpoint and exposes automatic descriptions, a vision tool, and settings UI.

    • Evidence: manifestpatch · Identity: @cdxdnrf/dsh-vision
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials filesystem-read subprocess model-tools client-injection github-only · Review: A fixed GitHub source identity exists while npm has no matching scoped package; no image read, proxy lookup, credential resolution, network request, or model tool was executed.
  • DSH Blender · CheshireJCat/blender@3d641da — A Blender integration that exposes 3D scene authoring through DSH tools.

    • Evidence: manifestpatch · Identity: dsh-blender
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: external-application subprocess setup-command · Review: DSH tools rc.6 is declared; Blender execution and setup were not tested.
  • DSH Chat Imagine · corrinehu/dsh-chat-imagine@419e39b — Image-generation tools that use configured OpenAI-compatible providers or a detected local MiniMax CLI and render results in chat.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: image-generation external-network credentials subprocess in-memory-media · Review: GitHub installation and rc.6 tools are documented; provider requests, CLI discovery, subprocesses, and image generation were not executed.
  • DSH ChatVoice · FuzzySoul/dsh-chatvoice@34b4a18 — Browser-native speech input and reply read-aloud without a separate API key.

    • Evidence: manifestpatch · Identity: dsh-chatvoice
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: microphone browser-speech client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Image Bridge · haitang1/dsh-image-bridge@4c7e7a9 — Writes pasted images into the workspace and exposes hidden paths so text models can call vision tools.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: image-input filesystem-write prompt-injection model-tools session-data · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Diagram · hanzhangzzz/dsh-diagram@480d3b3 — Editable Excalidraw diagrams embedded in DeepSeek Harness conversations.

    • Evidence: manifestpatch · Identity: dsh-diagram
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: interactive-content · Review: Exact rc.6 DSH peers were declared; runtime compatibility was not tested.
  • DSH DashScope Media · hisonWarren/deepseekharness-alter@efb651d — DashScope-backed image, video, and speech tools with in-chat media cards.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · declares rc.6 peers
    • Signals: image-generation video-generation text-to-speech credentials external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Image Gen · hoyyang/dsh-image-gen@304fb01 — DSH 通用图像生成插件:接入任意 OpenAI 兼容生图网关(自定义 baseUrl + 模型 + API Key),设置页可视化配置。工具 dsh_image_gen / dsh_image_gen_config + 命令 /dsh-image-gen + skill。

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-image-gen
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DirectorX · LaplaceYoung/dsh-directorx@5553398 — AI video generation, editing, quality review, storyboard canvas, and a director knowledge library.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: video-generation video-editing quality-control filesystem-write external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Qwen Voice · leaveimagination/dsh-qwen-voice@c63fed7 — DSH Qwen Voice plugin package.

    • Evidence: manifestpatch · Identity: dsh-qwen-voice
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • ModLens · liustack/modlens@2818192 — A vision bridge that turns images into structured OCR, layout, and semantic evidence for text-only models.

    • Evidence: manifestpatch · Identity: @liustack/modlens
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: external-network credentials external-installer · Review: External vision engines and credentials are capability facts, not a safety judgment.
  • DSH Vision Opencode · poiuyjie/dsh-vision-opencode@d01f809 — DeepSeek Harness plugin: configurable vision model with vision_read_image tool, composer-bar vision-model selector, and automatic image-to-text conversion for text-only main models.

    • Evidence: manifestpatch · Identity: dsh-vision-opencode
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Multimodal Client · SCT192221/dsh-multimodal@c0e0122 — Multimodal client plugin for DeepSeek Harness: inline image rows for generate_image/show_image tool cards, a turn-tail image gallery, and the multimodal settings page. Companion to the dsh-multimodal host plugin.

    • Evidence: manifestpatch · Identity: dsh-multimodal-client
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH SiliconFlow Vision · ShiXiangYu2/dsh-siliconflow-vision@911c63b — Analyzes local, remote, and data-URL images through SiliconFlow vision models and exposes a persistent web panel.

    • Evidence: manifestpatch · Identity: dsh-siliconflow-vision
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: vision-model external-network local-file-read credentials client-injection · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • Narrative Voice · TellToday/dsh-narrative-voice@7b4d13e — A DSH (DeepSeek Harness) bundle plugin that rewrites the ask_user_question tool description at prompt-assembly time with a fixed narrative-voice rule (default: the answerer narrates), toggled live via the /voice command.

    • Evidence: manifestpatch · Identity: @dsh-user/narrative-voice
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network process-control system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH MMX Bridge · welsione/dsh-mmx-bridge@03a8789 — Bridges MiniMax multimodal image, video, speech, music, search, quota, and preview capabilities into DSH.

    • Evidence: manifestpatch · Identity: dsh-mmx-bridge
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: multimodal credentials external-network web-search image-generation audio video model-tools client-injection · Review: The fixed source and npm identity both expose 1.0.3 from the same repository; no credential, request, generation, search, media load, or client enhancement was executed.
  • DeepSee · WUBING2023/deepsee@7431a43 — Vision reading, model-capability discovery, and multi-model routing with optional OCR installation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: vision model-routing external-download subprocess install-script · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DeepSeek Visionary DSH · xlight/deepseek-visionary@e3cf51c — Native vision, status, login, and logout tools backed by a Visionary server CLI and an image bridge.

    • Evidence: manifestpatch · Identity: @xlight-oss/visionary-dsh
    • Licenses: repo MIT / package unknown · lifecycle none · declares rc.6 peers
    • Signals: vision subprocess credentials external-network model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Capture Window · Yidien/dsh-capture-window@3f5d383 — 旁路捕获窗 + /recall 引擎:把想法投进一个安静的独立新会话,压缩当前会话最近 10 句作为背景(不进主线上下文、不切主线视图)

    • Evidence: manifestpatch · Identity: dsh-capture-window
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: client-injection prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Vision Router · ysr666/dsh-vision-router@d805a71 — A vision routing bundle with image Q&A, grounding, OCR, pixel inspection, screenshots, and provider chains.

    • Evidence: manifestpatch · Identity: dsh-vision-router
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network browser file-upload filesystem-write native-code · Review: The fixed manifest and patch declare rc.6 DSH peers; network providers, browser automation, file writes, and native image dependencies were not executed.
  • DSH Read Image · Yu-tao-Li/dsh-read-image@f6ab53b — Renders read_image tool results as images in DSH Web through the durable attachment store.

    • Evidence: manifestpatch · Identity: dsh-read-image
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: image-rendering attachments tool-results client-injection github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Vision Bridge · YUCONG-28/dsh-skills-plugins@92f1316 — Routes image requests through local OCR, cached evidence and configurable remote vision providers.

    • Evidence: manifestpatch · Identity: dsh-vision-bridge
    • Licenses: repo MIT / package MIT · lifecycle postinstall · compatibility unknown
    • Signals: vision-routing ocr native-helper-build postinstall external-network credentials filesystem-write · Review: The fixed monorepo source, nested license, patch and documented file-source identity were reviewed statically; postinstall, native OCR helper, providers, tests and plugins were not run.
  • DSH Realtime Voice · zfu691531-hash/dsh-realtime-voice@91aae22 — Realtime speech-to-speech using Qwen or OpenAI-compatible providers.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: microphone audio credentials external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Vision Bridge · zzdream67/dsh-vision-bridge@f91c8db — Let text-only models see images in DeepSeek Harness: intercepts the llm/stream waterfall and transparently substitutes each image with a vision model's description.

    • Evidence: manifestpatch · Identity: @zzdream67/dsh-vision-bridge
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: external-network credentials client-injection process-control prepare prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.

Search & Research

  • DSH Search · 2982136527/dsh-plugins@b8b03b1 — Provides model-callable Web search through Bing RSS with a DuckDuckGo fallback and no required API key.

    • Evidence: manifestpatch · Identity: dsh-search
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: web-search external-network git-source · Review: The fixed monorepo subdirectory and patch are confirmed; the author documents clone-plus-local-path installation, and the repository has no detected license file.
  • DSH Web Tools · A3Boy/dsh-web-tools@ff35019 — Unifies multiple Web search and fetch providers with credential pools, quotas, health tracking, and deterministic fallback.

    • Evidence: manifestpatch · Identity: dsh-web-tools
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: external-network credentials web-search remote-content client-injection · Review: The fixed peers declare rc.6; provider calls, credential handling, quota logic, fallback behavior, and the prepare build were not executed.
  • DSH KB RAG · Breeze136/dsh-kb-rag@2ba96b7 — Local literature RAG with hybrid retrieval, reranking, citations, and a SQLite-backed Python engine.

    • Evidence: manifestpatch · Identity: dsh-kb-rag
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: literature-search filesystem-read filesystem-write python-subprocess model-download source-behind-registry · Review: The fixed source is 1.0.7 while npm now exposes 1.1.0 from the same repository; no Python daemon, file ingestion, model download, index mutation, or search was executed.
  • Openanalyst · Chenmo0414/openanalyst@eb2df0d — Turn DeepSeek Harness into a data analyst: attach CSV/Parquet/JSON, auto-profile, query, and render real charts inside the conversation.

    • Evidence: manifestpatch · Identity: openanalyst
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Web Search Multi · cinob/dsh-web-search-multi@ea1c2d0 — Provides multi-provider Web search with automatic fallback, credentials, and a settings interface.

    • Evidence: manifestpatch · Identity: dsh-web-search-multi
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials workspace-write provider-fallback settings-ui · Review: Wildcard DSH peers and multiple external search providers are declared, with documented workspace-write capability; no provider request or write was executed.
  • DSH Tool Web Enhanced · edusrez/dsh-tool-web-enhanced@591d9b9 — Extends DSH web search with topic filtering and an optional SearXNG result section.

    • Evidence: manifestpatch · Identity: dsh-tool-web-enhanced
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: web-search external-network searxng model-tools prepack-build · Review: The fixed source is 0.1.0-rc.1 while npm exposes 0.3.0-rc.1 from the same repository; no search, SearXNG request, tool call, or prepack build was executed.
  • DSH Web Access · haibinwang9/dsh-web-access@1eaffaf — Multi-provider Web search and URL extraction with fallback across SearXNG, Tavily, Brave, and DuckDuckGo.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: web-search content-extraction credentials external-network provider-fallback · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH PCB Parts Search · Huaqiu-Electronics/dsh-pcb-parts-search@7b02c04 — A model tool for searching electronic components and ICs from the LCSC/EDA parts service.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: parts-search model-tools external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Semantic Search · JohnXu22786/semantic-search@601c3f5 — A DeepSeek Harness (dsh) plugin for local semantic code search. Builds a fragment-level index of a workspace (symbol-aware chunking for many languages), computes local embeddings (lightweight lexical TF-IDF feature vectors by default, or a configurable OpenAI-compatible embedding endpoint), and answers natural-language queries with hybrid retrieval (vector cosine + BM25, fused with reciprocal-rank fusion). Ships dsh tools sema_search / sema_reindex / sema_stats plus a stand-alone CLI.

    • Evidence: manifestpatch · Identity: dsh-semantic-search
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: external-network credentials client-injection prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Search Boost · Mr-remon219/dsh-search-boost@af80be8 — Fuses multiple Web and X search engines with page fetching and parallel research workflows.

    • Evidence: manifestpatch · Identity: dsh-search-boost
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials subprocess browser multi-agent · Review: The bundle row and search-provider override are fixed-source confirmed; external engines, credentials, subprocesses, and research fan-out were not executed.
  • DSH Paper Daily · mrywwww/dsh-paper-daily@780aa46 — Collects daily condensed-matter papers from arXiv and selected APS journals with optional summaries.

    • Evidence: manifestpatch · Identity: dsh-paper-daily
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: research-feed external-network model-request credentials filesystem-write client-injection · Review: The fixed source, licenses, native bundle structure and GitHub-source install identity were reviewed statically; feeds, summaries, credentials and UI were not run.
  • DSH Journal Monitor · SIMON-WORLD/dsh-journal-monitor@a97982e — Monitors economics journals and working papers, filters new items, persists deduplication state, and sends scheduled digests.

    • Evidence: manifestpatch · Identity: dsh-journal-monitor
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: research-monitoring external-network rss webhook filesystem-write scheduler model-tools github-only · Review: A fixed GitHub source identity is documented; no journal request, feed parse, state write, webhook, scheduler, probe, or test was executed.
  • DSH Web Search Exa · TonyDua/dsh-web-search-exa@083706b — Exa-powered web search exposed to DSH as agent tools and Web settings.

    • Evidence: manifestpatch · Identity: @tonydua/dsh-web-search-exa
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials · Review: DSH peers declare rc.6 while the Cordis range remains rc.1; runtime was not tested.
  • DSH Free Search · zhouzhencheng07/dsh-free-search@2336dad — A keyless multi-source Web search provider wired into the native DSH Web seam.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: web-search external-network provider-fallback identity-collision · Review: The npm identity maps to another repository, so this record is pinned to the author's documented Git source and does not claim that package.

Memory

  • DSH Memory · chenhw7/dsh-memory@e5e35ce — A persistent cross-session memory bundle with storage, tools, extraction, review, and context injection.

    • Evidence: manifestpatch · Identity: @chenhw7/dsh-memory
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: persistent-memory filesystem-write model-tools context-injection prepare-build github-only · Review: GitHub installation requires an explicitly allowed prepare build and mixed rc.5 peer declarations; no build, storage, extraction, or context injection was executed.
  • DSH Vibe Math · ChongCyrus/Vibe-Mathematics@e77c7eb — Multi-agent mathematical problem-solving & verification frameworks for DeepSeek Harness — TWO agent presets in one install: vibe-math-v1 (classic pipeline: brainstorm → solver iteration → multi-verifier debate → Verified) and vibe-math-v2 (new probability-driven architecture: qs.json + Propos knowledge base + explorer→solver→review/debate verdict). Installing this bundle auto-installs both presets into the DSH preset root.

    • Evidence: manifestpatch · Identity: dsh-vibe-math
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Self Memory · cyanxi69-jpg/dsh-self-memory@5c58b33 — A file-backed memory plugin with weighted keyword recall, generalized problems, and contradiction-aware solutions.

    • Evidence: manifestpatch · Identity: dsh-self-memory
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: persistent-memory filesystem-write keyword-search context-injection local-install · Review: The fixed source documents local-directory installation and stores generalized problem history on disk; no memory import, retrieval, or write was performed.
  • DSH AgentMemory · elementor-i/dsh-agentmemory@4a4c124 — Bridges DSH memory tools, activity capture, and context injection to a local AgentMemory REST server.

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-agentmemory
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: persistent-memory local-http-client model-tools activity-capture context-injection github-only · Review: The plugin requires a separately running local AgentMemory service and exposes a broad HTTP escape tool; no service call, capture hook, or prompt injection was executed.
  • DSH SGME · freehul/sgme@d5d98a6 — Bridges DSH agents to the SGME shared long-term memory service over HTTP.

    • Evidence: manifestpatch · Identity: dsh-sgme
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: long-term-memory external-network model-tools commands prepublish-build · Review: The nested fixed source and npm identity both expose 0.2.0; repository documentation maps the root Git wrapper to it, and no memory request, command, tool, or prepublish build was executed.
  • DSH Native Memory · highland0971/dsh-native-memory@270e235 — Workspace-scoped long-term memory with native storage, cross-session recall, approvals, and provenance.

    • Evidence: manifestpatch · Identity: dsh-native-memory
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: long-term-memory session-data approval-gate storage-domain prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • iHow Memory · iHow1/dsh-ihow-memory@c530943 — A local-first shared memory plugin exposed to DSH through an MCP client.

    • Evidence: manifestpatch · Identity: dsh-ihow-memory
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: long-term-memory mcp local-service filesystem-write prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Layered Memory · JunNanLYS/dsh-layered-memory@6e06980 — L0~L3 分层蒸馏记忆插件 for DeepSeek Harness:自动捕获对话(L0)、抽取原子记忆(L1)、整合场景块(L2)、蒸馏核心画像/团队方法论(L3),并在模型步骤前自动召回注入。移植自 MemoryCore (TencentDB Agent Memory) 的管线设计。

    • Evidence: manifestpatch · Identity: dsh-layered-memory
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection database system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Session Summarizer · KhalilYamber/dsh-session-summarizer@7a115c3 — Reads recent or selected sessions and generates a compact context summary.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data summarization model-request local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Context Structurer · kkkkkklze/dsh-context-structurer@0420f4c — Splits conversations into typed subcontexts and indexes them with a structured table of contents.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data context-index filesystem-write local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Unified Agent Memory · Noelune/unified-agent-memory@b6a879c — A unified memory layer for retaining and retrieving agent knowledge across work.

    • Evidence: manifestpatch · Identity: dsh-unified-agent-memory
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: persistent-memory · Review: Manifest declares DSH tools rc.6 peers; runtime compatibility was not tested.
  • Folio DSH Tools · nyantused-cpun/folio@91f3d36 — Model tools and guards that expose the Folio memory and quality CLI through a Python subprocess.

    • Evidence: manifestpatch · Identity: @nyantused/folio-dsh-tools
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: long-term-memory model-tools subprocess filesystem-write guard · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Simple Wiki Memory · rainow/dsh-simple-wiki-memory@563989a — Maintains a Git-backed wiki memory workspace with reference, pending, archive, and memory-log areas.

    • Evidence: manifestpatch · Identity: dsh-simple-wiki-memory
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: persistent-memory filesystem-write git-repository system-prompt github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Recall · Relistencode/dsh-recall@23f9103 — Local offline literal, fuzzy, and semantic search over original conversation history.

    • Evidence: manifestpatch · Identity: dsh-recall
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data local-search semantic-search filesystem-read · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Rag · satan9394/dsh-rag@2dcd65e — RAG 检索增强生成:向量数据库、嵌入、语义搜索、减少幻觉、来源引用。受 wshobson/agents(38k★ MIT)启发。

    • Evidence: manifestpatch · Identity: dsh-rag
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Knowledge · Soren-ABT/dsh-knowledge@a0ad107 — Manages document knowledge bases with chunking, embeddings, retrieval, model tools, and a browser panel.

    • Evidence: manifestpatch · Identity: dsh-knowledge
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: knowledge-base document-processing filesystem-write embeddings external-network model-tools client-injection prepare-build · Review: The fixed source is 0.2.11 while npm exposes 0.2.12 from the same repository; no build, parsing, embedding, retrieval, storage, or tool ran.
  • DSH Engramory · tinqiao-oss/engramory@4a9b392 — Curated file-based long-term memory with Markdown notes, a shared plain-file store, and a deterministic index cap.

    • Evidence: manifestpatch · Identity: dsh-engramory
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: long-term-memory filesystem-read filesystem-write guard · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • W117C DSH Memory · W117C/dsh-memory@78fce61 — Implements a cognitive memory system with SQLite vector storage, local embeddings, tools, and a web panel.

    • Evidence: manifestpatch · Identity: @dsh-plugins/memory
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: persistent-memory sqlite native-dependencies local-embeddings filesystem-write model-tools client-injection github-only · Review: A fixed GitHub source identity is documented; no native dependency, database, embedding model, memory tool, or browser panel was loaded.

Safety & Approvals

  • DSH Popper · 1473382/dsh-popper@d6130c0 — A falsification-driven session loop with claim gates, competing hypotheses, and an append-only evidence ledger.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: system-prompt tool-gating session-data filesystem-write github-only · Review: Git-source installation is documented, but the unpublished scoped package name and manifest repository field do not establish an official npm identity; no gate or session write was executed.
  • DSH Multi Folder · AngelosZou/dsh-multi-folder@420416b — DeepSeek Harness plugin: secondary working directories for a project. The agent keeps the primary workspace as cwd, gains equal write/exec permissions on configured secondary directories under workspace-write mode, and is notified of configuration changes at the next message boundary. Configurable from the session header AND from the session-creation page (before the first message) through a sessionless multiFolder remote API.

    • Evidence: manifestpatch · Identity: dsh-multi-folder
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection process-control system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Turn Approval · arrow949/dsh-turn-approval@5b4cbfd — Turn-scoped approval rules that expire after the current task.

    • Evidence: manifestpatch · Identity: dsh-turn-approval
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: permission-control · Review: Only a Cordis peer is declared, so DSH compatibility remains unknown.
  • YOLO Mode · CanGeng/yolo-mode@78bf20c — Adds a human-controlled unattended mode that can arm danger-full-access and never-approval with guards and notifications.

    • Evidence: manifestpatch · Identity: yolo-mode
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: permission-change danger-full-access approval-policy subprocess external-network credentials github-only · Review: The fixed bundle explicitly changes permission and approval posture; no arming, command guard, subprocess, webhook, desktop, or email behavior was executed.
  • DSH Island · cdxiaodong/dsh-island@c7cd407 — A macOS menu-bar island and whale companion that displays DSH sessions, tools, progress, and approval requests.

    • Evidence: manifestpatch · Identity: dsh-island
    • Licenses: repo unknown / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: native-executable subprocess tool-arguments approval session-data · Review: The source spawns a bundled macOS panel and forwards tool arguments, session paths, and approval decisions over a local socket; no native code or prepublish hook was executed.
  • DSH Write Gate · couldbeme/dsh-write-gate@de8c581 — Applies deterministic and optional model-judged commitment policies before agent write operations.

    • Evidence: manifestpatch · Identity: dsh-write-gate
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: pre-execution-policy model-tools external-network filesystem-read prepublish-build · Review: The fixed source and npm identity both expose 0.1.1 from the same repository; no policy file read, model judge, tool interception, build, or test was executed.
  • DSH Workspace Only · CsBpRd/dsh-workspace-only-plugin@a2682d3 — Adds a policy switch intended to confine file access for every sandbox mode to the session workspace.

    • Evidence: manifestpatch · Identity: dsh-workspace-only-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: approval-hook core-patch remote-installer filesystem-write policy-control · Review: The documented setup downloads an installer and patches DSH core plus another plugin to alter approval policy; the installer and patch scripts were not executed.
  • Handcraft Mode · DianranQian/handcraft-mode@470b907 — Adds a host-side tool gate and a client settings toggle that keeps the agent advisory-only.

    • Evidence: manifestpatch · Identity: handcraft-mode
    • Licenses: repo unknown / package MIT · lifecycle prepare · compatibility unknown
    • Signals: tool-gating settings-write client-injection prepare-build github-only · Review: The package declares MIT but no repository license file or npm package was found; the pinned root Git bundle is structurally complete, and no prepare build, tool gate, or UI was executed.
  • Deepseekeyes · dttxorg/deepseekeyes@e3a347b — Auditable vision and cross-platform Computer Use runtime for DeepSeek Harness with source-preserving evidence.

    • Evidence: manifestpatch · Identity: @dttxorg/deepseekeyes
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: external-network credentials client-injection mcp browser process-control financial prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Pentester · fb0sh/dsh-pentester@d4e0348 — Pentesting agent plugin for DeepSeek Harness

    • Evidence: manifestpatch · Identity: dsh-pentester
    • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: external-network prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Fact Gate · HiNEM66/dsh-fact-gate@04d6568 — Applies fact-forcing gates to edits, writes, PowerShell operations, and dangerous code-mode APIs.

    • Evidence: manifestpatch · Identity: dsh-fact-gate
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: tool-gating filesystem-write-policy shell-policy code-mode-policy github-only · Review: A pinned root Git source exists while npm has no package; no edit, write, shell, code-mode, or test behavior was executed.
  • DSH Auth · hxy91819/dsh-auth@ea8e827 — A single-account authentication bundle designed to run behind Nginx for DSH Web.

    • Evidence: manifestpatch · Identity: dsh-auth
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: authentication credentials reverse-proxy session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Iterate Plugin · jingzhao-l/iterate-plugin@eb5ccf5 — A DSH plugin that turns the iterate skill into an autonomous closed-loop harness for planning, parallel review, atomic fixes, validation, convergence, auto-stop, and meta-review.

    • Evidence: manifestpatch · Identity: iterate-plugin
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: external-network credentials client-injection process-control system-prompt prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Approval LLM · Letter2025/dsh-approval-llm@af70355 — An LLM-assisted approval layer for evaluating sensitive tool actions.

    • Evidence: manifestpatch · Identity: dsh-approval-llm
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: permission-control llm-call · Review: Broad peer ranges leave compatibility unknown; repository license detection was unavailable.
  • DSH Bundle Dedup Guard · Lstalu/dsh-bundle-dedup-guard@f6bccc7 — Checks profile bundle lists for duplicate loader entries before they cause DSH boot failures.

    • Evidence: manifestpatch · Identity: dsh-bundle-dedup-guard
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: profile-bundles configuration-read loader-guard prepack-check · Review: The fixed source and npm identity both expose 0.1.0 from the same repository; no profile read, loader interception, check, test, or prepack behavior was executed.
  • DSH Plugin Guard · MangShe3-0/dsh-plugin-guard@d8a5bae — Provides a read-only, offline-first static scanner for DSH plugin source and package metadata.

    • Evidence: manifestpatch · Identity: dsh-plugin-guard
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: security-scanning filesystem-read package-metadata model-tools github-only · Review: A matching fixed GitHub source exists while npm has no package; no target plugin, scanner, CLI, filesystem read, tool, or test was executed.
  • Upstream Radar · MicroMilo/upstream-radar@0519c00 — Dependency security monitoring for vulnerable transitive paths and breaking plugin updates.

    • Evidence: manifestpatch · Identity: upstream-radar
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · compatibility unknown
    • Signals: dependency-audit vulnerability-data external-network filesystem-read prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Sandbox Micro · omdsh-dev/dsh-sandbox-micro@31cbb2f — DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction

    • Evidence: manifestpatch · Identity: @deepseek-ai/dsh-sandbox-micro
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: external-network prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Risk Rule Design · pypcfx-glitch/risk-rule-design@3169f80 — DeepSeek Harness 第三方插件:金融风控规则挖掘。数据质检、连续变量阈值遍历、单规则挖掘、逐层遍历树并行(OR)组合搜索(F1 平衡最优)并输出自包含 HTML 分析报告。纯 JS 零依赖。

    • Evidence: manifestpatch · Identity: dsh-plugin-risk-rule-design
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Check · stimQQ/dshplugins@b48002d — Audits installed plugins for broken packages, stale DSH pins, and install-time code, then drafts repair issues.

    • Evidence: manifestpatch · Identity: dsh-plugin-check
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-audit dependency-audit lifecycle-scan issue-drafting · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Prior Probe · SuTang-vain/dsh-self-harness-tools@373b454 — Frozen probe batteries with deterministic offline scoring and optional single-shot provider calls.

    • Evidence: manifestpatch · Identity: dsh-prior-probe
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: evaluation regex-scoring model-tools external-network credentials · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DeepSeek Harness Auth · taichuy/deepseek-harness-auth@5399726 — A fail-closed password authentication proxy bundle for the DSH Web profile.

    • Evidence: manifestpatch · Identity: deepseek-harness-auth
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: authentication reverse-proxy credentials prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Trust Center · TonyWang-hub/dsh-plugin-trust-center@ba0b0aa — Evidence-first static inspection, compatibility checks, quarantine, receipts, snapshots, and controlled promotion for DSH plugins.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: plugin-audit quarantine sbom snapshot prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Defensive Prompt Injection · Tough-Respawn/defensive-prompt-injection@7384be5 — A fail-closed action gate that applies defensive prompt-injection rules inside DSH.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: prompt-injection-defense approval-gate filesystem-read local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Auth Plugin · v1xingyue/dsh-auth-plugin@dec45bf — Adds password, OAuth, Solana, and EVM-wallet authentication to DSH Web.

    • Evidence: manifestpatch · Identity: dsh-auth-plugin
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: authentication oauth wallet-auth credentials client-injection prepack-check · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH AutoGate · wangxing-git/dsh-autogate@dad7c04 — A workspace-sandboxed automatic approval tier using deterministic rules, LLM adjudication, and human escalation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: approval-gate sandbox-policy model-request human-escalation prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Whale Status · WhaleHarness/WhaleHarness@1bf6c4c — Checks site health, TLS, DNS, tarball integrity, local plugin verification, and update state.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: site-health tls dependency-audit integrity-check external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Vet · wulun811/dsh-plugin-vet@2ef0b8d — A plugin trust pipeline combining deterministic scans, runtime sentinels, audit skills, and a GUI shield.

    • Evidence: manifestpatch · Identity: @jieai/dsh-plugin-vet
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: plugin-audit runtime-monitor filesystem-skill client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Remote · xgone/dsh-remote@92e59d1 — Adds a login gate, MFA, signed sessions, role controls, and remote-friendly directory selection to DSH Web.

    • Evidence: manifestpatch · Identity: @xgone/dsh-remote
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: authentication password-storage totp session-cookies role-based-access filesystem-write web-route client-injection high-trust-surface · Review: The fixed source is 0.1.4 while npm exposes 0.1.5 from the same repository; no bootstrap account, password hash, MFA, cookie, access gate, or filesystem action was executed.
  • DeepSeek Peak Blocker · zisekongling/deepseek-peak-blocker@db54633 — Intercepts DeepSeek Official requests during configured peak windows and asks the user to continue or cancel.

    • Evidence: manifestpatch · Identity: deepseek-peak-blocker
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: model-interrupt request-gating user-confirmation agent-events web-route client-injection github-only · Review: The repository documents fixed GitHub-source installation; no request interception, bypass command, user decision, HTTP endpoint, or browser UI was executed.
  • DSH Poison Guard · zoahdev/dsh-poison-guard@7be8ffd — A pre-install supply-chain scanner using AST analysis, deobfuscation, and heuristics for exfiltration and dynamic code.

    • Evidence: manifestpatch · Identity: dsh-poison-guard
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: supply-chain-scan ast-analysis deobfuscation filesystem-read prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Integrations

  • Chicheng Gate · 534119219/chicheng-gate@155dbf6 — Adds LAN and tunneled DSH panel access with a password gate, trusted-host configuration, and managed frpc connectivity.

    • Evidence: manifestpatch · Identity: chicheng-gate
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: remote-access credentials remote-binary-download subprocess filesystem-write · Review: Static source shows frpc download with checksum verification, archive extraction, credential storage, subprocess launch, and DSH restart paths; none were executed.
  • DSH Custom Provider Reasoning · 534119219/dsh-custom-provider-reasoning@86ae352 — Adds selectable reasoning-effort metadata to hand-declared custom provider models.

    • Evidence: manifestpatch · Identity: dsh-custom-provider-reasoning
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: model-routing provider-metadata settings-write client-injection github-only · Review: GitHub dependency installation is documented; provider metadata and settings changes were reviewed statically and were not applied.
  • DSH Notify Win · Andyqwe44/dsh-notify-win@a26c182 — Shows native Windows task and question notifications, flashes the taskbar, and can return toast answers to DSH.

    • Evidence: manifestpatch · Identity: dsh-notify-win
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: native-executable powershell subprocess question-data filesystem · Review: The package ships an executable plus PowerShell and VBScript helpers and spawns notification processes; no native helper, subprocess, question flow, or prepublish hook was executed.
  • DSH QQ Remote · ASAKAFENG/dsh-qq-remote@b724335 — Controls DSH over a OneBot QQ bridge with remote commands, task dispatch, screenshots, chat, sessions, and progress events.

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-qq-remote
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: remote-command-execution external-network credentials screenshot session-data subprocess · Review: The fixed source exposes remote command, screenshot, session, file, credential, and subprocess surfaces through QQ; its separate installer and all runtime paths were not executed.
  • DSH Weave · baixianger/dsh-weave@2e71605 — Connects DeepSeek Harness nodes through a private peer-to-peer weave protocol.

    • Evidence: manifestpatch · Identity: dsh-weave
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: peer-to-peer external-network filesystem-write client-injection · Review: The fixed source, patch, licenses, matching npm gitHead and install identity were reviewed statically; networking and storage were not executed.
  • DSH WeChat Pro · bwhite55/dsh-wechat-pro@c726696 — Connects WeChat contacts to real DSH workspaces, sessions, prompts, approvals, event streams, and media transfers.

    • Evidence: manifestpatch · Identity: dsh-wechat-pro
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials session-data approval file-transfer filesystem-write · Review: The package uses wildcard DSH peers and handles WeChat credentials, prompts, approvals, session events, and media files; none were runtime-tested.
  • DSH CodeBuddy Auth · cainiao1992/dsh-codebuddy-auth@c684e73 — Adds CodeBuddy browser OAuth, token refresh, credential storage, and model synchronization to a DSH provider route.

    • Evidence: manifestpatch · Identity: dsh-codebuddy-auth
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: oauth browser-login credentials external-network model-provider github-only · Review: A matching fixed GitHub source exists while npm has no package; no login flow, token refresh, credential write, or model synchronization was executed.
  • DSH OpenCode · chiro2001/dsh-oc@1ed1c51 — Bridges DSH sessions to an OpenCode terminal interface with model credentials, filesystem access, and native runtime support.

    • Evidence: manifestpatch · Identity: @chiro2001/dsh-oc
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: external-application remote-binary-download subprocess credentials filesystem session-data · Review: The Git-source bundle declares rc.6 peers and can download or launch an OpenCode runtime while exposing credentials, files, and sessions; none of those paths was executed.
  • DSH Gateway · clarknu/dsh-gateway@56c4462 — Provides an HTTPS, cookie-authenticated, WebSocket-capable reverse gateway for the local DSH Web surface.

    • Evidence: manifestpatch · Identity: dsh-gateway
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: tls https-server websocket reverse-proxy credentials filesystem-write · Review: The fixed source is 1.0.0 while npm exposes 1.3.4 from the same repository; no listener, certificate generation, credential check, proxy, or WebSocket was executed.
  • DSH Collab Sync · cxxy161/dsh-collab-sync@22945f8 — Coordinates multiple clients on one DSH backend with writer locks, session-log repair, remote access settings, and collaboration partitions.

    • Evidence: manifestpatch · Identity: dsh-collab-sync
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: session-data filesystem-write data-repair remote-access configuration-write · Review: Broad DSH version ranges are declared and the source can repair compressed session logs, change host exposure, and write configuration; none was executed.
  • DSH Channel · ddrwin/dsh-channel@13629df — Adds heartbeat discovery and cross-session messaging between agents hosted by one DSH Desktop instance.

    • Evidence: manifestpatch · Identity: dsh-channel
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: cross-session-messaging session-data model-tools settings-read prepublish-build github-only · Review: A matching fixed GitHub source exists while npm has no package; no heartbeat, session message, tool registration, build, or prepublish behavior was executed.
  • DSH QQBot Community · DLive/dsh-qqbot-community@c65813f — Connects QQ Official Bot conversations to DSH sessions, prompts, event streams, and media handling.

    • Evidence: manifestpatch · Identity: dsh-qqbot-community
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: external-network credentials websocket session-data file-transfer prepublish-build · Review: The public package maps to this repository and the source connects to QQ with credentials while forwarding messages and media; no network, file, session, or prepublish action was executed.
  • DSH MCP Bridge · Edge-Echo/dsh-mcp-bridge@7768dc3 — A bridge for exposing MCP servers and tools through a DSH Web bundle.

    • Evidence: manifestpatch · Identity: dsh-mcp-bridge
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: mcp subprocess external-tools · Review: Web bundle structure was confirmed; the README records a separate headless dependency limitation.
  • DSH Origin Plugin · Fantasality/dsh-origin-plugin@778f85d — Drive Origin scientific plotting from DeepSeek Harness AI chat via MCP - write data, plot line/scatter/column, export PNG/SVG.

    • Evidence: manifestpatch · Identity: dsh-origin-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection mcp process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Voice Info · flyingtimes/dsh-voice-info@819bd53 — Context-aware turn summaries and alerts spoken through a Bluetooth speaker using a local CLI.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: audio bluetooth subprocess session-data filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH API Quota · ganfne123/dsh-plugin-api-quota@a571a35 — A sidebar panel that checks and displays DeepSeek API-key balance and quota.

    • Evidence: manifestpatch · Identity: dsh-plugin-api-quota
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: credentials external-network account-balance client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Web Remote · godchen520/dsh-web-remote@c852cee — Remote Web access through Cloudflare Quick Tunnels or local HTTP, with token proxying and a mobile control panel.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: remote-access external-network authentication local-web-server cloudflare · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Notion Manager · Graffiti-yH/dsh-notion-manager@4cc011a — Exposes Notion search, pages, databases, blocks, comments, and users as DSH agent tools.

    • Evidence: manifestpatch · Identity: dsh-notion-manager
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: notion-api credentials external-network model-tools content-write github-only · Review: The fixed source supports credential references and broad Notion read and write tools; no token, workspace request, or content mutation was performed.
  • DSH YZJ Bridge · GuoxinShan/dsh-yzj@1415eae — A profile bundle connecting Yunzhijia CLI capabilities, model tools, rich cards, and a workspace panel.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: enterprise-messaging model-tools client-injection credentials subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Minecraft Launcher · hellosky983/dsh-mc-launcher@f68a7cd — A full-screen Minecraft launcher with Microsoft login, version installation, and game launch.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials filesystem-write subprocess game-launcher · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Orbis Remote DSH · icodesign/orbis@b9a8aad — Remote DSH workspace access through Orbis, including session, directory, credential, and provider integration.

    • Evidence: manifestpatch · Identity: @orbisapp/remote-dsh
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: remote-access credentials session-data filesystem-write external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Connect · IvanWu2015/dsh-connect@838492d — Channel-agnostic messaging bridge core for DeepSeek Harness (DSH): binds chat channels to DSH agents, streams replies, and pushes work summaries

    • Evidence: manifestpatch · Identity: dsh-connect
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection process-control email · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH ChatNode WeChat · Jesse-njx/dsh-chatnode-wechat@a724da3 — A WeChat chat-node integration for connecting conversations to DeepSeek Harness.

    • Evidence: manifestpatch · Identity: dsh-chatnode-wechat
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: external-network messaging source-build · Review: A prepare build can execute on source install; rc.6 support is documented but not declared as peers.
  • DSH DeepSeek Billing · Jolly-J/dsh-deepseek-billing@1c4642a — A sidebar balance display and per-session DeepSeek cost estimator.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: account-balance credentials session-data external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Agent Sync · kuaiyukuaikuai/dsh-agent-sync@9d97956 — DSH plugin that scans other AI agents on this machine (Codex, Claude Code, cc-switch, custom sources) and one-click syncs their MCP servers and skills into DeepSeek Harness.

    • Evidence: manifestpatch · Identity: dsh-agent-sync
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection mcp process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Local Agent Bridge · Leshm0321/dsh-plugin-local-agent-bridge@8fdd8a1 — Adds a DSH browser control surface for host-native Codex and Claude Code sessions.

    • Evidence: manifestpatch · Identity: dsh-plugin-local-agent-bridge
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: external-agent subprocess browser-control session-data filesystem-write client-injection prepare-build github-only · Review: The root package is private and npm has no identity, but a pinned Git bundle exists; no Codex or Claude process, browser control, session storage, build, or test was executed.
  • DSH Provider Quick Config · lo2589/deepseek-harness-provider@bff762a — A send-button panel for configuring provider routes, models, API keys, and local-model synchronization.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
    • Signals: provider-config credentials external-network configuration-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Manager · miaooon/dsh-plugin-manager@24eb36f — 第三方插件管理(设置 → 插件页内):list installed third-party plugins, one-click enable/disable (profile patch), export selected plugins to an offline zip, and import exported zips without any network.

    • Evidence: manifestpatch · Identity: dsh-plugin-manager
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: client-injection system-prompt · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • MMX Quota Tool · mtty-ai/mmx-quota-tool@4b3a534 — A MiniMax token-plan quota indicator and detail panel for DSH Web.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: account-quota credentials external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Open Design DSH Runtime · nexu-io/open-design@62483a1 — An integrity-pinned profile runtime that connects Open Design to a user-installed DSH over JSONL stdio.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: stdio subprocess profile-bundle session-data integrity-check · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Gauge · noone89A/dsh-gauge@ca176d7 — Cache-hit, token-usage, price-window, and session cost statistics for DSH Web.

    • Evidence: manifestpatch · Identity: dsh-gauge
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: token-meter cost-estimation session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Lark Bot · PlutoKeating/dsh-lark-bot@6a5be5b — A Feishu and Lark bridge with streaming cards, project workspaces, approvals, and schedules.

    • Evidence: manifestpatch · Identity: dsh-lark-bot
    • Licenses: repo AGPL-3.0 / package AGPL-3.0 · lifecycle prepublishOnly · compatibility unknown
    • Signals: enterprise-messaging credentials session-data approval-forwarding external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH WebGate · pppolf/dsh-webgate@9ac449a — Remote access over LAN QR links, Cloudflare tunnels, or FRP reverse proxy with a login portal.

    • Evidence: manifestpatch · Identity: dsh-webgate
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: remote-access cloudflare reverse-proxy authentication external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH XiaoTangYuan Game · qimidandapigu/dsh-xiaotangyuan-game@52baef4 — A game AI runtime that detects and installs supported game adapters from verified releases.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: game-integration external-download filesystem-write subprocess credentials · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Awesome Ios Sim · qubyyang/awesome-ios-sim@dc3e641 — Simulator State as Code for iOS developers, CI pipelines, MCP clients, and DeepSeek Harness

    • Evidence: manifestpatch · Identity: @qubyyang/awesome-ios-sim
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection mcp process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Call Me · radres/dsh-plugin-call-me@af1a21b — Places a real phone call so spoken questions and replies can steer the active agent run.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: telephony audio credentials external-network agent-steering · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Rapid MLX DSH Provider · raullenchai/rapid-mlx-dsh-provider@b14ada2 — Registers a local Rapid MLX server as a DSH language-model provider route.

    • Evidence: manifestpatch · Identity: @rapid-mlx/dsh-provider
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: llm-provider local-network model-discovery github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH RingCentral · ringclaw/dsh-ringcentral@42b76e9 — Connects DSH sessions to RingCentral Team Messaging as an IM channel.

    • Evidence: manifestpatch · Identity: dsh-ringcentral
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: ringcentral im-channel external-network credentials prepublish-build · Review: The fixed source is older than the current matching registry release; identity and evidence were reviewed statically and no messaging or build action ran.
  • DSH Codex Harness · shuind/dsh-codex-harness@398852d — Provides a Codex-compatible harness and preset installer for GPT models inside DSH.

    • Evidence: manifestpatch · Identity: @shuind/dsh-codex-harness
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: codex-provider model-tools preset-install filesystem-write prepare-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Notify Center · SingleOne/dsh-notify-center@50778f7 — Native desktop and webhook notifications for agent, session, title, and approval events.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: desktop-notification webhook session-data approval-events prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Godot Bridge · Smalldy/godot-bridge@ac81927 — Launches and drives a running Godot game through its TCP interaction server using native agent tools.

    • Evidence: manifestpatch · Identity: godot-bridge
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: godot tcp game-integration subprocess model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Bottom Info Bar · songoao25/bottom-info-bar@06a554e — A composer status bar for provider, model, live balance, peak pricing, countdowns, and spend totals.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: account-balance cost-estimation credentials session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH MoodBall · sundusk/dsh-moodball@f6d1640 — Serves agent activity state to a companion macOS desktop mood indicator.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · declares rc.6 peers
    • Signals: desktop-app session-data local-web-server macos · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Kabutack · SunQingyuan0/Kabutack@3e257a2 — 统一管理 DSH 插件/Skill/MCP,支持角色化动态装载与切换

    • Evidence: manifestpatch · Identity: @dsh-external/kabutack
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle postinstall · mixed peer ranges
    • Signals: external-network client-injection mcp process-control postinstall · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Gateway Core · temotee2103/dsh-overdrive@0f865f2 — dsh-overdrive: DeepSeek Harness plugin — multi-platform chat bridge core (trajectory / approval / multi-agent)

    • Evidence: manifestpatch · Identity: @dsh-overdrive/gateway-core
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials docker · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Bridge · Totoro-qaq/dsh-plugin-bridge@1afbdae — DeepSeek Harness Cordis bundle for cross-preset session migration via fixed-schema handoff summaries

    • Evidence: manifestpatch · Identity: dsh-plugin-bridge
    • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
    • Signals: external-network credentials client-injection process-control system-prompt prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH MQTT · UllrAI/dsh-mqtt@38b0caf — Provides an MQTT protocol driver and agent-worker gateway for DSH.

    • Evidence: manifestpatch · Identity: dsh-mqtt
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: mqtt external-network agent-worker message-routing prepare-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH LLM USTC · USTC-XeF2/dsh-llm-ustc@6290fbb — A USTC language-model provider with a provider-scoped iWAN tunnel.

    • Evidence: manifestpatch · Identity: dsh-llm-ustc
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: model-provider credentials network-tunnel external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH LLM NewAPI · wenzetan/dsh-llm-newapi@99599d3 — Registers a NewAPI OpenAI-compatible chat-completions provider route in DSH.

    • Evidence: manifestpatch · Identity: dsh-llm-newapi
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: llm-provider openai-compatible external-network credentials prepack-build · Review: The fixed source is the registry next release while the stable tag has the same base version; no provider request, credential access, or build ran.
  • DSH OpenCode Go Usage · Xenia0922/dsh-opencode-go-usage@f7a7192 — A draggable dashboard for OpenCode Go quota, per-request usage, and spending.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: account-quota cost-estimation external-network client-injection identity-collision · Review: The npm identity maps to another repository, so this record is pinned only to the documented local source and does not claim the npm package.
  • DSH NebulaGraph · xiajingchun/dsh-nebulagraph-v5@0f95d35 — Connects DSH to NebulaGraph 5 and exposes GQL query results plus graph visualization data.

    • Evidence: manifestpatch · Identity: dsh-nebula
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: nebulagraph database-query external-network credentials model-tools prepare-build · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Codex · Yan-Zero/dsh-codex@621b218 — Connects ChatGPT OAuth, Codex models, search, remote image reading, and image generation to DSH.

    • Evidence: manifestpatch · Identity: dsh-codex
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · mixed peer ranges
    • Signals: external-network credentials llm-call web-search image-generation · Review: The fixed bundle is structurally valid; broad wildcard DSH peers and OAuth/model network access require independent compatibility and trust review.
  • DSH Bridges · yhlooo/dsh-bridges@3110789 — Imports project conventions from Claude Code, Codex, OpenCode, CodeBuddy, Pi, Gemini CLI, and Cursor.

    • Evidence: manifestpatch · Identity: dsh-bridges
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: project-import filesystem-read filesystem-skill prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Cost Usage Status · Zenjibad/deepseek-cost-usage-status-plugin@3d6f68e — A live composer dashboard for model, peak pricing, session cost, burn rate, and account balance.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: account-balance cost-estimation credentials session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH IM Gateway · zhuiyueya/dsh-im-gateway@f4b166d — A unified session, approval, allowlist, and configuration gateway for more than twenty messaging channels.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: instant-messaging credentials session-data approval-forwarding prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Model Profile · ztlovelsw/dsh-model-profile@1e3ddd5 — Edits per-model image support and reasoning efforts in the DSH Web model catalog.

    • Evidence: manifestpatch · Identity: @ztlovelsw/dsh-model-profile
    • Licenses: repo unknown / package BSD-3-Clause · lifecycle prepare · declares rc.6 peers
    • Signals: model-config configuration-write client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Notify Bell · ZYar-er/dsh-notify-bell@21c0747 — Semantic BEL or WAV notifications for completion, blocking, permission, questions, and errors.

    • Evidence: manifestpatch · Identity: dsh-notify-bell
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: audio desktop-notification agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH LAN Fix · zynieie/dsh-lan-plugin@1b16999 — A LAN compatibility patch that provides a cryptographic RPC-ID fallback for insecure browser contexts.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: lan-access client-patch cryptography local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Skills & Methods

  • Creght Skills · creght-dev/skills@5e20ab3 — A repository of agent skills packaged with a native DSH bundle.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: skills git-source · Review: No DSH peers are declared, so compatibility remains unknown.
  • DSH Plugin Guide · Fectivnfy112357/dsh-plugin-guide@48da363 — A dual-format guide and filesystem skill for building DSH and Agent Plugins packages.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-skill plugin-development github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Aegis · GanyuanRan/Aegis@21b27d2 — A software-engineering method pack for planning, debugging, prompt hygiene, verification, and repair tracking.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: filesystem-skill missing-package-license · Review: Repository license is MIT; the fixed package manifest has no license field.
  • Project AI Docs · igugyj/project-ai-docs@811e729 — A project-local AI documentation protocol that maintains a docs/.ai knowledge base.

    • Evidence: manifestpatch · Identity: project-ai-docs
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: filesystem-skill filesystem-read filesystem-write documentation-generation · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Ten Methods Tutor · jmwasky-creative/ten-methods-tutor@5e76ea2 — A deterministic local arithmetic tutor with guided exercises and parent-facing recaps.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: education local-web-server session-data model-tools filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH LookatStudy · Kaiji-Z/dsh-plugin-lookatstudy@298dde9 — Turns markdown, folders, or GitHub learning repositories into guided courses with mastery and spaced repetition.

    • Evidence: manifestpatch · Identity: dsh-plugin-lookatstudy
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: guided-learning filesystem-read github-import persistent-state model-tools web-ui · Review: The fixed source matches npm 0.9.0 and declares broad peer ranges; no repository import, course generation, learner state, tool, or dashboard was executed.
  • Gongwen Skill · linhut/gongwen-skill@e5a277e — A Chinese official-document workflow for GB/T 9704 checks, repair, optimization, templates, and layout injection.

    • Evidence: manifestpatch · Identity: gongwen-skill
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-skill document-processing subprocess filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Agent Skills · minivv/dsh-agent-skills@f753b09 — Discovers and manages Agent Skills for Claude Code, Codex, Gemini CLI, and other tools from DSH.

    • Evidence: manifestpatch · Identity: dsh-agent-skills
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: skill-management filesystem-read filesystem-write client-injection prepare-build · Review: The fixed source is 0.1.2 while npm exposes 0.1.7 from the same repository; no build, skill scan, or preset write was executed.
  • DSH HTB Skills · qingsiweisan/dsh-htb-skills@d04c3d0 — A versioned Hack The Box penetration-testing skill library with tiered routing and hidden references.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-skill security-testing prompt-injection local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Wiki · skillre/dsh-wiki@b6dfa3a — A DSH bundle that exposes a repository-backed wiki skill and documentation workflow.

    • Evidence: manifestpatch · Identity: dsh-wiki
    • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
    • Signals: filesystem-skill documentation package-bundle · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Lazeword · xczhanjun/lazeword@c65f598 — Offline vocabulary learning with FSRS scheduling, Anki sync, subject decks, and learning games.

    • Evidence: manifestpatch · Identity: dsh-lazeword
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: education spaced-repetition anki browser-storage prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Math Research DSH · xsoc1/math-research-dsh@a5e6373 — A rigorous mathematics research suite with four agent skills, Lean verification, tests, and environment diagnostics.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: filesystem-skill mathematics formal-verification environment-diagnostics · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Furrhaven Toolbox · YJLZSL/dsh-furrhaven-toolbox@473cdd6 — Character-card authoring, validation, worldbook simulation, regex testing, vision, and roleplay tools.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
    • Signals: character-authoring model-tools vision subprocess filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH J-Space Warm · zbsph/dsh-j-space-warm@6060c0f — Installs J-Space anchored warm-up agent presets with two-phase bootstrap and drift checks.

    • Evidence: manifestpatch · Identity: dsh-j-space-warm
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: agent-presets system-prompt filesystem-write drift-detection github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.

Discovery & Management

  • DSH Plugin Market · 2160039878-cyber/dsh-plugin-market@e897f67 — A verified-first Web catalog that searches GitHub plugin leads and gates install-command copying behind structural checks.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: github-search external-network install-command-copy client-injection identity-collision · Review: The fixed Git-source bundle is confirmed; the unscoped npm name resolves to a different repository, so no npm identity is listed and no remote check or install action was executed.
  • DSH Plugin Hot Toggle · 5102a/dsh-plugin-hot-toggle@15b5f24 — Starts and stops installed Cordis plugin entries from DSH Web and persists the selected state across restarts.

    • Evidence: manifestpatch · Identity: dsh-plugin-hot-toggle
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: dynamic-loading package-management configuration-write client-injection high-trust-surface · Review: The package and patch identities align; dynamic loader control, persisted configuration writes, and the prepare build were not executed.
  • DSH Capability Index · 777-Zen/dsh-capability-index@08a4f48 — Injects per-step capability hints so agents can select installed plugins from an indexed trigger table before acting.

    • Evidence: manifestpatch · Identity: dsh-capability-index
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: runtime-context prompt-injection plugin-inventory · Review: The root bundle is distinct from the repository's demo fixture; no DSH peer range establishes runtime compatibility.
  • DSH Plugin Audit · 863683348/dsh-plugin-audit@2cbd6ab — Audits DSH plugin health through GitHub discovery, npm probes, static scanning, scoring, and a leaderboard.

    • Evidence: manifestpatch · Identity: dsh-audit
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network filesystem-read static-analysis web-ui model-tools source-behind-registry · Review: The fixed source is version 0.2.0 while npm now exposes 0.4.0 from the same identity; no repository sync, registry probe, scan, or model tool was executed.
  • DSH Safe Plugin Manager · AI-Scarlett/dsh-safe-plugin-manager@993cfd3 — A GitHub-only plugin catalog and guarded profile lifecycle manager with plans, confirmations, backups, checks, and rollback.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package UNLICENSED · lifecycle none · mixed peer ranges
    • Signals: package-management filesystem-write subprocess external-network high-trust-surface · Review: The private, UNLICENSED package is documented as GitHub-only; profile mutation, backups, subprocess execution, remote catalogs, and rollback were not executed.
  • DSH Plugin Console · AlexYin-Tongji/dsh-plugin-console@7c72201 — DSH Plugin Console: a verified community catalog and profile manager for DeepSeek Harness

    • Evidence: manifestpatch · Identity: dsh-plugin-console
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: external-network client-injection prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Failure Lens · ArmyWas/dsh-failure-lens@bc0a834 — Deterministic DeepSeek Harness Web client plugin that explains the Windows-sandbox spawn EPERM failure as a distinct Conversation Node.

    • Evidence: manifestpatch · Identity: dsh-failure-lens
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · compatibility unknown
    • Signals: subprocess filesystem external-network credentials client-injection native-helper process-control system-prompt prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Codsh Cli · Blackman99/codsh@1ed17e0 — A Claude Code-style coding agent for the terminal, composed on the DeepSeek Harness (dsh): interactive TTY surface, plan mode, approvals, custom commands, and session management over the dsh plugin runtime

    • Evidence: manifestpatch · Identity: codsh-cli
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
    • Signals: external-network credentials client-injection process-control system-prompt prepublish-only · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Web Billing · bpc-oss/dsh-web-billing@27f3750 — Tracks token cost, pricing windows, message ledgers, and provider account balance in DSH Web.

    • Evidence: manifestpatch · Identity: dsh-web-billing
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: billing-data token-meter external-network credentials filesystem-write client-injection · Review: The fixed source documents GitHub installation while npm has no package; pricing sync, credential resolution, balance requests, ledger writes, and prepublish checks were not executed.
  • DSH Plug Manager · Casually/deepseek-harness-plugs-manage@be8112f — DeepSeek Harness 插件管理器:发现 GitHub dsh-plugin topic 下的插件仓库,通过 dsh plugin 安装/移除/更新 profile 插件,并在 设置 → 插件 → 插件市场 标签页中浏览管理。

    • Evidence: manifestpatch · Identity: dsh-plug-manager
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Monitor · Coco-king/dsh-monitor@9d318dc — Shows session costs and configurable provider usage or quota data in the DSH web interface.

    • Evidence: manifestpatch · Identity: dsh-monitor
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: billing-data provider-usage external-network credentials filesystem-write client-injection · Review: The documented Git install tag resolves to the fixed commit and licenses and bundle structure are present; provider requests, credentials and UI code were not run.
  • DSH Hub Search · coderPerseus/dsh-hub@4dc755a — Adds tools for searching and inspecting plugin records in the remote DSH Hub catalog.

    • Evidence: manifestpatch · Identity: @dshhubs/plugin-search
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network remote-catalog plugin-metadata install-command-data · Review: The public package identity matches the source bundle and its tools read remote catalog metadata and installation text; no request or install was executed.
  • DSH Desktop Plugin Installer · deronghe/dsh-plugin-desktop-installer@210522b — Adds desktop settings controls for installing, enabling, disabling, removing, and restarting DSH plugins.

    • Evidence: manifestpatch · Identity: dsh-plugin-desktop-installer
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management subprocess profile-write desktop-restart local-http-server github-only · Review: GitHub installation is documented; its command execution, profile mutation, uninstall, and desktop restart surfaces were reviewed statically and not invoked.
  • DSH Market · dsh-market/dsh-market@3188f46 — An in-harness plugin market that can browse, install, update, and remove third-party packages.

    • Evidence: manifestpatch · Identity: dshmarket
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: package-management remote-registry high-trust-surface · Review: Package-manager control makes this a high-trust surface; listing is not an endorsement.
  • DSH Skill MCP Panel · Fishquito7/dsh-skill-mcp-panel@92a471d — Manages Skills and MCP servers from DSH Web settings and a companion panel CLI.

    • Evidence: manifestpatch · Identity: dsh-skill-mcp-panel
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: skill-management mcp-management filesystem-write subprocess configuration-write client-injection prepack-build · Review: A pinned root Git source exists while npm has no package; no skill or MCP mutation, subprocess, configuration write, client panel, or prepack build was executed.
  • DSH Skill Viewer · Fishquito7/dsh-skill-viewer@55c16e4 — A Web settings panel and CLI for listing, scoping, enabling, disabling, adding, and deleting skills.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: skill-management filesystem-write client-injection prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Index · GGigHub/dsh-plugin-index@41fcb76 — A GitHub-star-backed plugin browser with install, remove, update, and repair controls.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management external-network filesystem-write package-install github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Usage · GHJIVHIDD/dsh-plugin-usage@c352ba0 — Adds a real-time token and cost dashboard with pricing, estimates, and CSV or JSON export.

    • Evidence: manifestpatch · Identity: @deepseek-ai/dsh-plugin-usage
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: token-meter billing-data session-data client-injection data-export github-only · Review: The package uses the official namespace but npm has no matching identity, while the pinned root Git bundle is complete; no usage stream, pricing, export, or client UI was executed.
  • Harness Flow Hub · Harzva/harness-flow-hub@25b23c2 — An in-DSH flow hub prototype with transactional plugin installation, rollback, and browser UI.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: plugin-management package-install filesystem-write rollback client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Toggle · huntersxy/dsh-plugin-toggle@e11d57c — A settings-page switchboard that edits profile patches to hot-enable or disable third-party plugins.

    • Evidence: manifestpatch · Identity: dsh-plugin-toggle
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management filesystem-write configuration-edit hot-reload · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Go Balance · iamfromchangsha/dsh-go-balance@8d11fea — OpenCode Go subscription balance widget for DeepSeek Harness Web: rolling/weekly/monthly quota remaining, shown at the right end of the composer tool row.

    • Evidence: manifestpatch · Identity: dsh-go-balance
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Workspace Token Record · jasonyoungguang/DSH_plugins_calculate_token_fee@bb37cb3 — Projects per-workspace and per-session token usage and cost into a sidebar hover card.

    • Evidence: manifestpatch · Identity: workspace_token_record
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: token-meter billing-data session-projection workspace-data client-injection github-only · Review: The package declares MIT but no repository license file or npm package was found; no log fold, cost projection, workspace aggregation, or browser card was executed.
  • DSH Web Hot · jifeng15/dsh-web-restart@8ae1421 — A host lifecycle layer for installing, updating, enabling, disabling, and self-healing Web plugins without restart.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: plugin-management package-install filesystem-write hot-reload self-heal · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Tokstat · kongjianguan/dsh-tokstat@ebc851b — Adds token, latency, throughput, and cost statistics in a settings panel and terminal UI.

    • Evidence: manifestpatch · Identity: @kongjianguan/dsh-tokstat
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: token-meter session-log filesystem-read local-http client-injection terminal · Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no session log read, HTTP route, client panel, terminal, or build script was executed.
  • DSH Clipboard History · kuangre123/dsh-clipboard-history@20db300 — Clipboard history plugin for DeepSeek Harness: monitors the system clipboard and exposes recall/copy tools.

    • Evidence: manifestpatch · Identity: dsh-clipboard-history
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Codex Workflow · kui123456789/dsh-codex-workflow@3893b8d — DeepSeek Harness plugin that uses Codex to plan and review while DSH executes.

    • Evidence: manifestpatch · Identity: dsh-codex-workflow
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: credentials client-injection mcp process-control database · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Market · losebird/dsh-plugin-market@e441cdb — A community plugin-market dialog with bundle and ZIP-based one-click installation.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-marketplace package-install filesystem-write identity-collision client-injection · Review: The npm name maps to another repository, so this record is pinned to the author's documented Git source and does not claim that npm identity; installation was not executed.
  • DSH Dag Orchestrator · Luck9Star/dsh-dag-orchestrator@880a310 — Resumable multi-task parallel DAG orchestration plugin for the DeepSeek Harness: strict-validated static DAG specs, tick-driven reconcile, node:sqlite persistence with an event hash-chain, crash reconciliation on apply(), and one DAG task node = one programmatic subagent delegation via ctx.subagents.

    • Evidence: manifestpatch · Identity: dsh-dag-orchestrator
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-network credentials client-injection process-control database · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Ace Harness · lustresixx/dk-flow@5230052 — ACEHarness core as a DeepSeek Harness plugin: state-machine workflows, adversarial multi-agent review, templates, governance

    • Evidence: manifestpatch · Identity: dsh-ace-harness
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
    • Signals: external-network client-injection process-control system-prompt prepare prepack · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • Catalog Capabilities ZH · MeowTnT3r/catalog-capabilities-zh@1843ac3 — A Chinese capability catalog and orchestration adapter for inspecting and installing DSH plugins and skills.

    • Evidence: manifestpatch · Identity: catalog-capabilities-zh
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: capability-catalog plugin-management skill-management subprocess filesystem-write github-only · Review: The fixed source delegates installation to environment-provided plugin or skill managers and includes a Python catalog script; no inspection, subprocess, or install was run.
  • DSH Spend · nonewind/dsh-spend@43fb7b0 — Shows token usage, billing-plan statistics, and estimated spend in the DSH web interface.

    • Evidence: manifestpatch · Identity: dsh-spend
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: token-usage cost-estimation billing-data client-injection · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Usage Cost · PengPeng6845/dsh-usage-cost@d111291 — Token consumption and API cost reporting for the DeepSeek Harness: cost math over the tokenUsage projection, durable day/month aggregates, and the model-facing token_usage tool

    • Evidence: manifestpatch · Identity: dsh-usage-cost
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Plugin Hub · qomob/dsh@9b80e51 — Embedded and live GitHub plugin search, detail inspection, approval-gated installation, and a catalog tab.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-marketplace external-network package-install approval-gate identity-collision · Review: The npm name maps to another repository, so this record is pinned only to the documented Git subdirectory source and does not claim that package identity.
  • DSH Cost Glance · qqq85-ux/dsh-cost-glance@3587c20 — Estimates per-session DeepSeek API cost from model, cache, and time-of-day pricing signals.

    • Evidence: manifestpatch · Identity: dsh-cost-glance
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Extension Hub · Relistencode/dsh-extension-hub@3f9726e — A Web and CLI hub for skills, MCP servers, plugins, imports, marketplace discovery, and updates.

    • Evidence: manifestpatch · Identity: dsh-extension-hub
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management skill-management mcp package-install filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH WebUI Market Plugin · Sanqi-normal/dsh-webui-market-plugin@8b32828 — Adds a web plugin market for browsing, installing, and removing community DSH plugins.

    • Evidence: manifestpatch · Identity: @sanqi-normal/dsh-webui-market-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-market package-management external-network filesystem-write client-injection · Review: The fixed source is slightly behind the current matching registry release; no catalog fetch, package operation, filesystem write, or UI behavior ran.
  • DSH Plugin Marketplace · Scorp1o117/dsh-plugin-marketplace@d4f8b24 — A settings-page marketplace that browses, searches, and ranks the GitHub dsh-plugin topic.

    • Evidence: manifestpatch · Identity: dsh-plugin-marketplace
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: plugin-marketplace github-search external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • Oss Prompt Optimizer · seven282/oss-prompt-optimizer@2f5167d — DeepSeek Harness plugin bundle: optimize raw instructions into professional Role / Task / Context / Format prompts through the harness llm service

    • Evidence: manifestpatch · Identity: oss-prompt-optimizer
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: credentials client-injection system-prompt prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Course Logic Extractor · ShadowBruceMeaningLau/dsh-course-logic-extractor@73cefe8 — 闂傚倸鍊搁崐鎼佸磹閹间礁纾归柟闂寸绾剧懓顪冪€n亜顒㈡い鎰Г閹便劌顫滈崱妤€鈷掗梺缁樺笧閺咁偊骞夌粙娆惧悑闁割偒婢€缂冩洖鈹戦悩鑼闁哄绨遍崑鎾诲即閵忕姷鐤囬棅顐㈡处缁嬫垹澹曢幐搴濈箚闁靛牆鍊告禍楣冩⒑闂堟稒顥為悽顖涘浮閿濈偛鈹戠€n偅娅滈梺鍛婁緱閸撴瑩藟濮橆兘鏀介柨娑樺娴滃ジ鏌涙繝鍐ㄧ伌鐎规洜鎳撶叅妞ゅ繐鎳庡▓鐐翠繆閵堝繒鍒伴柛鐕佸灦瀹曟垿鍩¢崨顔惧幗闂佺鎻徊楣兯夋径鎰厽闁归偊鍓ㄩ煬顒勬煛鐏炵晫效鐎规洦鍋婂畷鐔碱敃閿濆棭鍟€闂傚倷绀侀幉锟犳晝閳哄懎鍨傞悹杞拌濞兼牠鏌ц箛姘兼綈閻庢碍宀搁弻鐔虹磼濡櫣鐟ㄥ┑顕嗙稻閸旀妲愰幘璇茬<婵ɑ鐦烽姀鈥茬箚妞ゆ劧绲跨粻鎾绘煟閿濆鏁遍悗闈涖偢瀵爼骞嬮悪鈧崬鐑樼節瀵伴攱婢橀埀顒佸姍瀹曟垿骞橀崜浣癸紡闂佽鍨庡畝鈧崥瀣⒑閸濆嫮鐏遍柛鐘崇墵閻涱噣骞嬮敃鈧粻娑㈡⒒閸喓鈯曟い鏂垮濮婄粯鎷呴崨濠傛殘闂佽崵鍠嗛崕鐢稿极閸愵噮鏁傞柛顐ゅ枎娴滄顪冮妶鍡楀Ё缂佺姵鍨块幃娆愮節閸ャ劎鍘繝鐢靛Т缁绘劙銆呴浣典簻闁挎柨鎼崝銈囩磼鏉堛劍灏伴柟宄版噽閹叉挳宕熼鐐叉辈闂傚倷绶氬褔鎮ц箛娑掆偓锕傚醇閵夘垳绋忛棅顐㈡处閹峰煤椤忓秵鏅滈梺鍛婃处閸撴瑧绮婇懜鍏哥箚闁绘劦浜滈埀顒佺墵楠炴劙鎮欓浣稿伎闁诲酣娼ч幗婊呯不閺冨牊鐓ラ柣鏂挎惈鏍¢梺鎶芥敱閸ㄥ潡寮诲☉妯锋婵鐗婇弫楣冩⒑閹惰姤鏁遍柛鏃€鐗滈幑銏犫槈閵忕姷鐓戞繝銏f硾閻ジ鎮块崟顒傜瘈缁炬澘顦辩壕鍧楁煛娴e壊鐓奸柣娑卞櫍瀹曞爼顢楅埀顒傜棯瑜旈幃褰掑箒閹烘垵顬堥梺閫炲苯澧伴柛瀣洴閳ユ棃宕橀鍢壯囨煕閳╁喚娈旀繛鍏煎灴濮婅櫣绮欏▎鎯у壉闂佸湱鎳撳ú銈夛綖韫囨梻绡€婵﹩鍓涢敍婊堟⒑闂堟稓澧曢柟铏姈缁傛帡骞栨担鍏夋嫼闂佸憡绻傜€氼厼锕㈤悧鍫㈢闁告瑥顦介悞浠嬫煙楠炲灝鐏╅柍瑙勫灦缁绘繈宕熼鐔哥帆闂傚倷绀侀幖顐⒚洪妸鈺佺;闁绘柨鍚嬮崑鍌涗繆閵堝懏鍣洪柍閿嬪笒闇夐柨婵嗗椤掔喖鏌i幒鏂夸壕闁靛洤瀚伴獮瀣攽閸ヨ埖锛嗘俊銈囧Х閸嬬偤宕濆▎鎾跺祦闁哄秲鍔嶆刊鎾煟閻旂⒈鏆掗柟顕嗙秮濮婄粯鎷呴崫鍕紦闂佺瀛╅悡鈥崇暦濠婂喚娼╂い鎺戭槺閸旂兘姊虹紒姗嗘當闁绘瀚粋宥咁煥閸喓鍙嗗┑鐐村灦閿氭い蹇婃櫇缁辨帡鎮╅崘娈?preset as a dsh plugin: given a course's materials, reverse-engineer its instructional design into a self-consistent logical chain. Installs the course-logic-extractor preset into the DSH preset roster automatically.

    • Evidence: manifestpatch · Identity: dsh-course-logic-extractor
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Edit Approval · SiriLee/dsh-edit-approval@5cbb98f — DeepSeek Harness plugin: per-edit approval with a red/green line diff before write/edit/str_replace_editor — approve once or reject (Claude Code behavior).

    • Evidence: manifestpatch · Identity: dsh-edit-approval
    • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: external-network credentials client-injection process-control prepare · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Usage Dashboard · skkjkk/dsh-usage-dashboard@104cfb8 — Aggregates token, cost, duration, and session usage into trend, heatmap, and calendar views.

    • Evidence: manifestpatch · Identity: @skkjkk/dsh-usage-dashboard
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · compatibility unknown
    • Signals: usage-dashboard token-usage cost-data session-data client-injection prepublish-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Plugin Guardian · songoao25/dsh-plugin-guardian@bb49179 — Offers graphical plugin uninstall, residue cleanup, snapshot rollback, and recovery controls.

    • Evidence: manifestpatch · Identity: dsh-plugin-guardian
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management filesystem-write file-delete rollback configuration-edit client-injection github-only · Review: The repository provides a fixed GitHub source identity; no plugin removal, residue cleanup, configuration write, rollback, or browser action was executed.
  • DSH Fish Hub · stvlynn/dsh.fish@d81793b — Authenticated dsh.fish search and install tools for Harness artifacts.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo unknown / package MIT · lifecycle prepare · mixed peer ranges
    • Signals: artifact-registry credentials external-network package-install prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Zhipu Coding Plan · tsja2001/dsh-zhipu-coding-plan@3afba87 — Shows GLM Coding Plan quota windows, model usage, and reset times in a conversation tab.

    • Evidence: manifestpatch · Identity: dsh-zhipu-coding-plan
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: quota-monitor billing-data external-network credentials client-injection · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Suite All · whyihaveyou/dsh-suite@0165407 — An all-in-one bundle aggregating the suite's plugin manager, notifications, session export, and team board.

    • Evidence: manifestpatch · Identity: @dsh-suite/all
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: aggregate-bundle plugin-management notification session-export kanban · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
  • DSH Plugin Hub Suite · wingsky-1/dsh-plugin-hub@f15865f — Aggregates eight DSH plugins for compression, session archiving, LAN proxying, MCP, notifications, usage, skills, and file preview.

    • Evidence: manifestpatch · Identity: @wingsky-1/dsh-plugins-all
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: aggregate-bundle plugin-suite external-network filesystem-write client-injection prepare-build · Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Damage Pulse · wssfk12138/dsh-damage-pulse@6e724df — Visualizes cache-aware token charges as balance-monitor damage-number animations.

    • Evidence: manifestpatch · Identity: dsh-damage-pulse
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: balance-monitor token-usage cost-data client-injection github-only · Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
  • DSH Plugin Store · ZASENJC/dsh-plugins-store@fa5829a — A native catalog browser with fixed-source validation, risk confirmation, install plans, updates, and removal.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: plugin-marketplace package-install approval-gate external-network identity-collision · Review: The npm identity maps to another repository, so this record is pinned to the documented Git subdirectory source and does not claim that package.
  • DSH Plugin Toggle · Zenjibad/dsh-plugin-toggle@60cfa68 — Adds persistent enable and disable controls for installed DSH plugins in Settings.

    • Evidence: manifestpatch · Identity: dsh-plugin-toggle
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management dynamic-loading filesystem-write client-injection · Review: The fixed source, patch, licenses and repository-specific Git install identities were reviewed statically; plugin stop-start operations, persistence and UI were not run.
  • DSH Usage Balance · zhou-yihang/dsh-usage-blance@09a2415 — Shows DeepSeek monthly, daily, and account-balance billing data below the DSH composer.

    • Evidence: manifestpatch · Identity: dsh-usage-blance
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: external-network credentials client-injection process-control · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
  • DSH Recommend · zp-home/dsh-recommend@9319afc — DSH 插件透明排行与推荐:每日自动抓取 dsh-plugin 话题生态 + 公开评分模型 + rank/recommend/search 工具 + 设置页排行标签

    • Evidence: manifestpatch · Identity: dsh-recommend
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection · Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.

Hold queue

These entries are relevant to DSH but do not receive install recommendations until the recorded blocker is repaired.

  • SandBase Harness · sandbaseai/sandbase-harness@2bb788d — A managed-agent integration with a DSH patch example and external service credentials.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
    • Signals: mcp external-network credentials identity-collision · Review: Held because the public distribution identity is ambiguous and name-colliding.
  • DSH Agent Teams · NanmiCoder/dsh-agent-teams@99b1e8a — Team-style agent orchestration with persisted state and child-process coordination.

    • Evidence: manifestpatch · Identity: @nanmicoder/dsh-agent-teams
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · behind rc.6 baseline
    • Signals: subprocess filesystem-write stale-peer-range · Review: Held because most declared DSH peer ranges target rc.1 rather than the rc.6 review baseline.
  • DSH Memory Evolve · csyangwen/dsh-memory-evolve@ce7f0fa — A DSH-oriented memory and orchestration client whose fixed manifest lacks a native bundle declaration.

    • Evidence: manifest → no patch · Identity: Git source / unknown
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: missing-bundle private-package external-ai · Review: Held because dsh.client is present but dsh.bundle and a referenced patch are absent.
  • DSH GitHub Login · Noob-stupid/dsh-github-login@0057f05 — A GitHub login integration whose package name and patch row identity disagree.

    • Evidence: manifestpatch · Identity: dsh-github-login
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: identity-mismatch authentication private-package · Review: Held until dsh-github-login and @deepseek-ai/dsh-github-login are aligned and rechecked.
  • DSH Find Plugin · awesome-dsh-plugin/dsh-find-plugin@e75dc2e — An agent tool for searching the DSH plugin ecosystem from inside a conversation.

    • Evidence: manifestpatch · Identity: dsh-find-plugin
    • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
    • Signals: external-network stale-peer-range · Review: Held because @deepseek-ai/dsh-tools still targets rc.1 rather than the rc.6 review baseline.
  • Tydora · zuorn/Tydora@23c4546 — A Tauri Markdown workspace containing an embedded DSH bundle entry.

    • Evidence: manifestpatch · Identity: tydora
    • Licenses: repo Apache-2.0 / package unknown · lifecycle postinstall · compatibility unknown
    • Signals: embedded-source external-application filesystem subprocess · Review: Held because the root package is a desktop application, the patch loads local TypeScript source, postinstall runs patch-package, and a separate install identity was not confirmed.
  • DSH Autonomy · abab996/dsh-autonomy@94f64d3 — Adds per-session autonomy levels that alter system-prompt directives from strict through more exploratory behavior.

    • Evidence: manifestpatch · Identity: dsh-autonomy
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: system-prompt session-data client-injection identity-collision · Review: Held because the documented unscoped npm identity currently resolves to JinkaiLiu/dsh-autonomy, not this repository; local source installation remains separately documented.
  • DSH Habits · DimitriLIAN/dsh-habits@f5e9c6f — Edits the user-global AGENTS.md instructions from DSH Web settings so habits are injected into every session.

    • Evidence: manifestpatch · Identity: dsh-habits
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: global-instructions filesystem-write client-injection prepare-build unresolved-install-identity · Review: Held because the README installation target still contains a placeholder owner and the npm identity does not resolve; its prepare build and global instruction writes were not executed.
  • DSH Path Browser · dkjsiogu/dsh-path-browser@471496f — Browses host files and folders from the Web composer and inserts selected absolute paths.

    • Evidence: manifestpatch · Identity: dsh-path-browser
    • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
    • Signals: filesystem absolute-path client-injection prepare-build unresolved-install-identity · Review: Held because the fixed source has no README or author-documented public installation identity and its npm name does not resolve; the prepare hook and filesystem access were not executed.
  • DSH Shutup · DosterBool/dsh-shutup@cc19b87 — Adds a configurable shortcut that interrupts model generation and steers the active turn with a correction prompt.

    • Evidence: manifestpatch · Identity: dsh-shutup
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: model-interrupt prompt-steering session-data browser-storage unresolved-install-identity · Review: Held because no public installation documentation or resolvable package target was found at the fixed commit; prompt steering, session access, and browser storage were not exercised.
  • DSH Precedent · dshplugin-me/dsh-precedent@1a84adf — Builds a cited working-memory ledger from the existing DSH session log to surface prior successful approaches.

    • Evidence: manifestpatch · Identity: Git source / unknown
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
    • Signals: session-log working-memory private-package unreleased-tag unresolved-install-identity · Review: Held because the author states that the documented v0.1.0 Git target is not tagged and will not currently resolve; session-log access was not executed.
  • DSH Diff Approval · 9087/dsh-diff-approval@5966410 — A pending-change panel that records edit and write results, shows whole-file diffs, and supports independent keep or revert decisions.

    • Evidence: manifestpatch · Identity: dsh-diff-approval
    • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
    • Signals: filesystem-write file-delete session-data client-injection unresolved-install-identity · Review: Held because the documented npm target did not resolve and no separate public Git-source installation command was found; revert can overwrite or remove files and was not executed.
  • Helm-D Security Router · ADWMC/helm-d@beef627 — The routing component of a nine-bundle security-analysis suite covering Android, Web, native, protocol, malware, AI security, and evidence workflows.

    • Evidence: manifestpatch · Identity: @dsh-security/router
    • Licenses: repo MIT / package unknown · lifecycle prepare · declares rc.6 peers
    • Signals: security-analysis filesystem-read tool-routing prepare-build unresolved-install-identity · Review: Held because the nine documented scoped npm packages did not resolve during review; package manifests also omit license fields, and installers or tools were not run.
  • FlowDeck DSH · heidi-dang/flowdeck-dsh@225f080 — A DSH integration and execution host for FlowDeck workflows.

    • Evidence: manifestpatch · Identity: @heidi-dang/flowdeck-dsh
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: workflow-runtime subprocess filesystem-write prepublish-build · Review: Held because the claimed npm identity did not resolve and the fixed documentation did not provide a reproducible public Git-source DSH install.
  • DSH 1024 Store · imsai-sh/awesome-deepseek-harness-plugins@dcdbcde — Combines an in-app plugin catalog with a tracked wrapper around the official DSH plugin command.

    • Evidence: manifestpatch · Identity: dsh1024
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: plugin-marketplace package-install telemetry external-network filesystem-write subprocess identity-unresolved · Review: Held because documentation installs dsh1024 from npm but version 0.4.0 is unavailable in the registry; no installer, telemetry, prepack or plugin operation ran.
  • DSH Desktop · IriskaDev/dsh-desktop@9ad9be1 — A desktop application wrapper that embeds a DSH bundle and patch.

    • Evidence: manifestpatch · Identity: dsh-desktop
    • Licenses: repo MIT / package unknown · lifecycle prepare · compatibility unknown
    • Signals: desktop-app private-package prepare-build identity-collision · Review: Held because the npm name maps to another repository, the root is a private desktop application, and its prepare hook was not executed.
  • DSH Windows Manager Bridge · kanneiren/dsh-windows-manager@e9bb4c0 — An authenticated named-pipe runtime bridge embedded in the DSH Windows Manager application.

    • Evidence: manifestpatch · Identity: dsh-windows-manager-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-app named-pipe authentication embedded-bundle · Review: Held because the bridge is distributed inside a manager application and no independent public package-to-source installation identity was confirmed.
  • DSH Zhihu Dashboard · kexuejin/dsh-zhihu-dashboard@791cfd3 — A Zhihu dashboard and tool set for hot topics, feeds, posts, search, and idea distillation.

    • Evidence: manifestpatch · Identity: dsh-zhihu-dashboard
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: web-search external-network model-tools client-injection · Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.
  • DSH Processes · liuqh16/dsh-processes@a4dd651 — Background-process tools, commands, output inspection, and completion notifications.

    • Evidence: manifestpatch · Identity: dsh-processes
    • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
    • Signals: subprocess process-management session-data prepare-build · Review: Held because its DSH peer dependencies target rc.5 rather than the rc.6 review baseline.
  • DSH Marketplace · lmy414/dshregistry@c558602 — An embedded marketplace UI for browsing, risk-reviewing, installing, and removing indexed plugins.

    • Evidence: manifestpatch · Identity: dsh-marketplace
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: plugin-marketplace package-install filesystem-write private-package · Review: Held because the published package has no repository mapping and the private nested source lacks an independently documented public installation path.
  • DSH Desktop Hub · MarecGents/deepseek-harness-hub@43f64fb — A WebView2 desktop shell with tray controls, theme sync, window memory, and a side panel.

    • Evidence: manifestpatch · Identity: @marecgents/dsh-hub
    • Licenses: repo MIT / package MIT · lifecycle postinstall · behind rc.6 baseline
    • Signals: desktop-app native-shell postinstall filesystem-write client-injection · Review: Held because several DSH peers target rc.1 and installation runs native desktop setup through postinstall.
  • DSH API Usage · marvina/dsh-api-usage@bc47b5d — A sidebar panel for API balance and token-usage visibility.

    • Evidence: manifestpatch · Identity: dsh-api-usage
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
    • Signals: credentials account-balance token-meter external-network prepublish-build · Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.
  • DSH Feishu Bridge · minyang2020/dsh-feishu-bridge@034f5f6 — A bidirectional Feishu bot bridge with per-user sessions, approvals, questions, and long-connection delivery.

    • Evidence: manifestpatch · Identity: feishu-dsh-bridge
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: enterprise-messaging credentials session-data approval-forwarding external-network · Review: Held because the documented DSH package identity did not resolve; the source checkout instructions cover a standalone sidecar but not a reproducible Git-source DSH bundle install.
  • DSH MCP Adapter · NexusAgentX/dsh-mcp-adapter@39c5aab — A single proxy tool that exposes MCP servers without injecting every server schema into context.

    • Evidence: manifestpatch · Identity: dsh-mcp-adapter
    • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
    • Signals: mcp model-tools context-reduction prepack-build · Review: Held because its DSH command and tool peers target rc.1 rather than the rc.6 review baseline.
  • DSH Codex Shim · OpenTritium/dsh-codex-shim@2522f9a — A route-aware Codex environment simulation intended to improve tool-call reliability for adapted models.

    • Evidence: manifestpatch · Identity: @opentritium/dsh-codex-shim
    • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
    • Signals: environment-simulation agent-steering sandbox-policy prepare-build · Review: Held because every DSH peer targets rc.5 and installation requires a prepared tarball plus an exact host patch.
  • DSH MCP Support · royenheart/dsh-plugin-mcp-support@e0e95e4 — A thin settings-driven wrapper over the native DSH MCP client.

    • Evidence: manifestpatch · Identity: @royenheart/dsh-plugin-mcp-support
    • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
    • Signals: mcp configuration-write local-installer · Review: Held because its native dsh-mcp-client peer targets rc.5 while the surrounding settings peer targets rc.6, and the public package identity is unresolved.
  • DSH Yi · Sanchaji/dsh-yi@e634e91 — An I Ching divination tool with a Web entry and session-aware results.

    • Evidence: manifestpatch · Identity: dsh-yi
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
    • Signals: divination model-tools session-data client-injection · Review: Held because the npm identity did not resolve and the Git installation target remains an author placeholder rather than this fixed repository.
  • DSH Wallpaper Engine · TianYa-DAO/dsh-wallpaper-engine@f8f5fa4 — A local Wallpaper Engine library, background layer, and native scene panel for the desktop shell.

    • Evidence: manifestpatch · Identity: dsh-wallpaper-engine
    • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
    • Signals: desktop-app filesystem-read native-bridge theme prepare-build · Review: Held because all DSH Web peers target rc.5 rather than the rc.6 review baseline and the package identity is unpublished.
  • DSH HTML Parse · uckkk/dsh-html-parse@69fc2c5 — A model tool that extracts titles, metadata, headings, links, tables, and text from HTML.

    • Evidence: manifestpatch · Identity: dsh-html-parse
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: html-parsing model-tools content-extraction · Review: Held because the only documented install command uses an unpublished npm identity and no reproducible Git-source alternative is provided.
  • DSH Handoff · WeiYe6/dsh-handoff@08dc59d — Summarizes a long session into a fresh same-workspace session while preserving the original.

    • Evidence: manifestpatch · Identity: dsh-handoff
    • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
    • Signals: session-data summarization model-request session-create prepack-build · Review: Held because its DSH LLM and session peers are fixed to rc.5 rather than the rc.6 review baseline.
  • DSH Tool Diagnose · xu-kai-quan/dsh-tool-diagnose@a0e4aad — An extensible diagnostics registry exposed through a model-facing diagnose tool.

    • Evidence: manifestpatch · Identity: dsh-tool-diagnose
    • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
    • Signals: diagnostics model-tools credentials session-data prepare-build · Review: Held because all DSH peers target rc.5 rather than the rc.6 review baseline.
  • DSH Plugin Marketplace · YELEBAI/dsh-plugin-marketplace@f4d5bbe — A validation-oriented marketplace with guided install agents, self-update, discovery, and installed-plugin management.

    • Evidence: manifestpatch · Identity: dsh-plugin-marketplace
    • Licenses: repo MIT / package MIT · lifecycle none · behind rc.6 baseline
    • Signals: plugin-marketplace package-install self-update identity-collision agent-delegation · Review: Held because its npm identity maps to the separately cataloged Scorp1o117 source and its DSH peers target rc.5.
  • DSH Vision Plugin · zcma11/dsh-vision-plugin@b418a5f — Uploads images, transcribes them through DashScope or offline Windows OCR, and injects descriptions into messages.

    • Evidence: manifestpatch · Identity: dsh-vision-plugin
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: vision ocr credentials external-network identity-collision · Review: Held because the npm identity maps to Xin-Zhang-IceMan/dsh-vision-plugin while the Git command in this source still contains a placeholder owner.
  • DSH Model Redactor · zerodegress/dsh-model-redactor@90af946 — Redacts secrets from model-visible input, output, reasoning, tool arguments, and stored session surfaces.

    • Evidence: manifestpatch · Identity: dsh-model-redactor
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: secret-redaction session-data reasoning-data tool-arguments · Review: Held because the fixed source documents manual Cordis composition but no reproducible public DSH package or Git-source installation identity.
  • DSH Thinking Notifier · 6-debug-6/dsh-thinking-notifier@d97ab09 — A desktop popup for thinking, permission, and completion status events.

    • Evidence: manifestpatch · Identity: dsh-thinking-notifier
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-notification approval-events subprocess local-http-server placeholder-identity · Review: Held because npm has no matching package and the manifest points to a placeholder repository identity; its PowerShell or Python subprocess and local status server were not started.
  • DSH Manager · as1350/dsh-manager@2733d86 — A skills and deployment-patch manager with transactional enablement, rollback, and script-backed patch types.

    • Evidence: manifestpatch · Identity: @deepseek-ai/dsh-manager
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: official-looking-namespace identity-unresolved filesystem-write script-execution patch-management wildcard-peers · Review: Held because the official-looking npm scope is unpublished, no repository license file was found, wildcard peers do not establish compatibility, and the documented tarball version differs from the manifest.
  • DSH WxAuto · br1nosense/dsh-wxauto-plugin@37f4b9e — Windows WeChat automation for DSH progress reports, message polling, and a two-way task bridge.

    • Evidence: manifestpatch · Identity: @dsh-user/dsh-wxauto
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: windows-only wechat-automation subprocess core-patch external-dependencies usage-restriction · Review: Held because installation patches a DSH core namespace, pulls Python UI-automation dependencies, and the documented upstream usage restriction excludes production use; no installer, WeChat action, or bridge was run.
  • DSH WHU Plugin · daoxiang0520/dsh-plugin-whu@e4124f5 — Connects Wuhan University library, timetable, grades, exams, and weather services through tools and a local UI.

    • Evidence: manifestpatch · Identity: dsh-plugin-whu
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: campus-services python-subprocess local-http-server credentials web-ui license-unresolved · Review: Held because no repository license file was found and the Python campus-service bridge handles login and academic data; no subprocess, login, or service request was started.
  • Edtechools DSH Plugins · edtechools/dsh-plugins@5e68ba5 — A two-plugin workspace providing conversation turn navigation and credential-backed Bocha web search.

    • Evidence: manifestpatch · Identity: dsh-plugin-turn-nav
    • Licenses: repo unknown / package MIT · lifecycle prepare · compatibility unknown
    • Signals: web-ui web-search credentials external-network prepare-build workspace-dependencies license-unresolved · Review: Held because the repository has no license file, both packages are unpublished, wildcard peers do not establish compatibility, and Git installation requires an allowed prepare build.
  • DSH Cross Collaboration · gameswu/dsh-cross-collaboration@a816775 — Discovers DSH peers over LAN or relay and delegates agent tasks to remote devices.

    • Evidence: manifestpatch · Identity: dsh-cross-collaboration
    • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
    • Signals: lan-discovery remote-task-execution udp websocket relay-network private-package license-unresolved · Review: Held because the private package and repository declare no license, while the plugin exposes LAN discovery and remote delegated execution; no socket, relay, or task was started.
  • DSH Whale Button · hhj2714/dsh-whale-btn@c3386c4 — A draggable always-on-top whale button that focuses or opens the DSH desktop window.

    • Evidence: manifestpatch · Identity: dsh-whale-btn
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: desktop-window-control subprocess always-on-top private-package github-only · Review: Held because the package is private and omits its package license while spawning a native window helper; the repository MIT license and GitHub install are present, but no helper was started.
  • DSH Plugins 4U · honghudavy-star/DSH_plugins_4U@1868796 — An aggregate plugin suite for vision input, wallpaper customization, WeChat bridging, and a settings catalog.

    • Evidence: manifestpatch · Identity: @dsh-plugins/4u
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: vision credentials external-network filesystem-write wechat-bridge local-http-server license-unresolved · Review: Held because no repository license file was found and the unpublished suite combines credentialed vision, filesystem wallpaper changes, and a WeChat bridge; none was executed.
  • DSH Preset Switcher · jeffcwj/dsh-preset-switcher@ec337bf — Adds a session-header control and local API for changing an active session's agent preset.

    • Evidence: manifestpatch · Identity: dsh-preset-switcher
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: session-control preset-switching local-http-server web-ui local-install license-unresolved · Review: Held because no repository license file or remote package identity was found and installation is documented only from an absolute local path; no session preset was changed.
  • DSH Claude Code Plugins · jianxx/dsh-cc-plugins@f5407cb — A large Claude Code parity workspace with permission rules, settings cascade, tools, hooks, MCP, memory, and profile bundles.

    • Evidence: manifestpatch · Identity: @jianxx/dsh-cc-bundle-permissions
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · mixed peer ranges
    • Signals: permission-engine settings-write hooks subprocess external-network workspace-dependencies identity-unresolved · Review: Held because the documented repository install targets a private root with no bundle, nested packages are unpublished, and workspace dependencies do not provide an external install identity; no hook or tool ran.
  • DSH Lan Memory · kiefeng/dsh-lan-memory@ae0efa5 — A memory and persona system with pinned facts, JSONL retrieval, experience, soul, mood, settings, and sidebar cards.

    • Evidence: manifestpatch · Identity: dsh-lan-memory
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: persistent-memory filesystem-write persona-injection web-ui local-install license-unresolved · Review: Held because no repository license file or remote package identity was found and only local-directory installation is documented; no memory, persona, or mood state was written.
  • DSH QQ Bot · leliln52/dsh-qqbot@ff2d9f7 — Connects DSH agents to QQ through OneBot WebSocket or the official QQ bot platform.

    • Evidence: manifestpatch · Identity: dsh-qqbot
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: qq-bot websocket credentials external-network persistent-session identity-unresolved · Review: Held because npm exposes 1.0.1 without repository metadata while the fixed source is 0.2.0 and documents only local installation; no bot login, message, or agent session was started.
  • DSH Freebuff · liceses/dsh-freebuff@308f365 — Adapts the unofficial Freebuff desktop protocol into a DSH model provider.

    • Evidence: manifestpatch · Identity: dsh-freebuff
    • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
    • Signals: model-provider unofficial-protocol external-network anonymous-identity reverse-proxy compliance-unresolved · Review: Held because it reimplements an undocumented third-party desktop protocol and free service without confirmed API authorization; no request, identity, or model response was sent.
  • DSH Firefly Theme · Liu-ZA-81/dsh-theme-firefly@edbee71 — A Firefly character theme with wallpapers, GIFs, music, neon styling, and a startup transformation animation.

    • Evidence: manifestpatch · Identity: dsh-theme-firefly
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: web-theme client-injection bundled-media copyrighted-assets audio video · Review: Held because the MIT license covers code while the repository redistributes HoYoverse character art, GIFs, and music whose copyright remains with third parties; no media was loaded.
  • DSH UI Sidebar · nicklin99/dsh-ui-sidebar@c31e512 — Replaces the DSH Web sidebar with custom branding, session search, grouping, and workspace navigation.

    • Evidence: manifestpatch · Identity: dsh-ui-sidebar
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: client-injection session-data sidebar-replacement unresolved-install-identity license-unresolved · Review: Held because no repository license file, repository mapping, published package, or author-documented public install identity was found; the replacement sidebar was not loaded.
  • PicGo DSH Plugin · PicGo/dsh-plugin@8616305 — Uploads images and files from DSH through PicGo image-host configurations.

    • Evidence: manifestpatch · Identity: @picgo/dsh-plugin
    • Licenses: repo unknown / package MIT · lifecycle prepare · compatibility unknown
    • Signals: file-upload filesystem-read credentials external-network model-tools prepare-build license-unresolved · Review: Held because no repository license file was found for the published package; no prepare build, file read, credential use, or upload was executed.
  • DSH Skin Studio · realMisakaMikoto/dsh-skin-studio@8a66d01 — Creates, imports, manages, and shares portable visual skins for DSH Web.

    • Evidence: manifestpatch · Identity: dsh-skin-studio
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: theme client-injection file-import browser-storage prepack-build identity-unresolved · Review: Held because npm exposes 0.4.4 without repository metadata while the fixed source is 0.3.5; no build, skin import, storage, or rendering was executed.
  • DSH Plugin Surgery · ruimin251204/dsh-plugin-surgery@11249e0 — Previews plugin impact, performs uninstall cleanup, creates rollback snapshots, and diagnoses plugin state.

    • Evidence: manifestpatch · Identity: dsh-plugin-surgery
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-management filesystem-write file-delete rollback configuration-edit identity-unresolved · Review: Held because npm exposes 0.2.0 without repository metadata while the fixed source is 0.1.4; no uninstall, cleanup, snapshot, rollback, or diagnosis was executed.
  • DSH QoL · shifan3/dsh-QoL@5830544 — Changes composer shortcuts, supports editing and branching earlier messages, and adds code-aware file editing.

    • Evidence: manifestpatch · Identity: dsh-qol
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection message-edit session-data filesystem-write private-package license-unresolved identity-unresolved · Review: Held because the package is private, no repository license file or public distribution identity was found, and its immediate client injection can edit files and session history; none was loaded.
  • DSH Memory Hermes · SipengXie2024/dsh-memory-hermes@a79f49f — Implements bounded curated Hermes-style memory with tools, storage, context injection, and a web surface.

    • Evidence: manifestpatch · Identity: dsh-memory-hermes
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: persistent-memory filesystem-write context-injection model-tools client-injection local-package identity-unresolved · Review: Held because the package is unpublished, lacks repository metadata, uses wildcard DSH peers, and documents a local tarball install rather than a public source identity; no memory operation ran.
  • DSH CLI Interactive · studyinglx/dsh-cli@83d1538 — Provides a Claude Code-style interactive terminal profile over DSH agent, command, LLM, and session services.

    • Evidence: manifestpatch · Identity: dsh-cli-interactive
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: terminal session-data model-request profile-bundle local-install identity-unresolved · Review: Held because the package is unpublished, lacks repository metadata, and the documentation says npm publication is future work while using a locally built distribution; no build or terminal session ran.
  • DSH Marketplaces Nexus · TeaClearInkII/DSH-Marketplaces-Nexus@835a12c — Aggregates DSH marketplaces and curated directories into a searchable browser panel with install-command metadata.

    • Evidence: manifestpatch · Identity: dsh-marketplaces-nexus
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: plugin-marketplace external-network remote-catalog install-command-data client-injection license-unresolved identity-unresolved · Review: Held because the published package has no repository metadata and no repository license file was found; no remote catalog fetch or install command was executed.
  • DSH Live2D MyGO · U1s1-king/dsh-live2d-mygo@0605eeb — Adds a MyGO-themed Live2D desktop character with dress-up, dragging, snapshots, and speech bubbles.

    • Evidence: manifestpatch · Identity: dsh-live2d-mygo
    • Licenses: repo unknown / package CC-BY-NC-SA-4.0 · lifecycle none · compatibility unknown
    • Signals: live2d desktop-pet bundled-media third-party-assets client-injection license-unresolved identity-unresolved · Review: Held because no repository license file or public distribution identity was found and the repository bundles 82 MyGO character images whose reuse rights were not independently established; no asset was loaded.
  • DSH UX Writing · uckkk/dsh-ux-writing@ecf5e64 — Provides model tools and guidelines for writing interface microcopy, buttons, and error messages.

    • Evidence: manifestpatch · Identity: dsh-ux-writing
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: ux-writing model-tools prompt-guidance unresolved-install-identity · Review: Held because the documented dsh plugin add target is not published and no separate Git-source install command or package repository mapping was found; no tool or prompt guidance ran.
  • DSH Config Manager · xiajiajun516/dsh-config-manager@a019bc3 — Backs up, exports, imports, and migrates DSH configuration through host tools and a web interface.

    • Evidence: manifestpatch · Identity: dsh-config-manager
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: configuration-backup filesystem-read filesystem-write credentials model-tools client-injection license-unresolved · Review: Held because neither the repository nor package declares a license; the source is also behind the current registry version, and no configuration or UI action ran.
  • DSH EvoForge · deepseek-harness-evoforge/dsh-evoforge@e8dada4 — A pre-alpha suite for evidence-driven skill evolution, delivery, diagnostics, channels, review follow-up, and goal continuity.

    • Evidence: manifestpatch · Identity: dsh-evolve
    • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
    • Signals: aggregate-scope skills filesystem-read filesystem-write external-network subprocess prepack-build unresolved-install-identity · Review: Held because the author documents no registry release and the current eleven-package install requires a local build and tarball pack; no build, package, skill mutation, channel, subprocess, or external request was executed.
  • DSH Subagent Default Model · dingminhua/dsh-subagent-default-model@cd69656 — Adds a settings-backed default provider and model for subagent delegations without an explicit route.

    • Evidence: manifestpatch · Identity: dsh-subagent-default-model
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: subagent-routing settings-write nested-bundle unresolved-install-identity · Review: Held because the distributable bundle is in a plugin subdirectory with no npm release or author-documented public subdirectory install identity; no settings or subagent route was changed.
  • DjangoAILab DSH Plugins · DjangoAILab/dsh-plugins@459d852 — A manual plugin collection whose canonical record exposes external CLI agents as DSH subagent providers.

    • Evidence: manifestpatch · Identity: dsh-external-agents
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: external-agent subprocess credentials nested-bundle aggregate-scope unresolved-install-identity · Review: Held because the manual monorepo subdirectory has no package release or author-documented public subdirectory install identity; no external CLI, credential forwarding, subprocess, upload route, or browser code was executed.
  • DSH Third Party Suite · huangrx6/dsh-plugin@7a57cec — A suite hub for layout, MCP, remote-access, and Skill-management plugins in DSH settings.

    • Evidence: manifestpatch · Identity: dsh-third-party
    • Licenses: repo unknown / package MIT · lifecycle prepare · declares rc.6 peers
    • Signals: aggregate-scope client-injection mcp-management skill-import external-network prepare-build unresolved-install-identity · Review: Held because five nested packages have no registry release or author-documented public subdirectory install identity and the repository lacks a license file; no build, MCP, Skill, Tailscale, or UI behavior was executed.
  • DSH Plugs · JustGenius-s/DSH-Plugs@574f791 — A six-plugin suite for Codex-style navigation, updates, model configuration, marketplace, and WeChat presentation.

    • Evidence: manifestpatch · Identity: @just-genius/dsh-codex
    • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
    • Signals: client-injection license-incomplete identity-unresolved · Review: Held because repository license, package license, installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Balance Plugin · kongshan-zhuyu/dsh-balance-plugin@e866642 — A private nested bundle composing host and client balance components for DSH.

    • Evidence: manifestpatch · Identity: @deepseek-ai/dsh-bundle-balance
    • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
    • Signals: billing-data credentials external-network client-injection nested-bundle license-unresolved unresolved-install-identity · Review: Held because the private nested bundle has no repository or package license, registry release, or public subdirectory install identity; no balance request, credential resolution, or client UI was executed.
  • DSH Kingdom · lusblead/dsh-Kingdom@d55cc25 — Adds local Kingdom territory, binding, task-governance, and execution-lifecycle capabilities to DSH sessions.

    • Evidence: manifestpatch · Identity: dsh-kingdom
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · behind rc.6 baseline
    • Signals: external-network credentials client-injection database stale-peer-range · Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
  • Neplich DSH Plugin Suite · Neplich/dsh_plugin@8a54a60 — A multi-package suite spanning browser automation, image archiving, chat enhancements, configuration, Skills, and a terminal work panel.

    • Evidence: manifestpatch · Identity: @neplich/dsh-web-workpanel
    • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
    • Signals: aggregate-scope browser-automation filesystem-read filesystem-write subprocess client-injection unresolved-install-identity · Review: Held because eleven nested packages have no registry release or author-documented public subdirectory install identity; no browser automation, image archive, file edit, MCP or Skill change, terminal, or build was executed.
  • DSH Environment Probe · nodata404/dsh-env-probe@a0dd6f1 — Probes local operating-system, shell, runtime, tool, disk, and network environment details for the system prompt.

    • Evidence: manifestpatch · Identity: dsh-env-probe
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: environment-probe system-prompt local-machine-data identity-unresolved · Review: Held because the package is unpublished, the README has no public install identity, and the repository has no license file; no probe ran.
  • DSH HarmonyOS Scrcpy · ns-zzj/dsh-hos-scrcpy@2126bb2 — Provides HarmonyOS device discovery, screen streaming, touch control, system keys, and hilog access.

    • Evidence: manifestpatch · Identity: dsh-hos-scrcpy
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: device-control screen-streaming system-keys log-access identity-unresolved · Review: Held because the package is unpublished and the documentation only describes installing a locally built tarball; no device or command action ran.
  • DSH Harness Plugin · Proton1917/dsh-harness-plugin@4c597c8 — Adds live usage statistics and personal interface customization to DSH Web.

    • Evidence: manifestpatch · Identity: @proton1917/dsh-harness-plugin
    • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle prepare · compatibility unknown
    • Signals: usage-statistics client-injection tokenizer prepare-build identity-unresolved · Review: Held because the scoped package is unpublished and the README only documents a machine-specific local link; no build, tokenizer, or UI behavior ran.
  • Restrict Discipline · refyon/restrict-discipline@52c5c81 — Blocks risky project-root writes and selected environment, proxy, and remote Git changes.

    • Evidence: manifestpatch · Identity: restrict-discipline
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: policy-enforcement filesystem-guard environment-guard git-guard identity-unresolved · Review: Held because the documented registry name is unpublished and the GitHub example uses a placeholder owner rather than this repository; no policy hook ran.
  • DSH Wallpaper Engine · sakuraaa667/dsh-wallpaper-engine@63ffd5c — Uses locally downloaded Wallpaper Engine assets as the DSH web background.

    • Evidence: manifestpatch · Identity: dsh-wallpaper-engine
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: wallpaper-engine filesystem-read client-injection identity-unresolved · Review: Held because the registry package was unpublished and the README only documents local file installation; no asset scan or UI behavior ran.
  • DSH Image Describer · shuxu-zhao/dsh-image-dscriber@071d388 — Adds an image-description tool backed by a configurable DSH vision provider.

    • Evidence: manifestpatch · Identity: dsh-image-describer
    • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
    • Signals: vision-model model-tool attachments external-network license-unresolved identity-unresolved · Review: Held because the package is unpublished, package license is undeclared, and documentation only uses a local source directory; no image or model action ran.
  • DSH RAGFlow · staff-os/dsh-ragflow@e018a34 — Adds RAGFlow knowledge-base retrieval, tools, HTTP service, and browser configuration to DSH.

    • Evidence: manifestpatch · Identity: @deepseek-ai/dsh-ragflow
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: rag-retrieval external-network credentials model-tools client-injection license-unresolved · Review: Held because the repository has no license file even though a GitHub install identity is documented; no retrieval, HTTP, tool, or UI behavior ran.
  • DSH UI Tools · xing-shuyin/dsh-ui-tools@5ec7817 — Adds a project file viewer, multi-terminal panel, and Git operations to DSH Web.

    • Evidence: manifestpatch · Identity: dsh-ui-tools
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: file-manager terminal git-operations filesystem-write client-injection license-unresolved · Review: Held because the repository has no license file even though the registry package declares MIT; no terminal, Git, file, or UI action ran.
  • DSH Encrypt · yauntyour/DSH-Encrypt@7e1bab4 — Stores DSH credentials in an AES-256-GCM encrypted file managed through Web UI.

    • Evidence: manifestpatch · Identity: dsh-encrypt
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: credential-storage encryption filesystem-write native-dependency client-injection identity-unresolved · Review: Held because the package is unpublished and documentation only describes local tarball or path installation; no native dependency, encryption, credential, or prepack action ran.
  • Zzy DSH Prompt Optimizer · zhengzeyong9527-droid/zzy-dsh-prompt-optimizer@3cf32c5 — Adds privacy-aware prompt optimization with direct application to the DSH composer.

    • Evidence: manifestpatch · Identity: zzy-dsh-prompt-optimizer
    • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
    • Signals: prompt-optimization model-request client-injection prepack-build identity-unresolved · Review: Held because the documented registry package is unpublished and no public Git identity is documented; no prompt, model, UI, or build action ran.
  • DSH Bridge · baixianger/dsh-bridge@3644483 — Provides local session messaging and event bridging between DeepSeek Harness nodes.

    • Evidence: manifestpatch · Identity: dsh-bridge
    • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
    • Signals: session-messaging event-bridge local-network license-incomplete · Review: Held because the matching npm release and package manifest declare MIT but the fixed repository has no license file; no bridge behavior ran.
  • DSH System Restart · kdeightx/dsh-dock@a0da26e — Adds a sidebar control that requests a DeepSeek Harness web-process restart.

    • Evidence: manifestpatch · Identity: dsh-system-restart
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: process-control subprocess filesystem-write client-injection license-incomplete · Review: Held because the fixed repository has no license file; the unpublished local-source install and process-control implementation were not executed.
  • DSH Studio · lai-133/dsh-integration@f5598fb — Adds wallpaper controls and an agent collaboration board to an integrated DSH desktop workspace.

    • Evidence: manifestpatch · Identity: dsh-studio
    • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
    • Signals: desktop-integration wallpaper agent-collaboration filesystem-write subprocess identity-unresolved · Review: Held because the nested bundle is installed only by the enclosing desktop setup and has no independent npm or Git-source install identity; setup and desktop code were not run.
  • DSH LAN Access · nonmean/dsh-lan-access@fe6a4de — Toggles the DSH web server between loopback-only and local-network binding.

    • Evidence: manifestpatch · Identity: dsh-lan-access
    • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
    • Signals: network-exposure bind-all-interfaces credentials dynamic-patch client-injection identity-unresolved · Review: Held because the package is unpublished and documented Git install examples retain owner and repository placeholders; network exposure, credentials and dynamic patch behavior were not run.
  • DSH HUD · a903067276-rgb/dsh-hud@569daa8 — A HUD status panel for DSH web: git status, MCP servers, skills, model and token usage in a floating side panel

    • Evidence: manifestpatch · Identity: dsh-hud
    • Licenses: repo MIT / package MIT · lifecycle none · behind rc.6 baseline
    • Signals: external-network credentials client-injection mcp process-control stale-peer-range · Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Voice AI Girlfriend · beiyege-01/dsh-voice-ai-girlfriend-plugin@8f346d1 — Voice AI girlfriend for DeepSeek Harness: FunASR mic input, Qwen3-TTS voice replies, companion animation window, QQ two-way chat. Needs the repo's voice bridge + NapCat.

    • Evidence: manifestpatch · Identity: @beiyege-01/dsh-voice-ai-girlfriend
    • Licenses: repo unknown / package MIT · lifecycle prepare · compatibility unknown
    • Signals: external-network client-injection prepare license-incomplete · Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
  • Mop Learn · Chillizu/mop-plugins@328630f — Mop Learn plugin package.

    • Evidence: manifestpatch · Identity: @chillizu/mop-learn
    • Licenses: repo MIT / package unknown · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection process-control license-incomplete · Review: Held because package license is incomplete; no lifecycle hook, plugin or capability was executed.
  • Uiskin Theme · chouxiaohuai/dsh-uiskin-theme@50f6ee0 — Blue Glass Theme (ocean fantasy) for DeepSeek Harness Web — a static profile bundle. 海洋幻想主题:海洋背景、玻璃气泡、海洋侧边栏、鲸鱼设置按钮、炫彩模型文字。

    • Evidence: manifestpatch · Identity: uiskin-theme
    • Licenses: repo UNLICENSED / package UNLICENSED · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection identity-unresolved · Review: Held because installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Texas Holdem · cxczy/dsh-texas-holdem@24dee05 — A local PVE Texas Hold’em table for the DeepSeek Harness Web GUI: sidebar entry + center-column 6-max table vs five AI bots

    • Evidence: manifestpatch · Identity: dsh-texas-holdem
    • Licenses: repo unknown / package MIT · lifecycle prepublishOnly · compatibility unknown
    • Signals: external-network credentials client-injection prepublish-only license-incomplete identity-unresolved · Review: Held because repository license, installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Livefeed · ErrorLst/dsh-livefeed@4b98964 — DSH 实时讯息面板(Linux Do 版):定时从 linux.do 最新+最热门拉取话题,AI 按价值筛选输出,右缘悬浮面板未读/已读展示,按已读 URL 去重

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-livefeed
    • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
    • Signals: client-injection browser license-incomplete · Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Live · fore-vip/dsh-live@d07268a — DeepSeek Harness(DSH)多平台直播推流插件:摄像头/麦克风采集、屏幕选区直播、画中画(PiP)、多平台多选同步推流(视频号/抖音/快手/斗鱼/B站/YY/虎牙/CC/自定义 RTMP)、ffmpeg 引擎真实推流。Cordis bundle 插件。

    • Evidence: manifestpatch · Identity: dsh-live
    • Licenses: repo unknown / package UNLICENSED · lifecycle none · mixed peer ranges
    • Signals: external-network client-injection license-incomplete · Review: Held because repository license, package license is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH CTF Console · fyfhcgch/dsh-ctf-collaborate@ceadb54 — CTF 解题控制台:在 DSH Web GUI 侧边栏/会话头部提供入口,右侧独立面板查看题目列表、详情、靶机端点、启动/回收环境、提交 flag。Host 经 webServer 前缀路由 /api/ctf-console/* 提供后端,用全局 fetch 调用 CTF 平台 API(X-Agent-AccessKey 认证)。

    • Evidence: manifestpatch · Identity: @dsh-external/dsh-ctf-console
    • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
    • Signals: external-network credentials client-injection docker database license-incomplete · Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH Permission Engine · greatColin/dsh-permission-engine@10908c4 — DSH permission engine: a configurable responsibility chain for tools/pre-execute decisions

    • Evidence: manifestpatch · Identity: @yourname/dsh-permission-engine
    • Licenses: repo MIT / package unknown · lifecycle none · behind rc.6 baseline
    • Signals: external-network client-injection stale-peer-range license-incomplete identity-unresolved · Review: Held because package license, installation identity, current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
  • Deepseek Harness Background · HaoyueQin/deepseek-harness-background@e7174e4 — Custom background image plugin for the DeepSeek Harness web GUI: upload a local picture or paste an image URL, and render it behind the whole app surface with adjustable opacity, scrim, panel transparency and frosted-glass blur.

    • Evidence: manifestpatch · Identity: deepseek-harness-background
    • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
    • Signals: external-network credentials client-injection process-control prepare stale-peer-range · Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
  • DSH LLM Qoder · JiamingZang/dsh-llm-qodersdk@89658ae — Qoder CLI (qoder-agent-sdk) adapter for the DeepSeek Harness LLM seam

    • Evidence: manifestpatch · Identity: @jiamingzang/dsh-llm-qoder
    • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · behind rc.6 baseline
    • Signals: external-network credentials mcp prepublish-only stale-peer-range · Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
  • Bundle · kael-odin/dsh-control-center@882f04d — Installable DSH Web profile layer for DSH Control Center Web Edition

    • Evidence: manifestpatch · Identity: @dsh-control-center/bundle
    • Licenses: repo AGPL-3.0 / package AGPL-3.0-only · lifecycle none · mixed peer ranges
    • Signals: credentials mcp identity-unresolved · Review: Held because inst