catalog / security
Security & Auth
Every Security & Auth plugin in our curated awesome list, synced from GitHub.
Plugins that extend the harness's safety seams: authentication and OAuth providers, permission policies, audit trails and guard extensions. They hook the interception points around tool execution and model requests, complementing the built-in sandbox tiers and approval system.
Synced from our GitHub list · Catalog updated 2026-09-04
207 plugins
tencentmeeting-cli
by tencentcloud
Tencent Meeting command-line tool with OAuth2 authorization for meeting, recording and attendance-report management.
dsh-auto-review
by perrylink
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).
dsh-permission-rules
by perrylink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
dsh-secure-audit
by pensivefei
Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.
dsh-sandbox-escalation-fix
by hakureimonika
Project per-session sandbox escalation schemas and suppress redundant escalation retries in DSH.
sofagent
by kongfangxun
FDE Harness: audit-first governance for AI coding agents — 24 rules, HMAC chain, snapshot rollback (80 tools, 13 plugins)
dsh-agy
by chaos-03x
Google Antigravity (agy) OAuth auth + model access plugin for DeepSeek Harness: multi-account pool, 429 rotation, device fingerprinting, CLI and web login.
deepseek-harness-auth
by taichuy
Out-of-tree authenticated web proxy bundle for DSH web profile.
dsh-remote
by scspotato
Native Android client to remotely control DeepSeek Harness (DSH) from your phone
dsh-clawrouter
by blockrunai
A safety gate for DeepSeek Harness: a stronger model reviews dangerous tool calls before they run. Plus vision and BlockRun's full model catalog from one wallet, paid per request over x402.
dsh-group-photo
by senmuuuuw
Polaroid-style group photo wall for the DSH beta community — GitHub OAuth sign-in and whitelist validation, wrapped as a DeepSeek Harness skill.
dsh-coding-subscription-oauth
by lninghaha
DeepSeek Harness coding-subscription OAuth: SuperGrok / Grok Build, ChatGPT Plus Codex, Kimi Code, Claude Code. No API-key pasting.
dsh-codex-oauth
by wnjxyk
Use your OpenAI subscription with DeepSeek Harness to access GPT models, image generation, and web search.
dsh-security-audit
by omdsh-dev
Local security audit for DeepSeek Harness — scans config, plugin sources, sessions and network exposure into a read-only risk report.
dsh-one-gateway
by tiantianflow
Private DSH One Gateway — loopback, identity-first ingress for DeepSeek Harness
dsh-remote-mobile
by iceapriler
Adds authenticated LAN and Tailscale access to the DSH web console with QR pairing, persistent device sessions, and mobile UI adaptations.
dsh-sandbox-escalation-fix
by inmny
Prevent repeated same-or-lower sandbox requests from failing while preserving genuine escalation approval checks.
dsh-remote
by hyna-hla
Pair a mobile client with DSH for remote sessions, approvals, MCP/file browsing, and token-gated host access.
dshscan
by shaoshi20
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
dsh-auth-gateway
by xbzbing
Secure remote access for DeepSeek Harness with password auth and TOTP two-factor authentication.
dsh-approval-llm
by letter2025
Model-based permission approval (approve-for-me) for DeepSeek Harness: an approval/request answerer backed by a separate reviewer model
dsh-auth-gate
by tecfancy
Login gate for the DeepSeek Harness web UI: password or shared-token auth, session cookies, rate limiting and a user-management CLI.
caushell
by fatmo666
Compiler-style pre-execution safety analysis for Harness shell actions.
dsh-acp-plugin
by agentic-control-plane
Agentic Control Plane for DeepSeek Harness — policy-check every tool call before it runs
dsh-defend
by perrylink
Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanitized audit events
dsh-sentinel-scanner
by eligahyu
Zero-dependency static scanner that screens DeepSeek Harness plugins for risky code, credentials, and exfiltration.
dsh-plugin-audit
by jkrandom-sudo
插件安全审计：plugin_audit 静态扫描（文件/行号权限画像）+ 运行时哨兵在触及凭证或向未知主机外发时请求批准；可选 invariant 组件
dsh-github-login
by noob-stupid
DSH GitHub 登录/OAuth 集成插件。
dsh-codex-suite
by damonbao
OpenAI Codex provider for DeepSeek Harness with ChatGPT OAuth, native settings, and account usage.
dsh-auth
by hxy91819
Caddy-fronted administrator authentication for DeepSeek Harness: Argon2id, revocable sessions, bilingual UI, zero upstream forks.