English · 简体中文

Awesome DSH Plugins

An independent, evidence-led directory for DeepSeek Harness plugins. Every listed entry was inspected at an immutable commit for its bundle manifest, referenced patch, license signals, package identity, lifecycle scripts, and material capability signals.

This is a compact reviewed subset, not a mirror of every repository carrying the dsh-plugin topic. It complements the broad Awesome DeepSeek Harness Plugin discovery list with fixed-source evidence and an explicit hold queue.

[!CAUTION] A structural review is not a security audit or a runtime compatibility test. DSH plugins execute third-party code with your permissions. Read the source, inspect lifecycle scripts, and prefer immutable versions before installing.

Website

This repository is also the source for the bilingual static website. The site, generated README catalogs, plugin detail pages, review log, sitemap, and counts all read from data/plugins.json, so a reviewed catalog change and its presentation ship in the same commit.

npm install
npm run dev

Production verification uses npm run check && npm run build. The static export is written to out/ and is ready for Cloudflare Pages. See the deployment guide. No AI, authentication, database, payment, or third-party plugin execution is part of the website.

Automatic candidate discovery

GitHub Actions runs bounded GitHub API discovery every six hours and a full query pass weekly. It resolves each matching repository to a 40-character commit, inspects package.json and the referenced patch path without cloning, installing, or executing third-party code, and opens a review PR only when the candidate queue materially changes. A separate bot branch stores the incremental checkpoint, so empty runs do not create or churn review PRs. Candidates are never promoted into data/plugins.json automatically.

The query set and request budgets live in config/discovery.json. A maintainer can also run GITHUB_TOKEN=... npm run discover -- --dry-run locally.

What is different here

• Immutable evidence: every decision links to a full 40-character commit.
• Native bundle check: package.json must declare dsh.bundle.patch and the referenced patch must exist.
• Separate facts: structure, license, identity, compatibility, lifecycle, and capability signals are not collapsed into a single “safe” score.
• Visible uncertainty: incomplete or conflicting candidates stay in the hold queue instead of receiving an install recommendation.
• No popularity theater: stars and topic membership are discovery hints, not proof of trust or compatibility.

Status model

Status	Meaning
Reviewed	Native bundle structure was confirmed at the linked commit. Runtime behavior and security remain unverified.
Held	DSH-oriented candidate with a specific identity, structure, or compatibility blocker.
Excluded	Fixed-source evidence says it is not currently eligible as a native DSH bundle.

Catalog

Snapshot: 2026-08-16 · 269 candidates · 235 reviewed · 33 held · 1 excluded

Reviewed native bundles

UI & Workspace

• DSH WSL Workspace · 6Mikao9/dsh-wsl-workspace@89905a8 — Workspace support for using DeepSeek Harness across Windows and WSL paths.

  • Evidence: manifest → patch · Identity: dsh-wsl-workspace
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem cross-platform-paths · Review: Broad DSH peer ranges leave runtime compatibility unknown.

• DSH Toolbox Web · AbcdefgXW/dsh-toolbox-web@322c260 — A Web toolbox for session, trash, workspace-directory, search, preset, configuration, archive, and scheduled-heartbeat management.

  • Evidence: manifest → patch · Identity: dsh-toolbox-web
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data filesystem-write scheduled-tasks external-messaging client-injection · Review: The public package maps to this repository; session and configuration writes plus optional IM heartbeat delivery are visible and were not executed.

• DSH Effort · AI-Galaxy-GPU/dsh-effort@edbb063 — Adds a Web control for selecting the current session model's supported reasoning-effort level.

  • Evidence: manifest → patch · Identity: dsh-effort
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data model-selection client-injection local-storage · Review: The fixed source uses session model RPCs and browser storage; the repository has no detected license file and declares no DSH peer range.

• DSH Sound · AI-Galaxy-GPU/dsh-sound@f5f25dc — Plays configurable browser sounds for task completion, approvals, questions, plan review, blocking, and failures.

  • Evidence: manifest → patch · Identity: dsh-sound
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-events local-file browser-storage client-injection · Review: The fixed source stores configuration in localStorage and audio in IndexedDB; the documented npm target currently exposes no published version and no runtime behavior was tested.

• DSH Context · bowenliang123/dsh-context@aca38b2 — A context insight panel for request history, compactions, injections, model switches, and composition changes.

  • Evidence: manifest → patch · Identity: dsh-context
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepare · compatibility unknown
  • Signals: session-data client-injection browser · Review: The host/client bundle structure is confirmed; the prepare hook invokes Husky and the package declares no DSH peer range.

• DSH Stop Server · caozhikun/dsh-stop-server@baa9b9c — Adds a Web action that calls a host shutdown route to stop the DSH process and close the current interface.

  • Evidence: manifest → patch · Identity: dsh-stop-server
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: process-exit web-route client-injection · Review: The fixed host source registers a shutdown route with appExit, process.exit, and SIGTERM fallbacks; the repository has no detected license file and shutdown was not executed.

• Captain DSH Web UI All · CAPTAIN1275/dsh-ui-web@04422dd — An aggregate Web UI bundle for task boards, Git views, pets, remote access, live statistics, settings, and bundled skins.

  • Evidence: manifest → patch · Identity: @captain1275/dsh-web-ui-all
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
  • Signals: aggregate-scope remote-access filesystem-write git client-injection · Review: The public aggregate identity maps to this repository and represents its component candidates; broad remote, file, Git, session, and UI surfaces were not executed.

• DSH TUI · ccch1mneyyy/dsh-TUI@ee83376 — A full-screen terminal client with live status, streaming thoughts, tools, approvals, and filesystem access.

  • Evidence: manifest → patch · Identity: @deepseek-harness-tui/dsh-tui
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: terminal subprocess filesystem credentials broad-agent-surface · Review: The bundle exposes a broad agent surface; structure confirmation is not a runtime endorsement.

• DSH Sticky Notes · charrywhite/dsh-sticky-notes@e2653fc — A persistent sticky-note panel with host-side JSON storage, browser UI, and model-facing note tools.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-write web-route client-injection model-tools private-package · Review: Local-link and source installation are documented for the private package; note storage, HTTP routes, and model tools were not exercised.

• Castorice Theme · chemicalcat250/dsh-theme-castorice@c55e467 — Applies a violet dark Castorice-inspired visual theme to the DSH Web interface.

  • Evidence: manifest → patch · Identity: dsh-theme-castorice
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: client-injection theme browser-storage · Review: GitHub-source installation is documented and the client code injects theme styles and browser preferences; it was not loaded in a browser.

• DSH Browser Notify · classfieldseason-cmd/dsh-notify-plugin@8f386ca — Shows browser desktop notifications when a DSH conversation turn completes.

  • Evidence: manifest → patch · Identity: dsh-browser-notify-plugin
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: browser-notification session-events client-injection · Review: The public package identity matches this repository and the client listens for session completion before calling the browser Notification API; no notification was triggered.

• DSH Glassmorphism · czw63/dsh-glassmorphism@e1f0466 — Adds a mobile-aware liquid-glass theme with optional wallpaper, blur, and refraction effects.

  • Evidence: manifest → patch · Identity: @local/dsh-glass-theme
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: client-injection theme browser-storage · Review: A local-file installation path is documented and the client stores visual preferences in the browser; no style bundle was loaded.

• DSH Delete Session · dream12347/dsh-delete-session@e0f052a — A Web session manager for trash, restore, permanent deletion, archived sessions, activity statistics, pause, and log-folder access.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: session-data filesystem-delete archive-registry client-injection browser-storage · Review: Pinned GitHub installation and rc.6 peers are documented; destructive session and workspace actions remain user-triggered and were not executed.

• DSH Unarchive · edfrey0044/dsh-unarchive@52a5194 — Restores archived DSH sessions through a command and tool that update the global archive registry.

  • Evidence: manifest → patch · Identity: dsh-unarchive
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: session-data archive-registry workspace-state · Review: Git-source installation is documented and the bundle removes session identifiers from the global archive set; no registry or session state was changed.

• DSH OpenCode Palette · FeatherHunter/dsh-opencode-palette@4c3660a — Adds a persistent selector for dozens of OpenCode-inspired color themes in the DSH Web interface.

  • Evidence: manifest → patch · Identity: dsh-opencode-palette
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: client-injection theme browser-storage · Review: The fixed source version is older than the observed registry release but maps to the same public identity; theme injection and persistent browser settings were not executed.

• StyleVault · GptsApp/dsh-stylevault@26eee2d — A theme vault with configurable styles and shareable appearance packs for DSH Web.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: theme client-injection browser-storage github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Balance Bubble · Jescoi/dsh-balance-bubble@dbfaef5 — A persistent floating DeepSeek account-balance bubble backed by a host endpoint.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: account-balance credentials local-web-server client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• La Feng UI · JimingYang25/Lafeng-UI-A-snazzy-personalized-custom-UI-plugin-for-DeepSeek-Harness-Cordis-.@bfd81d8 — A customizable Web UI pack with skins, animated wallpapers, music, audio visualization, and personas.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: theme audio client-injection browser-storage persona · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Survey · jinhuang712/dsh-survey@9f36ef1 — A model tool and rich Web form for multi-question surveys, skips, Markdown answers, and recaps.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: model-tools interactive-form session-data client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Bottom Bar · kc0ed/dsh-bottom-bar@01d8433 — A configurable input-footer statistics row with cost estimates and a persistent local usage ledger.

  • Evidence: manifest → patch · Identity: @kc0ed/dsh-bottom-bar
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: token-meter cost-estimation browser-storage client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH WhaleGirl · KLnormal/dsh_whalegirl@6cf1b30 — A desktop-native animated companion driven by DSH session events.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package SEE LICENSE IN ASSET_LICENSE.md · lifecycle none · compatibility unknown
  • Signals: desktop-app session-data audio subprocess external-model-download · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Bell Notify · Laplace-bit/dsh-bell-notify@943e178 — Synthesized Web Audio bells and status cues for agent lifecycle events.

  • Evidence: manifest → patch · Identity: dsh-bell-notify
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: audio agent-events client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Keyboard · lhf6623/dsh-keyboard@4ecb1b7 — An on-screen keyboard and mouse visualizer that highlights live input events.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: input-events client-injection keyboard-visualizer github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Neu Theme · Lhy723/dsh-neu-theme@c6ecbe4 — A light and dark neumorphic theme for DSH Web.

  • Evidence: manifest → patch · Identity: dsh-neu-theme
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: theme client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Prompt Recall · liguanyu/dsh_PromptRecall@6040210 — Codex-style up and down history recall for the Web prompt input.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: input-history client-injection browser-storage · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• My Better DSH · lilwhich/my_better-dsh@b903e95 — A beginner-oriented Web bundle combining file navigation, session tools, UI packs, checkpoints, and global settings.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: aggregate-bundle filesystem-write session-data client-injection configuration-edit · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Frosted Glass · makuralymi/dsh-webUI-Glass-Theme@9822e4a — A global frosted-glass theme with animated light/dark switching and scheduling.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
  • Signals: theme client-injection timer github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH CoT Summarization · MeowLynxSea/dsh-cot-summerization@dd69071 — Hides raw reasoning and displays a summary generated through a configurable Chat Completions endpoint.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: reasoning-data external-network credentials model-request client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Sticky Note · Meredith2328/dsh-sticky-note@ebabb6c — A Web sticky-note panel that saves notes and TODO items into an archive directory.

  • Evidence: manifest → patch · Identity: dsh-sticky-note
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: filesystem-write persistent-data client-injection · Review: The host and Web client faces are structurally confirmed; wildcard DSH peers and persistent note writes were not runtime-tested.

• DSH Visualize · Nagi-ovo/dsh-visualize@e3254f7 — In-conversation generative UI with streaming interactive HTML cards and sandboxed rendering.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
  • Signals: github-only dynamic-content sandbox · Review: The package is private; only GitHub-source evidence was observed.

• DSH Pet Whale · nzl153/dsh-pet-whale@952551a — A Web desktop whale pet whose animation reacts to agent state.

  • Evidence: manifest → patch · Identity: pet-whale
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: desktop-pet agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Annotation · omdsh-dev/dsh-annotation@0b0ceb6 — Adds numbered annotations to selected assistant text and carries them into the next message.

  • Evidence: manifest → patch · Identity: @omdsh-dev/dsh-annotation
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: client-injection conversation-data · Review: The Web client injection and native bundle row are fixed-source confirmed; no DSH package peer range establishes runtime compatibility.

• DSH Better Sidebar · omdsh-dev/DSH-better-sidebar@5d2d6e5 — A sidebar workbench with file editing, terminal, Git, media, and extensible tabs.

  • Evidence: manifest → patch · Identity: dsh-better-sidebar
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: terminal filesystem-write git native-build remote-installer · Review: Direct package installation exists, but remote installer scripts and native builds warrant review.

• DSH GenUI · omdsh-dev/dsh-genui@0e756ef — Interactive inline UI for layouts, charts, forms, quizzes, Mermaid, 3D scenes, and action events.

  • Evidence: manifest → patch · Identity: dsh-genui
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: git-source dynamic-content client-injection web-routes · Review: Git-source install and dynamic client rendering are explicit review surfaces.

• DSH Task Control · p2coder/dsh-task-control@a20e79b — Composer controls for pausing, resuming, or cancelling the active conversation task.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: task-control session-data client-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH BigFish · QCYTSN/dsh-dafeiyu@fba38c1 — A desktop-native BigFish companion driven by DSH session events.

  • Evidence: manifest → patch · Identity: dsh-dafeiyu
  • Licenses: repo MIT / package SEE LICENSE IN ASSET_LICENSE.md · lifecycle none · compatibility unknown
  • Signals: desktop-app session-data audio subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• MyPet · qiqikuaidianpao/mypet@f9de0bf — A browser Tamagotchi-style pet that reacts to coding sessions, levels up, and collects skins.

  • Evidence: manifest → patch · Identity: mypet
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: desktop-pet session-data browser-storage client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Rhine Lab Theme · ReLuckyLucy/dsh_Rhine_Lab_themo@54c2f26 — A reversible Arknights Rhine Lab archive-terminal theme for DSH Web.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: theme client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Codex Pet · skr311/dsh-codex-pet@6aa7b86 — Imports sprite-sheet pets and renders them as agent-state-linked Web overlays.

  • Evidence: manifest → patch · Identity: dsh-codex-pet
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: desktop-pet image-assets agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Worktime Board · spacexun2/dsh-worktime-board@8fe6243 — Daily, weekly, monthly, and academic-calendar work-time statistics with a cultivation-style progression system.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
  • Signals: time-tracking gamification client-injection browser-storage · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Message Index · stnt04/dsh-msg-index@8b9834b — A floating frosted control that indexes user messages and jumps to them in the current session.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: session-data message-navigation client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Picture in Picture · syncended/deepseek-harness-picture-in-picture@591e7d1 — A picture-in-picture mini chat surface for DSH Web.

  • Evidence: manifest → patch · Identity: @syncended/dsh-pip
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: picture-in-picture session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH macOS Desktop · Taylor-Cat/dsh-macos-desktop@c56f308 — A retro System 7 and Mac OS 9 desktop shell containing chat, files, terminal, browser, docs, and knowledge views.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: desktop-shell terminal filesystem-read client-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Conversation Nav · UlaBe/dsh-conversation-nav@df424f6 — A right-edge drawer that lists user messages and jumps to their positions in the conversation.

  • Evidence: manifest → patch · Identity: @ulabe/dsh-conversation-nav
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data message-navigation client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Archived Chats · Ultronen/dsh-archived-chats@8a6912e — A settings page for browsing, searching, restoring, and deleting archived sessions by workspace.

  • Evidence: manifest → patch · Identity: dsh-archived-chats
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data archive-registry filesystem-delete client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Unarchive · uwu9039/dsh-unarchive@5f10e58 — An archived-session recycle bin with previews, restoration, and optional archive confirmation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data archive-registry filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Chatflow Rail · veritas501/dsh-chatflow-rail@485a978 — A left-side conversation-flow rail with position navigation and a docked previous-message card.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: session-data message-navigation client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Compact Activity · wallpap/dsh-compact-activity@6ef1278 — Codex-style one-line disclosures for reasoning and tool activity.

  • Evidence: manifest → patch · Identity: dsh-compact-activity
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: reasoning-data tool-activity client-injection prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Achievements · WJNCT55555/dsh-achievements@ce6ceb3 — A Web achievement gallery with toasts, trophies, dock integration, crossovers, and opt-in anonymous statistics.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: gamification client-injection browser-storage optional-telemetry · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Session Timeline · XiLuovo/dsh-session-timeline@55f3268 — A collapsible conversation timeline with scroll tracking, message jumps, and preview tooltips.

  • Evidence: manifest → patch · Identity: dsh-session-timeline
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: session-data message-navigation scroll-spy client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Context Panel · zhangxiang1993621/dsh-context-panel@aa2c80c — Displays skills, rules, and files used by the active conversation inside a layout pane.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data filesystem-read client-injection local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Web UI All · zhu1090093659/dsh-web-ui@5153e9a — An aggregate Web UI bundle combining task board, Git, terminal, remote UI, stats, pets, and skins.

  • Evidence: manifest → patch · Identity: @linxin666/dsh-web-ui-all
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepare · compatibility unknown
  • Signals: aggregate-scope terminal ssh git native-build · Review: Broad aggregate scope and a prepare build require elevated review before use.

Developer Tools

• DSH Request Flight Recorder · abinzhao/dsh-request-flight-recorder@319e3bf — Records bounded content-free diagnostics for request timing, streaming phases, failures, and session correlation.

  • Evidence: manifest → patch · Identity: dsh-request-flight-recorder
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: request-metadata session-data stream-diagnostics client-injection · Review: Exact rc.6 DSH peers and the native bundle are fixed-source confirmed; privacy properties, timing hooks, and the prepack build were not runtime-tested.

• DSH Python Tempfile Shim · AngelosZou/dsh-python-tempfile-shim@20b84cd — A temporary Windows sandbox shim that injects a local sitecustomize path into confined Python command process trees.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: windows-only environment-injection shell-runtime python-environment github-only · Review: The author documents local-clone installation and removal after an upstream fix; no shell resolver, environment, or Python process was modified.

• DSH Eval Harness · BiBoyang/dsh-eval-harness@035d1c6 — A headless evaluation harness for measuring agent behavior and task outcomes.

  • Evidence: manifest → patch · Identity: dsh-eval-harness
  • Licenses: repo unknown / package MIT · lifecycle prepack · compatibility unknown
  • Signals: headless evaluation · Review: A README owner spelling defect was observed; only a broad Cordis peer is declared.

• DSH Change Center · Chance-Wu/dsh-change-center@fbe60fc — Captures tool-driven file changes for diff review, verification, rollback, and optional Git staging or publication.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: filesystem-write git-write session-data tool-results llm-review high-trust-surface · Review: The fixed source can persist file-change evidence, apply or roll back edits, and invoke Git add, commit, and push; no filesystem, Git, or model action was executed.

• DSH Reviewer Bot · chaojixinren/dsh-reviewer-bot@77228ae — Automates repository review workflows across GitHub and GitLab with configurable trust, diagnostics, and write controls.

  • Evidence: manifest → patch · Identity: @dshrb/bundle
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: credentials external-network repository-write subprocess ci-data review-automation · Review: The bundle declares exact DSH rc.6 compatibility and supports forge credentials plus optional repository writes; its automation, subprocesses, and remote calls were not executed.

• DSH EasySSH Workspace · chenw2759-wq/dsh-IDE@607ff87 — An SSH workspace mode that routes file and subprocess operations to remote hosts while exposing remote browsing and agent tools.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle prepare · declares rc.6 peers
  • Signals: ssh credentials remote-execution filesystem-write prepare-build · Review: Source-link installation and exact rc.6 peers are documented; remote mode bypasses the local kernel sandbox, and no credential, SSH, SFTP, or process action was executed.

• DSH Git Ops · codehz/dsh-git-ops@bab93cf — Adds Git recommendations, local branch switching, status and diff views, and agent intent shortcuts.

  • Evidence: manifest → patch · Identity: dsh-git-ops
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: git-read git-write branch-switch subprocess client-injection agent-intent · Review: The fixed source invokes Git through the DSH subprocess surface and can stage changes or switch branches; no command or UI action was executed.

• Arch Doc · duyanta123/arch-doc@76fcfaf — A filesystem skill that analyzes a codebase and produces architecture documentation for modules, dependencies, entry points, and run methods.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-read filesystem-write code-analysis documentation-generation github-only · Review: Pinned GitHub installation is documented; the wildcard skill-filesystem peer leaves compatibility unproven, and no codebase was read or documented.

• DSH Workbench · ghbhiee/dsh-plugins@2017411 — A browser workbench combining a terminal, file explorer, and file preview.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: terminal subprocess filesystem-read filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Console · Isanti2016/dsh-console@8d31014 — Console commands for Web service and SSH-tunnel management, one-shot prompts, and TUI launch.

  • Evidence: manifest → patch · Identity: dsh-console
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: command-line ssh subprocess service-management · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Ops Kit · LeslieWylie/dsh-ops-kit@c4ba835 — Operational tools and skills for development workflows inside DeepSeek Harness.

  • Evidence: manifest → patch · Identity: dsh-ops-kit
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: tools skills · Review: DSH skill and tools peers declare rc.6; runtime compatibility was not tested.

• DSH Proxy Config · lhf6623/dsh-proxy-config@e3d5934 — A settings panel that persists HTTP or SOCKS proxy values into the host process environment.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: proxy process-environment configuration-write credentials subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH SCNet · lql341/dsh-scnet@24070df — SSH and Slurm tooling for SCNet and similar domestic HPC clusters.

  • Evidence: manifest → patch · Identity: dsh-scnet
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: ssh hpc remote-execution filesystem-write subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Bash Terminal · MAXeaglet/dsh-bash-terminal@6894913 — A Windows shell tool that routes commands through PowerShell, Git Bash, or WSL with a configurable default.

  • Evidence: manifest → patch · Identity: dsh-bash-terminal
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: subprocess shell windows configuration-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Large Project Performance · orangeofcarl0-sys/dsh-large-proj-perf@cb957b4 — Large-session optimizations for fork initialization, projection warming, cache refill, materialization, LRU pruning, and heap detection.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: performance-patch session-data cache memory-management github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH UE Assets Operator · QSWWLTN/dsh-UEAssetsOperator@2dbb683 — Native tools for Unreal Engine uasset inspection and Blueprint edits through built-in UE Python.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: unreal-engine asset-inspection filesystem-write subprocess python · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH NeoForge · r05En1cU/dsh-neoforge@7bbee40 — A plugin API layer with runtime mixins, snapshot and restore, and a Cordis-native event bus.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: plugin-api runtime-mixin snapshot event-bus prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Structured Output · royenheart/dsh-plugin-structured-output@1116e33 — JSON Schema structured-output tools, a command, and native result validation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: structured-output json-schema model-tools validation local-installer · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Restart Systemd · RoyougiShiki/dsh-restart-systemd@90ab7ea — A Web and command trigger for safely restarting a user systemd service and resuming the session.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: service-restart systemd subprocess session-data local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Lean · sjh9714/dsh-lean@df646af — Audits prompt-prefix token usage and proposes reductions to lower model cost.

  • Evidence: manifest → patch · Identity: dsh-lean
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: token-audit cost-optimization prompt-analysis filesystem-read · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Minimal PowerShell · skydog221/dsh-minimal-powershell@aa53185 — Keeps minimal-mode shell calls working through PowerShell on Windows.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: powershell shell sandbox-policy windows prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Vimina · Sunse666/dsh-vimina@85b04c9 — Exposes Windows GUI scanning, input, screenshots, windows, mouse, and VMA scripting through native tools.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
  • Signals: gui-automation windows subprocess screenshot model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Git · taontech/dsh-git@bbe81b5 — A Git tab for repository status, history, branches, initialization, and operations.

  • Evidence: manifest → patch · Identity: @taontech/dsh-git
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: git filesystem-write subprocess client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Archify · tt-a1i/archify@cffdd42 — Architecture knowledge and diagrams exposed to DSH through a nested integration bundle.

  • Evidence: manifest → patch · Identity: @tt-a1i/archify-dsh
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: nested-bundle filesystem-skill dynamic-yaml · Review: Native structure confirmed in a nested package; runtime compatibility was not tested.

• DSH Git Graph · WhitePlusMS/dsh-git-graph@4e4621a — A read-only Git graph view with refs, worktree state, search, filtering, and history pagination.

  • Evidence: manifest → patch · Identity: dsh-git-graph
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: git workspace-read · Review: Exact rc.6 DSH peers were declared; runtime compatibility was not tested.

• DSH Git Worktree · wloops/dsh-git-worktree@17945c5 — Experimental worktree-backed session targets with isolated sessions, review views, confirmed delivery, and cleanup.

  • Evidence: manifest → patch · Identity: dsh-git-worktree
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: git-worktree session-data approval-gate filesystem-delete prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Launcher · XQ-rxslcq/dsh-launcher@046acfb — A configurable launcher for hidden command-line startup and an animated desktop companion window.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: application-launcher subprocess configuration-write desktop-app · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Remote SSH · Yan-Zero/dsh-remote-ssh@21d727c — Transparent local and remote SSH workspaces spanning files, subprocesses, settings, and Web UI.

  • Evidence: manifest → patch · Identity: dsh-remote-ssh
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · compatibility unknown
  • Signals: ssh remote-execution filesystem-write credentials prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Git Bash Tool · zeroa234/dsh-preset-minimal-windows@5e33b0f — A Windows Git Bash execution tool using the host subprocess seam with output spill and timeouts.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: git-bash subprocess windows filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Agent & Workflow

• DSH Forge · alex04130/dsh-forge@fae36ff — A broad extension bundle for cross-session mail, agent teams, model routing, runtime injection, skills, and plugin management.

  • Evidence: manifest → patch · Identity: @dsh-forge/bundle
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: multi-agent dynamic-loading package-management filesystem-write high-trust-surface · Review: The distributable npm bundle, rather than the private root source manifest, declares rc.6 peers; its broad runtime injection and management surfaces were not executed.

• DSH Computer Use · Anionex/dsh-computer-use@76bfe86 — Computer-use tooling for screen perception and controlled desktop actions.

  • Evidence: manifest → patch · Identity: @anionex/dsh-computer-use
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: computer-use browser native-artifacts · Review: Exact rc.6 DSH peers were declared; broad computer control remains a high-trust capability.

• DH Multiagents · atesahmet0/dh-workspace@fb1f22c — A role-bound multi-agent bundle with enforced tool matrices, persisted delegation, reusable presets, philosophy skills, and worktree operations.

  • Evidence: manifest → patch · Identity: @dh-multiagents/bundle
  • Licenses: repo MIT / package unknown · lifecycle postinstall · declares rc.6 peers
  • Signals: multi-agent filesystem-write git-worktree model-routing postinstall · Review: The public bundle identity resolves and documentation targets rc.6; its approved postinstall mirrors presets, and no lifecycle or agent action was run.

• DSH CC Agents · Bcy2020/dsh-cc-ecosystem@486441b — An adapter that turns Claude Code agent definitions into DSH subagents with persona, tool filters, skills, and model aliases.

  • Evidence: manifest → patch · Identity: dsh-cc-agents
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: multi-agent filesystem-read prompt-injection tool-filtering model-routing · Review: The public package maps to this monorepo; wildcard DSH peers leave compatibility unproven, and no Claude asset or subagent was loaded.

• DSH Captain Call · Daisy2048/dsh-captain-call@d2b7406 — A desktop call-style notifier for AgentTeams completions with local speech synthesis, optional microphone replies, and archived conversations.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: session-data filesystem-read audio microphone external-model-download · Review: Local source installation is documented for the private package; audio, model download, microphone, and AgentTeams state access were not executed.

• DSH AE Team · ddddjaak/dsh-ae-team@35a7494 — An application-engineering team pack with seven role definitions, professional skills, and Mermaid graph templates for DSH Web.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: multi-agent filesystem-skill prompt-injection dynamic-mermaid github-only · Review: Source-link installation is documented; the manifest declares no DSH peer range, and no role, skill, prompt, or graph template was loaded.

• DSH AUX · DoloresCaritasAngelus/DSH-AUX@8c1ef2c — Routes auxiliary LLM tasks for vision, Web extraction, and text compression with fallback, concurrency, and session status controls.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: official-looking-namespace core-patch installer-script external-network credentials llm-routing session-data · Review: The independent Git source uses an official-looking unpublished package name and an installer that symlinks files and patches DSH core for image, session, and settings bridges; no installer, patch, or model request was executed.

• DSH TaskSwarm · february2015/dsh-taskswarm@bec7d32 — Persistent multi-agent task orchestration with dependency waves, isolated worktrees, cross-model review, merge handling, and a live dashboard.

  • Evidence: manifest → patch · Identity: dsh-taskswarm
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: multi-agent git-worktree filesystem-write local-web-server prepare-build · Review: The public package maps to this repository, but wildcard DSH peers leave compatibility unproven; no build, agent, Git, merge, or dashboard action was run.

• DSH Prompt Enhancer · Fishsb/dsh-prompt-enhancer@d42b2b4 — Uses an independent LLM call to rewrite draft prompts in the DSH composer with undo support.

  • Evidence: manifest → patch · Identity: dsh-prompt-enhancer
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: llm-call client-injection external-network credentials · Review: The client peers declare rc.6 and the native patch is present; prompt disclosure to a configured model and updater network behavior were not executed.

• DSH Nudge · huangmouren2023/deepseek-harness-toolkit@ea3ed50 — Automatically follows up after terminal failures or interruptions so the agent explains or resumes.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: agent-steering terminal-events prompt-injection github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Team · huxint/dsh-team@66835a7 — Persistent named agent teams with shared tasks, mailboxes, virtual workspaces, and a live team room.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: multi-agent session-data filesystem-write mailbox client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Discussion Intent · JinPLu/dsh-plugin-discussion-intent@f81b5d1 — An intent-calibrated discussion mode that keeps complex conversations evidence-led and action-oriented.

  • Evidence: manifest → patch · Identity: @jinplu/dsh-plugin-discussion-intent
  • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: agent-steering system-prompt session-data client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Orcana Runtime Pack · Leo-Ayh-Oday/dsh-orcana@abf4b60 — A general Orcana runtime profile bundle for DSH.

  • Evidence: manifest → patch · Identity: @leooday/dsh-bundle
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: profile-bundle workflow-runtime package-bundle · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plan Execute · leotangjc/plan-execute@f236fde — A three-stage workflow that grills decisions, compiles plans, and executes with acceptance checks.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: workflow-orchestration model-tools agent-steering github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Voice · meomeo-dev/dsh-voice@b4b989c — Session, workspace, and user-level conversation-tone switching with bundled voice skills.

  • Evidence: manifest → patch · Identity: @meomeo-dev/dsh-voice
  • Licenses: repo unknown / package unknown · lifecycle prepare · mixed peer ranges
  • Signals: system-prompt filesystem-skill client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Waker Trigger · msilita/dsh-waker-trigger@b10322d — Durable any/all triggers over schedules, files, commands, HTTP, processes, and ports that wake an agent at a safe boundary.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
  • Signals: scheduler filesystem-watch subprocess external-network agent-events · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Cron · omdsh-dev/dsh-cron@9c4b5fa — Durable cross-session jobs driven by five-field cron rules and injected into agent sessions.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepare · mixed peer ranges
  • Signals: scheduler session-data agent-steering filesystem-write prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH LLM Fallbacks · omdsh-dev/dsh-llm-fallbacks@69ec1fe — Adds configurable provider and model fallback chains after retry, authentication, quota, or rate-limit failures.

  • Evidence: manifest → patch · Identity: dsh-llm-fallbacks
  • Licenses: repo MIT / package unknown · lifecycle prepare · declares rc.6 peers
  • Signals: llm-routing client-injection prepare-build · Review: The DSH peers declare rc.6 and the fallback row is fixed-source confirmed; prepare builds code and provider switching was not runtime-tested.

• HA Orchestrator · Saktawdi/ha-orchestrator@83b80a6 — Model failover and subagent fanout, pipeline, and supervisor orchestration.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: model-failover multi-agent workflow-orchestration external-network prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Swift Cycle · Solismuchengxue/dsh_plugin_swift_cycle@d44bee7 — A DSH adapter for the Swift Cycle governance skill.

  • Evidence: manifest → patch · Identity: dsh-plugin-swift-cycle
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: governance filesystem-skill workflow · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Octie DSH · StarChen-Cycler/octie-dsh-plugin@457bc4e — A persistent task-graph state machine with model tools, a client panel, presets, skills, and immutable snapshots.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: task-graph model-tools filesystem-write snapshot identity-collision · Review: The npm identity maps to the upstream Octie repository, so this record is pinned to the author's documented Git plugin source and does not claim the npm package.

• DSH Project Kanban · StruggleYang/dsh-project-kanban@1337489 — A workspace-isolated persistent Kanban board with browser UI and model tools.

  • Evidence: manifest → patch · Identity: dsh-project-kanban
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: kanban model-tools filesystem-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Yogacara · tancheng33/dsh-yogacara@daa16f8 — A Yogacara self-model with consciousness states, mental factors, durable seeds, and a self-grasping meter.

  • Evidence: manifest → patch · Identity: dsh-yogacara
  • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: self-model long-term-memory system-prompt model-tools prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Expert Team · tipus0731/dsh-expert-team@0d08ec9 — Role-bounded expert agents with acceptance-driven dispatch and unanimous cross-validation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: multi-agent task-dispatch cross-validation model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Subagent Roles · trynewthin/dsh-subagent-roles@83f118c — Role-based model routing and Web configuration for subagent delegation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: multi-agent model-routing configuration-write client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Files & Data

• DSH Usage Billing · 940842546/dsh-usage-billing@96ff9fc — Aggregates model token usage and estimated DeepSeek charges into persistent session and time-range dashboards.

  • Evidence: manifest → patch · Identity: dsh-usage-billing
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: session-data usage-metrics filesystem-write client-injection · Review: The DSH tools peer declares rc.6 and the fixed source writes aggregated usage data; pricing accuracy and runtime behavior were not verified.

• DSH Input File Ref · AFAP/dsh-input-file-ref@fe62f66 — An at-mention file picker that browses and searches relative workspace paths before inserting the selected path into chat.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-metadata workspace-read client-injection web-route github-only · Review: GitHub installation is documented; the host lists relative path metadata behind a same-origin trust fence, and no filesystem access was exercised.

• DSH Usage · Aisland-SJL/dsh-usage@4b9a952 — Shows persistent balances and token-usage dashboards across DSH sessions and optional Claude Code usage logs.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data credentials external-network filesystem-write identity-collision · Review: The author documents GitHub-source installation; the private manifest name collides with another npm repository, so no npm identity is listed and usage, balance, and file access were not executed.

• DSH Session Export · bwndlct/dsh-session-export@eb18389 — Exports DeepSeek Harness sessions into portable files for reuse or archival.

  • Evidence: manifest → patch · Identity: dsh-session-export
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: session-data filesystem-write · Review: Command, session, and tools peers declare rc.6; exported data may contain sensitive context.

• DSH Drag to Attachment · djt889/dsh-drag-to-attachment@620ad6e — Turns dropped or pasted host files and folders into DSH attachments or absolute filesystem paths.

  • Evidence: manifest → patch · Identity: @dsh-external/dsh-drag-to-attachment
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
  • Signals: native-executable subprocess filesystem folder-attachment absolute-path client-injection · Review: GitHub installation is documented and the package bundles an Everything helper executable for local path discovery; no binary, subprocess, or file operation was executed.

• DSH Drag-and-Drop Upload · GLFzr/dsh-file-upload@54891a4 — Adds drag-and-drop uploads to the DSH Web composer and stores files in a local dropbox directory.

  • Evidence: manifest → patch · Identity: dsh-file-upload
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: file-upload filesystem-write web-routes client-injection · Review: The dual host/client bundle is structurally confirmed; upload routes and filesystem writes were not runtime-tested.

• DSH File Upload · HongMing-Huang/dsh-file-upload@7aac111 — Composer file upload with removable chips, content sniffing, Markdown conversion, and document tools.

  • Evidence: manifest → patch · Identity: dsh-file-upload
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
  • Signals: file-upload filesystem-write document-parsing · Review: DSH peers declare rc.6 while Cordis is broad; runtime compatibility was not tested.

• DSH File Picker · JackeyWilder/dsh-file-picker@a8741fb — A native Windows file picker and attachment rail that injects selected paths into the session.

  • Evidence: manifest → patch · Identity: @jackeywilder/dsh-file-picker
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: native-dialog filesystem-read session-data client-injection windows · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH FileScope · KunIsMe/dsh-filescope@e84692e — A workspace file-explorer drawer with live file previews.

  • Evidence: manifest → patch · Identity: dsh-filescope
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-read file-preview client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Explorer · No-PRM/dsh-explorer@2b21a68 — An aggregate host and browser file explorer with tree browsing, search, Git status, media preview, and drag-to-reference.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: filesystem-read file-search git-status media-preview client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Chat Import · Nwflower/dsh-chat-import@3c751ce — Imports conversation histories from major coding agents and chat products as resumable DSH sessions.

  • Evidence: manifest → patch · Identity: dsh-chat-import
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: session-import filesystem-read session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH At File · omdsh-dev/dsh-at-file@9c71e52 — Codex-style @file mentions that search workspace paths and attach file contents to prompts.

  • Evidence: manifest → patch · Identity: dsh-at-file
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: workspace-read data-disclosure · Review: Workspace contents can be attached to prompts; users should review disclosure boundaries.

• DSH Files · taxueseek/dsh-files@43887e2 — File upload cards, session-scoped storage, deduplication, cleanup, and document reading tools.

  • Evidence: manifest → patch · Identity: dsh-files
  • Licenses: repo unknown / package MIT · lifecycle prepublishOnly · mixed peer ranges
  • Signals: file-upload filesystem-write document-parsing · Review: DSH peers declare rc.6 while Cordis is broad; repository license detection was unavailable.

• DSH Browser FS · whitefirer/dsh-browser-fs@d144aaf — Lets agents list, read, and write within a browser-authorized local directory over a WebSocket relay.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
  • Signals: browser-filesystem filesystem-read filesystem-write websocket model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH DeepSeek Attach · wqx-txdsyl/dsh-ds-attach@9cc7bab — DeepSeek-style file cards, drag-and-drop, document text extraction, and message injection for DSH attachments.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: file-upload document-extraction filesystem-write session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Cordis Transfer Plugin · zby1211/cordis-transfer-plugin@c99f767 — Imports and exports dynamic Cordis plugins as ZIP packages through the browser.

  • Evidence: manifest → patch · Identity: cordis-transfer-plugin
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: plugin-export plugin-import file-upload filesystem-write model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Vision & Media

• DSH Vision Toolkit · Anionex/dsh-vision-toolkit@29850a8 — Vision tools for image Q&A, long-screenshot OCR, UI reproduction, grounding, and pixel diff.

  • Evidence: manifest → patch · Identity: @anionex/dsh-vision-toolkit
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: browser subprocess credentials python-environment · Review: High-privilege runtime preparation is visible; compatibility requires a separate check.

• DSH Codex Media · binsarjr/dsh-codex-media@4dba264 — Adds local image and document analysis plus image generation through Codex CLI or configurable API transports.

  • Evidence: manifest → patch · Identity: dsh-codex-media
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: local-file subprocess external-network credentials image-generation · Review: The native row loads source that can read files, spawn the local Codex CLI, call APIs, and write generated images; none of those paths were executed.

• DSH Blender · CheshireJCat/blender@3d641da — A Blender integration that exposes 3D scene authoring through DSH tools.

  • Evidence: manifest → patch · Identity: dsh-blender
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: external-application subprocess setup-command · Review: DSH tools rc.6 is declared; Blender execution and setup were not tested.

• DSH Chat Imagine · corrinehu/dsh-chat-imagine@419e39b — Image-generation tools that use configured OpenAI-compatible providers or a detected local MiniMax CLI and render results in chat.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: image-generation external-network credentials subprocess in-memory-media · Review: GitHub installation and rc.6 tools are documented; provider requests, CLI discovery, subprocesses, and image generation were not executed.

• DSH ChatVoice · FuzzySoul/dsh-chatvoice@34b4a18 — Browser-native speech input and reply read-aloud without a separate API key.

  • Evidence: manifest → patch · Identity: dsh-chatvoice
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: microphone browser-speech client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Image Bridge · haitang1/dsh-image-bridge@4c7e7a9 — Writes pasted images into the workspace and exposes hidden paths so text models can call vision tools.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: image-input filesystem-write prompt-injection model-tools session-data · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Diagram · hanzhangzzz/dsh-diagram@480d3b3 — Editable Excalidraw diagrams embedded in DeepSeek Harness conversations.

  • Evidence: manifest → patch · Identity: dsh-diagram
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: interactive-content · Review: Exact rc.6 DSH peers were declared; runtime compatibility was not tested.

• DSH DashScope Media · hisonWarren/deepseekharness-alter@efb651d — DashScope-backed image, video, and speech tools with in-chat media cards.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · declares rc.6 peers
  • Signals: image-generation video-generation text-to-speech credentials external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DirectorX · LaplaceYoung/dsh-directorx@5553398 — AI video generation, editing, quality review, storyboard canvas, and a director knowledge library.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
  • Signals: video-generation video-editing quality-control filesystem-write external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• ModLens · liustack/modlens@2818192 — A vision bridge that turns images into structured OCR, layout, and semantic evidence for text-only models.

  • Evidence: manifest → patch · Identity: @liustack/modlens
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: external-network credentials external-installer · Review: External vision engines and credentials are capability facts, not a safety judgment.

• DeepSee · WUBING2023/deepsee@7431a43 — Vision reading, model-capability discovery, and multi-model routing with optional OCR installation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: vision model-routing external-download subprocess install-script · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DeepSeek Visionary DSH · xlight/deepseek-visionary@e3cf51c — Native vision, status, login, and logout tools backed by a Visionary server CLI and an image bridge.

  • Evidence: manifest → patch · Identity: @xlight-oss/visionary-dsh
  • Licenses: repo MIT / package unknown · lifecycle none · declares rc.6 peers
  • Signals: vision subprocess credentials external-network model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Vision Router · ysr666/dsh-vision-router@d805a71 — A vision routing bundle with image Q&A, grounding, OCR, pixel inspection, screenshots, and provider chains.

  • Evidence: manifest → patch · Identity: dsh-vision-router
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: external-network browser file-upload filesystem-write native-code · Review: The fixed manifest and patch declare rc.6 DSH peers; network providers, browser automation, file writes, and native image dependencies were not executed.

• DSH Realtime Voice · zfu691531-hash/dsh-realtime-voice@91aae22 — Realtime speech-to-speech using Qwen or OpenAI-compatible providers.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
  • Signals: microphone audio credentials external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Search & Research

• DSH Search · 2982136527/dsh-plugins@b8b03b1 — Provides model-callable Web search through Bing RSS with a DuckDuckGo fallback and no required API key.

  • Evidence: manifest → patch · Identity: dsh-search
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: web-search external-network git-source · Review: The fixed monorepo subdirectory and patch are confirmed; the author documents clone-plus-local-path installation, and the repository has no detected license file.

• DSH Web Tools · A3Boy/dsh-web-tools@ff35019 — Unifies multiple Web search and fetch providers with credential pools, quotas, health tracking, and deterministic fallback.

  • Evidence: manifest → patch · Identity: dsh-web-tools
  • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: external-network credentials web-search remote-content client-injection · Review: The fixed peers declare rc.6; provider calls, credential handling, quota logic, fallback behavior, and the prepare build were not executed.

• DSH Web Search Multi · cinob/dsh-web-search-multi@ea1c2d0 — Provides multi-provider Web search with automatic fallback, credentials, and a settings interface.

  • Evidence: manifest → patch · Identity: dsh-web-search-multi
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: external-network credentials workspace-write provider-fallback settings-ui · Review: Wildcard DSH peers and multiple external search providers are declared, with documented workspace-write capability; no provider request or write was executed.

• DSH Web Access · haibinwang9/dsh-web-access@1eaffaf — Multi-provider Web search and URL extraction with fallback across SearXNG, Tavily, Brave, and DuckDuckGo.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: web-search content-extraction credentials external-network provider-fallback · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH PCB Parts Search · Huaqiu-Electronics/dsh-pcb-parts-search@7b02c04 — A model tool for searching electronic components and ICs from the LCSC/EDA parts service.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
  • Signals: parts-search model-tools external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Search Boost · Mr-remon219/dsh-search-boost@af80be8 — Fuses multiple Web and X search engines with page fetching and parallel research workflows.

  • Evidence: manifest → patch · Identity: dsh-search-boost
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: external-network credentials subprocess browser multi-agent · Review: The bundle row and search-provider override are fixed-source confirmed; external engines, credentials, subprocesses, and research fan-out were not executed.

• DSH Web Search Exa · TonyDua/dsh-web-search-exa@083706b — Exa-powered web search exposed to DSH as agent tools and Web settings.

  • Evidence: manifest → patch · Identity: @tonydua/dsh-web-search-exa
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: external-network credentials · Review: DSH peers declare rc.6 while the Cordis range remains rc.1; runtime was not tested.

• DSH Free Search · zhouzhencheng07/dsh-free-search@2336dad — A keyless multi-source Web search provider wired into the native DSH Web seam.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: web-search external-network provider-fallback identity-collision · Review: The npm identity maps to another repository, so this record is pinned to the author's documented Git source and does not claim that package.

Memory

• DSH Native Memory · highland0971/dsh-native-memory@270e235 — Workspace-scoped long-term memory with native storage, cross-session recall, approvals, and provenance.

  • Evidence: manifest → patch · Identity: dsh-native-memory
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: long-term-memory session-data approval-gate storage-domain prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• iHow Memory · iHow1/dsh-ihow-memory@c530943 — A local-first shared memory plugin exposed to DSH through an MCP client.

  • Evidence: manifest → patch · Identity: dsh-ihow-memory
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
  • Signals: long-term-memory mcp local-service filesystem-write prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Session Summarizer · KhalilYamber/dsh-session-summarizer@7a115c3 — Reads recent or selected sessions and generates a compact context summary.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data summarization model-request local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Context Structurer · kkkkkklze/dsh-context-structurer@0420f4c — Splits conversations into typed subcontexts and indexes them with a structured table of contents.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data context-index filesystem-write local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Unified Agent Memory · Noelune/unified-agent-memory@b6a879c — A unified memory layer for retaining and retrieving agent knowledge across work.

  • Evidence: manifest → patch · Identity: dsh-unified-agent-memory
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: persistent-memory · Review: Manifest declares DSH tools rc.6 peers; runtime compatibility was not tested.

• Folio DSH Tools · nyantused-cpun/folio@91f3d36 — Model tools and guards that expose the Folio memory and quality CLI through a Python subprocess.

  • Evidence: manifest → patch · Identity: @nyantused/folio-dsh-tools
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: long-term-memory model-tools subprocess filesystem-write guard · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Recall · Relistencode/dsh-recall@23f9103 — Local offline literal, fuzzy, and semantic search over original conversation history.

  • Evidence: manifest → patch · Identity: dsh-recall
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data local-search semantic-search filesystem-read · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Engramory · tinqiao-oss/engramory@4a9b392 — Curated file-based long-term memory with Markdown notes, a shared plain-file store, and a deterministic index cap.

  • Evidence: manifest → patch · Identity: dsh-engramory
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: long-term-memory filesystem-read filesystem-write guard · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Safety & Approvals

• DSH Popper · 1473382/dsh-popper@d6130c0 — A falsification-driven session loop with claim gates, competing hypotheses, and an append-only evidence ledger.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: system-prompt tool-gating session-data filesystem-write github-only · Review: Git-source installation is documented, but the unpublished scoped package name and manifest repository field do not establish an official npm identity; no gate or session write was executed.

• DSH Turn Approval · arrow949/dsh-turn-approval@5b4cbfd — Turn-scoped approval rules that expire after the current task.

  • Evidence: manifest → patch · Identity: dsh-turn-approval
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: permission-control · Review: Only a Cordis peer is declared, so DSH compatibility remains unknown.

• DSH Island · cdxiaodong/dsh-island@c7cd407 — A macOS menu-bar island and whale companion that displays DSH sessions, tools, progress, and approval requests.

  • Evidence: manifest → patch · Identity: dsh-island
  • Licenses: repo unknown / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: native-executable subprocess tool-arguments approval session-data · Review: The source spawns a bundled macOS panel and forwards tool arguments, session paths, and approval decisions over a local socket; no native code or prepublish hook was executed.

• DSH Workspace Only · CsBpRd/dsh-workspace-only-plugin@a2682d3 — Adds a policy switch intended to confine file access for every sandbox mode to the session workspace.

  • Evidence: manifest → patch · Identity: dsh-workspace-only-plugin
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: approval-hook core-patch remote-installer filesystem-write policy-control · Review: The documented setup downloads an installer and patches DSH core plus another plugin to alter approval policy; the installer and patch scripts were not executed.

• DSH Auth · hxy91819/dsh-auth@ea8e827 — A single-account authentication bundle designed to run behind Nginx for DSH Web.

  • Evidence: manifest → patch · Identity: dsh-auth
  • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
  • Signals: authentication credentials reverse-proxy session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Approval LLM · Letter2025/dsh-approval-llm@af70355 — An LLM-assisted approval layer for evaluating sensitive tool actions.

  • Evidence: manifest → patch · Identity: dsh-approval-llm
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: permission-control llm-call · Review: Broad peer ranges leave compatibility unknown; repository license detection was unavailable.

• Upstream Radar · MicroMilo/upstream-radar@0519c00 — Dependency security monitoring for vulnerable transitive paths and breaking plugin updates.

  • Evidence: manifest → patch · Identity: upstream-radar
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · compatibility unknown
  • Signals: dependency-audit vulnerability-data external-network filesystem-read prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Check · stimQQ/dshplugins@b48002d — Audits installed plugins for broken packages, stale DSH pins, and install-time code, then drafts repair issues.

  • Evidence: manifest → patch · Identity: dsh-plugin-check
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-audit dependency-audit lifecycle-scan issue-drafting · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Prior Probe · SuTang-vain/dsh-self-harness-tools@373b454 — Frozen probe batteries with deterministic offline scoring and optional single-shot provider calls.

  • Evidence: manifest → patch · Identity: dsh-prior-probe
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: evaluation regex-scoring model-tools external-network credentials · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DeepSeek Harness Auth · taichuy/deepseek-harness-auth@5399726 — A fail-closed password authentication proxy bundle for the DSH Web profile.

  • Evidence: manifest → patch · Identity: deepseek-harness-auth
  • Licenses: repo MIT / package MIT · lifecycle prepack · mixed peer ranges
  • Signals: authentication reverse-proxy credentials prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Trust Center · TonyWang-hub/dsh-plugin-trust-center@ba0b0aa — Evidence-first static inspection, compatibility checks, quarantine, receipts, snapshots, and controlled promotion for DSH plugins.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
  • Signals: plugin-audit quarantine sbom snapshot prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Defensive Prompt Injection · Tough-Respawn/defensive-prompt-injection@7384be5 — A fail-closed action gate that applies defensive prompt-injection rules inside DSH.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: prompt-injection-defense approval-gate filesystem-read local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH AutoGate · wangxing-git/dsh-autogate@dad7c04 — A workspace-sandboxed automatic approval tier using deterministic rules, LLM adjudication, and human escalation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: approval-gate sandbox-policy model-request human-escalation prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Whale Status · WhaleHarness/WhaleHarness@1bf6c4c — Checks site health, TLS, DNS, tarball integrity, local plugin verification, and update state.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: site-health tls dependency-audit integrity-check external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Vet · wulun811/dsh-plugin-vet@2ef0b8d — A plugin trust pipeline combining deterministic scans, runtime sentinels, audit skills, and a GUI shield.

  • Evidence: manifest → patch · Identity: @jieai/dsh-plugin-vet
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: plugin-audit runtime-monitor filesystem-skill client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Poison Guard · zoahdev/dsh-poison-guard@7be8ffd — A pre-install supply-chain scanner using AST analysis, deobfuscation, and heuristics for exfiltration and dynamic code.

  • Evidence: manifest → patch · Identity: dsh-poison-guard
  • Licenses: repo MIT / package MIT · lifecycle prepare · declares rc.6 peers
  • Signals: supply-chain-scan ast-analysis deobfuscation filesystem-read prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Integrations

• Chicheng Gate · 534119219/chicheng-gate@155dbf6 — Adds LAN and tunneled DSH panel access with a password gate, trusted-host configuration, and managed frpc connectivity.

  • Evidence: manifest → patch · Identity: chicheng-gate
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: remote-access credentials remote-binary-download subprocess filesystem-write · Review: Static source shows frpc download with checksum verification, archive extraction, credential storage, subprocess launch, and DSH restart paths; none were executed.

• DSH Notify Win · Andyqwe44/dsh-notify-win@a26c182 — Shows native Windows task and question notifications, flashes the taskbar, and can return toast answers to DSH.

  • Evidence: manifest → patch · Identity: dsh-notify-win
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: native-executable powershell subprocess question-data filesystem · Review: The package ships an executable plus PowerShell and VBScript helpers and spawns notification processes; no native helper, subprocess, question flow, or prepublish hook was executed.

• DSH QQ Remote · ASAKAFENG/dsh-qq-remote@b724335 — Controls DSH over a OneBot QQ bridge with remote commands, task dispatch, screenshots, chat, sessions, and progress events.

  • Evidence: manifest → patch · Identity: @dsh-external/dsh-qq-remote
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: remote-command-execution external-network credentials screenshot session-data subprocess · Review: The fixed source exposes remote command, screenshot, session, file, credential, and subprocess surfaces through QQ; its separate installer and all runtime paths were not executed.

• DSH WeChat Pro · bwhite55/dsh-wechat-pro@c726696 — Connects WeChat contacts to real DSH workspaces, sessions, prompts, approvals, event streams, and media transfers.

  • Evidence: manifest → patch · Identity: dsh-wechat-pro
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: external-network credentials session-data approval file-transfer filesystem-write · Review: The package uses wildcard DSH peers and handles WeChat credentials, prompts, approvals, session events, and media files; none were runtime-tested.

• DSH OpenCode · chiro2001/dsh-oc@1ed1c51 — Bridges DSH sessions to an OpenCode terminal interface with model credentials, filesystem access, and native runtime support.

  • Evidence: manifest → patch · Identity: @chiro2001/dsh-oc
  • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
  • Signals: external-application remote-binary-download subprocess credentials filesystem session-data · Review: The Git-source bundle declares rc.6 peers and can download or launch an OpenCode runtime while exposing credentials, files, and sessions; none of those paths was executed.

• DSH Collab Sync · cxxy161/dsh-collab-sync@22945f8 — Coordinates multiple clients on one DSH backend with writer locks, session-log repair, remote access settings, and collaboration partitions.

  • Evidence: manifest → patch · Identity: dsh-collab-sync
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: session-data filesystem-write data-repair remote-access configuration-write · Review: Broad DSH version ranges are declared and the source can repair compressed session logs, change host exposure, and write configuration; none was executed.

• DSH QQBot Community · DLive/dsh-qqbot-community@c65813f — Connects QQ Official Bot conversations to DSH sessions, prompts, event streams, and media handling.

  • Evidence: manifest → patch · Identity: dsh-qqbot-community
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: external-network credentials websocket session-data file-transfer prepublish-build · Review: The public package maps to this repository and the source connects to QQ with credentials while forwarding messages and media; no network, file, session, or prepublish action was executed.

• DSH MCP Bridge · Edge-Echo/dsh-mcp-bridge@7768dc3 — A bridge for exposing MCP servers and tools through a DSH Web bundle.

  • Evidence: manifest → patch · Identity: dsh-mcp-bridge
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: mcp subprocess external-tools · Review: Web bundle structure was confirmed; the README records a separate headless dependency limitation.

• DSH Voice Info · flyingtimes/dsh-voice-info@819bd53 — Context-aware turn summaries and alerts spoken through a Bluetooth speaker using a local CLI.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: audio bluetooth subprocess session-data filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH API Quota · ganfne123/dsh-plugin-api-quota@a571a35 — A sidebar panel that checks and displays DeepSeek API-key balance and quota.

  • Evidence: manifest → patch · Identity: dsh-plugin-api-quota
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: credentials external-network account-balance client-injection prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Web Remote · godchen520/dsh-web-remote@c852cee — Remote Web access through Cloudflare Quick Tunnels or local HTTP, with token proxying and a mobile control panel.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: remote-access external-network authentication local-web-server cloudflare · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH YZJ Bridge · GuoxinShan/dsh-yzj@1415eae — A profile bundle connecting Yunzhijia CLI capabilities, model tools, rich cards, and a workspace panel.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: enterprise-messaging model-tools client-injection credentials subprocess · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Minecraft Launcher · hellosky983/dsh-mc-launcher@f68a7cd — A full-screen Minecraft launcher with Microsoft login, version installation, and game launch.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: external-network credentials filesystem-write subprocess game-launcher · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Orbis Remote DSH · icodesign/orbis@b9a8aad — Remote DSH workspace access through Orbis, including session, directory, credential, and provider integration.

  • Evidence: manifest → patch · Identity: @orbisapp/remote-dsh
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
  • Signals: remote-access credentials session-data filesystem-write external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH ChatNode WeChat · Jesse-njx/dsh-chatnode-wechat@a724da3 — A WeChat chat-node integration for connecting conversations to DeepSeek Harness.

  • Evidence: manifest → patch · Identity: dsh-chatnode-wechat
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: external-network messaging source-build · Review: A prepare build can execute on source install; rc.6 support is documented but not declared as peers.

• DSH DeepSeek Billing · Jolly-J/dsh-deepseek-billing@1c4642a — A sidebar balance display and per-session DeepSeek cost estimator.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: account-balance credentials session-data external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Provider Quick Config · lo2589/deepseek-harness-provider@bff762a — A send-button panel for configuring provider routes, models, API keys, and local-model synchronization.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
  • Signals: provider-config credentials external-network configuration-write client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• MMX Quota Tool · mtty-ai/mmx-quota-tool@4b3a534 — A MiniMax token-plan quota indicator and detail panel for DSH Web.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: account-quota credentials external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Open Design DSH Runtime · nexu-io/open-design@62483a1 — An integrity-pinned profile runtime that connects Open Design to a user-installed DSH over JSONL stdio.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · declares rc.6 peers
  • Signals: stdio subprocess profile-bundle session-data integrity-check · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Gauge · noone89A/dsh-gauge@ca176d7 — Cache-hit, token-usage, price-window, and session cost statistics for DSH Web.

  • Evidence: manifest → patch · Identity: dsh-gauge
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: token-meter cost-estimation session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Lark Bot · PlutoKeating/dsh-lark-bot@6a5be5b — A Feishu and Lark bridge with streaming cards, project workspaces, approvals, and schedules.

  • Evidence: manifest → patch · Identity: dsh-lark-bot
  • Licenses: repo AGPL-3.0 / package AGPL-3.0 · lifecycle prepublishOnly · compatibility unknown
  • Signals: enterprise-messaging credentials session-data approval-forwarding external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH WebGate · pppolf/dsh-webgate@9ac449a — Remote access over LAN QR links, Cloudflare tunnels, or FRP reverse proxy with a login portal.

  • Evidence: manifest → patch · Identity: dsh-webgate
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: remote-access cloudflare reverse-proxy authentication external-network · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH XiaoTangYuan Game · qimidandapigu/dsh-xiaotangyuan-game@52baef4 — A game AI runtime that detects and installs supported game adapters from verified releases.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: game-integration external-download filesystem-write subprocess credentials · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Call Me · radres/dsh-plugin-call-me@af1a21b — Places a real phone call so spoken questions and replies can steer the active agent run.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: telephony audio credentials external-network agent-steering · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Notify Center · SingleOne/dsh-notify-center@50778f7 — Native desktop and webhook notifications for agent, session, title, and approval events.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: desktop-notification webhook session-data approval-events prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Godot Bridge · Smalldy/godot-bridge@ac81927 — Launches and drives a running Godot game through its TCP interaction server using native agent tools.

  • Evidence: manifest → patch · Identity: godot-bridge
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: godot tcp game-integration subprocess model-tools · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Bottom Info Bar · songoao25/bottom-info-bar@06a554e — A composer status bar for provider, model, live balance, peak pricing, countdowns, and spend totals.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: account-balance cost-estimation credentials session-data prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH MoodBall · sundusk/dsh-moodball@f6d1640 — Serves agent activity state to a companion macOS desktop mood indicator.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · declares rc.6 peers
  • Signals: desktop-app session-data local-web-server macos · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH LLM USTC · USTC-XeF2/dsh-llm-ustc@6290fbb — A USTC language-model provider with a provider-scoped iWAN tunnel.

  • Evidence: manifest → patch · Identity: dsh-llm-ustc
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: model-provider credentials network-tunnel external-network prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH OpenCode Go Usage · Xenia0922/dsh-opencode-go-usage@f7a7192 — A draggable dashboard for OpenCode Go quota, per-request usage, and spending.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: account-quota cost-estimation external-network client-injection identity-collision · Review: The npm identity maps to another repository, so this record is pinned only to the documented local source and does not claim the npm package.

• DSH Codex · Yan-Zero/dsh-codex@621b218 — Connects ChatGPT OAuth, Codex models, search, remote image reading, and image generation to DSH.

  • Evidence: manifest → patch · Identity: dsh-codex
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepublishOnly · mixed peer ranges
  • Signals: external-network credentials llm-call web-search image-generation · Review: The fixed bundle is structurally valid; broad wildcard DSH peers and OAuth/model network access require independent compatibility and trust review.

• DSH Bridges · yhlooo/dsh-bridges@3110789 — Imports project conventions from Claude Code, Codex, OpenCode, CodeBuddy, Pi, Gemini CLI, and Cursor.

  • Evidence: manifest → patch · Identity: dsh-bridges
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle prepack · declares rc.6 peers
  • Signals: project-import filesystem-read filesystem-skill prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Cost Usage Status · Zenjibad/deepseek-cost-usage-status-plugin@3d6f68e — A live composer dashboard for model, peak pricing, session cost, burn rate, and account balance.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: account-balance cost-estimation credentials session-data client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH IM Gateway · zhuiyueya/dsh-im-gateway@f4b166d — A unified session, approval, allowlist, and configuration gateway for more than twenty messaging channels.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: instant-messaging credentials session-data approval-forwarding prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Model Profile · ztlovelsw/dsh-model-profile@1e3ddd5 — Edits per-model image support and reasoning efforts in the DSH Web model catalog.

  • Evidence: manifest → patch · Identity: @ztlovelsw/dsh-model-profile
  • Licenses: repo unknown / package BSD-3-Clause · lifecycle prepare · declares rc.6 peers
  • Signals: model-config configuration-write client-injection prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Notify Bell · ZYar-er/dsh-notify-bell@21c0747 — Semantic BEL or WAV notifications for completion, blocking, permission, questions, and errors.

  • Evidence: manifest → patch · Identity: dsh-notify-bell
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: audio desktop-notification agent-events client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH LAN Fix · zynieie/dsh-lan-plugin@1b16999 — A LAN compatibility patch that provides a cryptographic RPC-ID fallback for insecure browser contexts.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: lan-access client-patch cryptography local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Skills & Methods

• Creght Skills · creght-dev/skills@5e20ab3 — A repository of agent skills packaged with a native DSH bundle.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: skills git-source · Review: No DSH peers are declared, so compatibility remains unknown.

• DSH Plugin Guide · Fectivnfy112357/dsh-plugin-guide@48da363 — A dual-format guide and filesystem skill for building DSH and Agent Plugins packages.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-skill plugin-development github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Aegis · GanyuanRan/Aegis@21b27d2 — A software-engineering method pack for planning, debugging, prompt hygiene, verification, and repair tracking.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: filesystem-skill missing-package-license · Review: Repository license is MIT; the fixed package manifest has no license field.

• Project AI Docs · igugyj/project-ai-docs@811e729 — A project-local AI documentation protocol that maintains a docs/.ai knowledge base.

  • Evidence: manifest → patch · Identity: project-ai-docs
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: filesystem-skill filesystem-read filesystem-write documentation-generation · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Ten Methods Tutor · jmwasky-creative/ten-methods-tutor@5e76ea2 — A deterministic local arithmetic tutor with guided exercises and parent-facing recaps.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: education local-web-server session-data model-tools filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Gongwen Skill · linhut/gongwen-skill@e5a277e — A Chinese official-document workflow for GB/T 9704 checks, repair, optimization, templates, and layout injection.

  • Evidence: manifest → patch · Identity: gongwen-skill
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-skill document-processing subprocess filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH HTB Skills · qingsiweisan/dsh-htb-skills@d04c3d0 — A versioned Hack The Box penetration-testing skill library with tiered routing and hidden references.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-skill security-testing prompt-injection local-install · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Wiki · skillre/dsh-wiki@b6dfa3a — A DSH bundle that exposes a repository-backed wiki skill and documentation workflow.

  • Evidence: manifest → patch · Identity: dsh-wiki
  • Licenses: repo unknown / package unknown · lifecycle none · compatibility unknown
  • Signals: filesystem-skill documentation package-bundle · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Lazeword · xczhanjun/lazeword@c65f598 — Offline vocabulary learning with FSRS scheduling, Anki sync, subject decks, and learning games.

  • Evidence: manifest → patch · Identity: dsh-lazeword
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · mixed peer ranges
  • Signals: education spaced-repetition anki browser-storage prepublish-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Math Research DSH · xsoc1/math-research-dsh@a5e6373 — A rigorous mathematics research suite with four agent skills, Lean verification, tests, and environment diagnostics.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: filesystem-skill mathematics formal-verification environment-diagnostics · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Furrhaven Toolbox · YJLZSL/dsh-furrhaven-toolbox@473cdd6 — Character-card authoring, validation, worldbook simulation, regex testing, vision, and roleplay tools.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
  • Signals: character-authoring model-tools vision subprocess filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

Discovery & Management

• DSH Plugin Market · 2160039878-cyber/dsh-plugin-market@e897f67 — A verified-first Web catalog that searches GitHub plugin leads and gates install-command copying behind structural checks.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: github-search external-network install-command-copy client-injection identity-collision · Review: The fixed Git-source bundle is confirmed; the unscoped npm name resolves to a different repository, so no npm identity is listed and no remote check or install action was executed.

• DSH Plugin Hot Toggle · 5102a/dsh-plugin-hot-toggle@15b5f24 — Starts and stops installed Cordis plugin entries from DSH Web and persists the selected state across restarts.

  • Evidence: manifest → patch · Identity: dsh-plugin-hot-toggle
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: dynamic-loading package-management configuration-write client-injection high-trust-surface · Review: The package and patch identities align; dynamic loader control, persisted configuration writes, and the prepare build were not executed.

• DSH Capability Index · 777-Zen/dsh-capability-index@08a4f48 — Injects per-step capability hints so agents can select installed plugins from an indexed trigger table before acting.

  • Evidence: manifest → patch · Identity: dsh-capability-index
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: runtime-context prompt-injection plugin-inventory · Review: The root bundle is distinct from the repository's demo fixture; no DSH peer range establishes runtime compatibility.

• DSH Safe Plugin Manager · AI-Scarlett/dsh-safe-plugin-manager@993cfd3 — A GitHub-only plugin catalog and guarded profile lifecycle manager with plans, confirmations, backups, checks, and rollback.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package UNLICENSED · lifecycle none · mixed peer ranges
  • Signals: package-management filesystem-write subprocess external-network high-trust-surface · Review: The private, UNLICENSED package is documented as GitHub-only; profile mutation, backups, subprocess execution, remote catalogs, and rollback were not executed.

• DSH Hub Search · coderPerseus/dsh-hub@4dc755a — Adds tools for searching and inspecting plugin records in the remote DSH Hub catalog.

  • Evidence: manifest → patch · Identity: @dshhubs/plugin-search
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: external-network remote-catalog plugin-metadata install-command-data · Review: The public package identity matches the source bundle and its tools read remote catalog metadata and installation text; no request or install was executed.

• DSH Market · dsh-market/dsh-market@3188f46 — An in-harness plugin market that can browse, install, update, and remove third-party packages.

  • Evidence: manifest → patch · Identity: dshmarket
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: package-management remote-registry high-trust-surface · Review: Package-manager control makes this a high-trust surface; listing is not an endorsement.

• DSH Skill Viewer · Fishquito7/dsh-skill-viewer@55c16e4 — A Web settings panel and CLI for listing, scoping, enabling, disabling, adding, and deleting skills.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: skill-management filesystem-write client-injection prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Index · GGigHub/dsh-plugin-index@41fcb76 — A GitHub-star-backed plugin browser with install, remove, update, and repair controls.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-management external-network filesystem-write package-install github-only · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• Harness Flow Hub · Harzva/harness-flow-hub@25b23c2 — An in-DSH flow hub prototype with transactional plugin installation, rollback, and browser UI.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package unknown · lifecycle none · declares rc.6 peers
  • Signals: plugin-management package-install filesystem-write rollback client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Toggle · huntersxy/dsh-plugin-toggle@e11d57c — A settings-page switchboard that edits profile patches to hot-enable or disable third-party plugins.

  • Evidence: manifest → patch · Identity: dsh-plugin-toggle
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-management filesystem-write configuration-edit hot-reload · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH 1024 Store · imsai-sh/awesome-deepseek-harness-plugins@7b58110 — An in-product browser and installer for the 1024 Store plugin catalog.

  • Evidence: manifest → patch · Identity: dsh-1024store
  • Licenses: repo MIT / package MIT · lifecycle prepack · compatibility unknown
  • Signals: plugin-marketplace package-install external-network filesystem-write prepack-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Web Hot · jifeng15/dsh-web-restart@8ae1421 — A host lifecycle layer for installing, updating, enabling, disabling, and self-healing Web plugins without restart.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: plugin-management package-install filesystem-write hot-reload self-heal · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Market · losebird/dsh-plugin-market@e441cdb — A community plugin-market dialog with bundle and ZIP-based one-click installation.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-marketplace package-install filesystem-write identity-collision client-injection · Review: The npm name maps to another repository, so this record is pinned to the author's documented Git source and does not claim that npm identity; installation was not executed.

• DSH Plugin Hub · qomob/dsh@9b80e51 — Embedded and live GitHub plugin search, detail inspection, approval-gated installation, and a catalog tab.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-marketplace external-network package-install approval-gate identity-collision · Review: The npm name maps to another repository, so this record is pinned only to the documented Git subdirectory source and does not claim that package identity.

• DSH Extension Hub · Relistencode/dsh-extension-hub@3f9726e — A Web and CLI hub for skills, MCP servers, plugins, imports, marketplace discovery, and updates.

  • Evidence: manifest → patch · Identity: dsh-extension-hub
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: plugin-management skill-management mcp package-install filesystem-write · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Marketplace · Scorp1o117/dsh-plugin-marketplace@d4f8b24 — A settings-page marketplace that browses, searches, and ranks the GitHub dsh-plugin topic.

  • Evidence: manifest → patch · Identity: dsh-plugin-marketplace
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: plugin-marketplace github-search external-network client-injection · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Fish Hub · stvlynn/dsh.fish@d81793b — Authenticated dsh.fish search and install tools for Harness artifacts.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo unknown / package MIT · lifecycle prepare · mixed peer ranges
  • Signals: artifact-registry credentials external-network package-install prepare-build · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Suite All · whyihaveyou/dsh-suite@0165407 — An all-in-one bundle aggregating the suite's plugin manager, notifications, session export, and team board.

  • Evidence: manifest → patch · Identity: @dsh-suite/all
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: aggregate-bundle plugin-management notification session-export kanban · Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.

• DSH Plugin Store · ZASENJC/dsh-plugins-store@fa5829a — A native catalog browser with fixed-source validation, risk confirmation, install plans, updates, and removal.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · declares rc.6 peers
  • Signals: plugin-marketplace package-install approval-gate external-network identity-collision · Review: The npm identity maps to another repository, so this record is pinned to the documented Git subdirectory source and does not claim that package.

Hold queue

These entries are relevant to DSH but do not receive install recommendations until the recorded blocker is repaired.

• SandBase Harness · sandbaseai/sandbase-harness@2bb788d — A managed-agent integration with a DSH patch example and external service credentials.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo Apache-2.0 / package Apache-2.0 · lifecycle none · compatibility unknown
  • Signals: mcp external-network credentials identity-collision · Review: Held because the public distribution identity is ambiguous and name-colliding.

• DSH Agent Teams · NanmiCoder/dsh-agent-teams@99b1e8a — Team-style agent orchestration with persisted state and child-process coordination.

  • Evidence: manifest → patch · Identity: @nanmicoder/dsh-agent-teams
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · behind rc.6 baseline
  • Signals: subprocess filesystem-write stale-peer-range · Review: Held because most declared DSH peer ranges target rc.1 rather than the rc.6 review baseline.

• DSH Memory Evolve · csyangwen/dsh-memory-evolve@ce7f0fa — A DSH-oriented memory and orchestration client whose fixed manifest lacks a native bundle declaration.

  • Evidence: manifest → no patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: missing-bundle private-package external-ai · Review: Held because dsh.client is present but dsh.bundle and a referenced patch are absent.

• DSH GitHub Login · Noob-stupid/dsh-github-login@0057f05 — A GitHub login integration whose package name and patch row identity disagree.

  • Evidence: manifest → patch · Identity: dsh-github-login
  • Licenses: repo unknown / package MIT · lifecycle none · compatibility unknown
  • Signals: identity-mismatch authentication private-package · Review: Held until dsh-github-login and @deepseek-ai/dsh-github-login are aligned and rechecked.

• DSH Find Plugin · awesome-dsh-plugin/dsh-find-plugin@e75dc2e — An agent tool for searching the DSH plugin ecosystem from inside a conversation.

  • Evidence: manifest → patch · Identity: dsh-find-plugin
  • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
  • Signals: external-network stale-peer-range · Review: Held because @deepseek-ai/dsh-tools still targets rc.1 rather than the rc.6 review baseline.

• Tydora · zuorn/Tydora@23c4546 — A Tauri Markdown workspace containing an embedded DSH bundle entry.

  • Evidence: manifest → patch · Identity: tydora
  • Licenses: repo Apache-2.0 / package unknown · lifecycle postinstall · compatibility unknown
  • Signals: embedded-source external-application filesystem subprocess · Review: Held because the root package is a desktop application, the patch loads local TypeScript source, postinstall runs patch-package, and a separate install identity was not confirmed.

• DSH Autonomy · abab996/dsh-autonomy@94f64d3 — Adds per-session autonomy levels that alter system-prompt directives from strict through more exploratory behavior.

  • Evidence: manifest → patch · Identity: dsh-autonomy
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: system-prompt session-data client-injection identity-collision · Review: Held because the documented unscoped npm identity currently resolves to JinkaiLiu/dsh-autonomy, not this repository; local source installation remains separately documented.

• DSH Habits · DimitriLIAN/dsh-habits@f5e9c6f — Edits the user-global AGENTS.md instructions from DSH Web settings so habits are injected into every session.

  • Evidence: manifest → patch · Identity: dsh-habits
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: global-instructions filesystem-write client-injection prepare-build unresolved-install-identity · Review: Held because the README installation target still contains a placeholder owner and the npm identity does not resolve; its prepare build and global instruction writes were not executed.

• DSH Path Browser · dkjsiogu/dsh-path-browser@471496f — Browses host files and folders from the Web composer and inserts selected absolute paths.

  • Evidence: manifest → patch · Identity: dsh-path-browser
  • Licenses: repo MIT / package MIT · lifecycle prepare · compatibility unknown
  • Signals: filesystem absolute-path client-injection prepare-build unresolved-install-identity · Review: Held because the fixed source has no README or author-documented public installation identity and its npm name does not resolve; the prepare hook and filesystem access were not executed.

• DSH Shutup · DosterBool/dsh-shutup@cc19b87 — Adds a configurable shortcut that interrupts model generation and steers the active turn with a correction prompt.

  • Evidence: manifest → patch · Identity: dsh-shutup
  • Licenses: repo unknown / package MIT · lifecycle none · declares rc.6 peers
  • Signals: model-interrupt prompt-steering session-data browser-storage unresolved-install-identity · Review: Held because no public installation documentation or resolvable package target was found at the fixed commit; prompt steering, session access, and browser storage were not exercised.

• DSH Precedent · dshplugin-me/dsh-precedent@1a84adf — Builds a cited working-memory ledger from the existing DSH session log to surface prior successful approaches.

  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · compatibility unknown
  • Signals: session-log working-memory private-package unreleased-tag unresolved-install-identity · Review: Held because the author states that the documented v0.1.0 Git target is not tagged and will not currently resolve; session-log access was not executed.

• DSH Diff Approval · 9087/dsh-diff-approval@5966410 — A pending-change panel that records edit and write results, shows whole-file diffs, and supports independent keep or revert decisions.

  • Evidence: manifest → patch · Identity: dsh-diff-approval
  • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
  • Signals: filesystem-write file-delete session-data client-injection unresolved-install-identity · Review: Held because the documented npm target did not resolve and no separate public Git-source installation command was found; revert can overwrite or remove files and was not executed.

• Helm-D Security Router · ADWMC/helm-d@beef627 — The routing component of a nine-bundle security-analysis suite covering Android, Web, native, protocol, malware, AI security, and evidence workflows.

  • Evidence: manifest → patch · Identity: @dsh-security/router
  • Licenses: repo MIT / package unknown · lifecycle prepare · declares rc.6 peers
  • Signals: security-analysis filesystem-read tool-routing prepare-build unresolved-install-identity · Review: Held because the nine documented scoped npm packages did not resolve during review; package manifests also omit license fields, and installers or tools were not run.

• FlowDeck DSH · heidi-dang/flowdeck-dsh@225f080 — A DSH integration and execution host for FlowDeck workflows.

  • Evidence: manifest → patch · Identity: @heidi-dang/flowdeck-dsh
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · compatibility unknown
  • Signals: workflow-runtime subprocess filesystem-write prepublish-build · Review: Held because the claimed npm identity did not resolve and the fixed documentation did not provide a reproducible public Git-source DSH install.

• DSH Desktop · IriskaDev/dsh-desktop@9ad9be1 — A desktop application wrapper that embeds a DSH bundle and patch.

  • Evidence: manifest → patch · Identity: dsh-desktop
  • Licenses: repo MIT / package unknown · lifecycle prepare · compatibility unknown
  • Signals: desktop-app private-package prepare-build identity-collision · Review: Held because the npm name maps to another repository, the root is a private desktop application, and its prepare hook was not executed.

• DSH Windows Manager Bridge · kanneiren/dsh-windows-manager@e9bb4c0 — An authenticated named-pipe runtime bridge embedded in the DSH Windows Manager application.

  • Evidence: manifest → patch · Identity: dsh-windows-manager-plugin
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: desktop-app named-pipe authentication embedded-bundle · Review: Held because the bridge is distributed inside a manager application and no independent public package-to-source installation identity was confirmed.

• DSH Zhihu Dashboard · kexuejin/dsh-zhihu-dashboard@791cfd3 — A Zhihu dashboard and tool set for hot topics, feeds, posts, search, and idea distillation.

  • Evidence: manifest → patch · Identity: dsh-zhihu-dashboard
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: web-search external-network model-tools client-injection · Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.

• DSH Processes · liuqh16/dsh-processes@a4dd651 — Background-process tools, commands, output inspection, and completion notifications.

  • Evidence: manifest → patch · Identity: dsh-processes
  • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
  • Signals: subprocess process-management session-data prepare-build · Review: Held because its DSH peer dependencies target rc.5 rather than the rc.6 review baseline.

• DSH Marketplace · lmy414/dshregistry@c558602 — An embedded marketplace UI for browsing, risk-reviewing, installing, and removing indexed plugins.

  • Evidence: manifest → patch · Identity: dsh-marketplace
  • Licenses: repo MIT / package unknown · lifecycle none · compatibility unknown
  • Signals: plugin-marketplace package-install filesystem-write private-package · Review: Held because the published package has no repository mapping and the private nested source lacks an independently documented public installation path.

• DSH Desktop Hub · MarecGents/deepseek-harness-hub@43f64fb — A WebView2 desktop shell with tray controls, theme sync, window memory, and a side panel.

  • Evidence: manifest → patch · Identity: @marecgents/dsh-hub
  • Licenses: repo MIT / package MIT · lifecycle postinstall · behind rc.6 baseline
  • Signals: desktop-app native-shell postinstall filesystem-write client-injection · Review: Held because several DSH peers target rc.1 and installation runs native desktop setup through postinstall.

• DSH API Usage · marvina/dsh-api-usage@bc47b5d — A sidebar panel for API balance and token-usage visibility.

  • Evidence: manifest → patch · Identity: dsh-api-usage
  • Licenses: repo MIT / package MIT · lifecycle prepublishOnly · declares rc.6 peers
  • Signals: credentials account-balance token-meter external-network prepublish-build · Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.

• DSH Feishu Bridge · minyang2020/dsh-feishu-bridge@034f5f6 — A bidirectional Feishu bot bridge with per-user sessions, approvals, questions, and long-connection delivery.

  • Evidence: manifest → patch · Identity: feishu-dsh-bridge
  • Licenses: repo MIT / package MIT · lifecycle none · compatibility unknown
  • Signals: enterprise-messaging credentials session-data approval-forwarding external-network · Review: Held because the documented DSH package identity did not resolve; the source checkout instructions cover a standalone sidecar but not a reproducible Git-source DSH bundle install.

• DSH MCP Adapter · NexusAgentX/dsh-mcp-adapter@39c5aab — A single proxy tool that exposes MCP servers without injecting every server schema into context.

  • Evidence: manifest → patch · Identity: dsh-mcp-adapter
  • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
  • Signals: mcp model-tools context-reduction prepack-build · Review: Held because its DSH command and tool peers target rc.1 rather than the rc.6 review baseline.

• DSH Codex Shim · OpenTritium/dsh-codex-shim@2522f9a — A route-aware Codex environment simulation intended to improve tool-call reliability for adapted models.

  • Evidence: manifest → patch · Identity: @opentritium/dsh-codex-shim
  • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
  • Signals: environment-simulation agent-steering sandbox-policy prepare-build · Review: Held because every DSH peer targets rc.5 and installation requires a prepared tarball plus an exact host patch.

• DSH MCP Support · royenheart/dsh-plugin-mcp-support@e0e95e4 — A thin settings-driven wrapper over the native DSH MCP client.

  • Evidence: manifest → patch · Identity: @royenheart/dsh-plugin-mcp-support
  • Licenses: repo unknown / package MIT · lifecycle none · mixed peer ranges
  • Signals: mcp configuration-write local-installer · Review: Held because its native dsh-mcp-client peer targets rc.5 while the surrounding settings peer targets rc.6, and the public package identity is unresolved.

• DSH Yi · Sanchaji/dsh-yi@e634e91 — An I Ching divination tool with a Web entry and session-aware results.

  • Evidence: manifest → patch · Identity: dsh-yi
  • Licenses: repo BSD-3-Clause / package BSD-3-Clause · lifecycle none · mixed peer ranges
  • Signals: divination model-tools session-data client-injection · Review: Held because the npm identity did not resolve and the Git installation target remains an author placeholder rather than this fixed repository.

• DSH Wallpaper Engine · TianYa-DAO/dsh-wallpaper-engine@f8f5fa4 — A local Wallpaper Engine library, background layer, and native scene panel for the desktop shell.

  • Evidence: manifest → patch · Identity: dsh-wallpaper-engine
  • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
  • Signals: desktop-app filesystem-read native-bridge theme prepare-build · Review: Held because all DSH Web peers target rc.5 rather than the rc.6 review baseline and the package identity is unpublished.

• DSH HTML Parse · uckkk/dsh-html-parse@69fc2c5 — A model tool that extracts titles, metadata, headings, links, tables, and text from HTML.

  • Evidence: manifest → patch · Identity: dsh-html-parse
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: html-parsing model-tools content-extraction · Review: Held because the only documented install command uses an unpublished npm identity and no reproducible Git-source alternative is provided.

• DSH Handoff · WeiYe6/dsh-handoff@08dc59d — Summarizes a long session into a fresh same-workspace session while preserving the original.

  • Evidence: manifest → patch · Identity: dsh-handoff
  • Licenses: repo MIT / package MIT · lifecycle prepack · behind rc.6 baseline
  • Signals: session-data summarization model-request session-create prepack-build · Review: Held because its DSH LLM and session peers are fixed to rc.5 rather than the rc.6 review baseline.

• DSH Tool Diagnose · xu-kai-quan/dsh-tool-diagnose@a0e4aad — An extensible diagnostics registry exposed through a model-facing diagnose tool.

  • Evidence: manifest → patch · Identity: dsh-tool-diagnose
  • Licenses: repo MIT / package MIT · lifecycle prepare · behind rc.6 baseline
  • Signals: diagnostics model-tools credentials session-data prepare-build · Review: Held because all DSH peers target rc.5 rather than the rc.6 review baseline.

• DSH Plugin Marketplace · YELEBAI/dsh-plugin-marketplace@f4d5bbe — A validation-oriented marketplace with guided install agents, self-update, discovery, and installed-plugin management.

  • Evidence: manifest → patch · Identity: dsh-plugin-marketplace
  • Licenses: repo MIT / package MIT · lifecycle none · behind rc.6 baseline
  • Signals: plugin-marketplace package-install self-update identity-collision agent-delegation · Review: Held because its npm identity maps to the separately cataloged Scorp1o117 source and its DSH peers target rc.5.

• DSH Vision Plugin · zcma11/dsh-vision-plugin@b418a5f — Uploads images, transcribes them through DashScope or offline Windows OCR, and injects descriptions into messages.

  • Evidence: manifest → patch · Identity: dsh-vision-plugin
  • Licenses: repo MIT / package MIT · lifecycle none · mixed peer ranges
  • Signals: vision ocr credentials external-network identity-collision · Review: Held because the npm identity maps to Xin-Zhang-IceMan/dsh-vision-plugin while the Git command in this source still contains a placeholder owner.

• DSH Model Redactor · zerodegress/dsh-model-redactor@90af946 — Redacts secrets from model-visible input, output, reasoning, tool arguments, and stored session surfaces.

  • Evidence: manifest → patch · Identity: dsh-model-redactor
  • Licenses: repo MIT / package MIT · lifecycle none · declares rc.6 peers
  • Signals: secret-redaction session-data reasoning-data tool-arguments · Review: Held because the fixed source documents manual Cordis composition but no reproducible public DSH package or Git-source installation identity.

Excluded after review

• DSH Project Organizer · caoqinnan-web/dsh-project-organizer@1bfb6d0 — A conversation organizer whose fixed documentation says DSH is not currently supported.
  • Evidence: manifest → patch · Identity: Git source / unknown
  • Licenses: repo MIT / package MIT · lifecycle prepack · author says unsupported
  • Signals: deprecated-package author-retracted-support · Review: Excluded because the author says DSH installation is not recommended and npm versions are deprecated.

How reviews work

The minimum evidence chain is:

repository@full-commit
  → package.json::dsh.bundle.patch
  → referenced patch exists
  → package identity + license + lifecycle facts
  → reviewed / held / excluded

Read the complete methodology, the review log, or the machine-readable catalog.

The review baseline follows DeepSeek Harness's own bundle contract: a bundle declares dsh.bundle, and a profile composes ordered bundles. The current catalog deliberately does not convert README snippets into copy-paste install commands because floating branches, dist-tags, and Git sources can change or execute build hooks.

Contributing

Plugin authors and reviewers are welcome. Start with CONTRIBUTING.md and use the plugin-submission issue form. A submission needs an immutable commit, manifest path, referenced patch path, license evidence, package identity, and disclosed lifecycle/capability signals.

Run the local checks before opening a pull request:

npm run check

Scope and attribution

This project is independent and is not affiliated with or endorsed by DeepSeek. Initial discovery used the public dsh-plugin topic and the CC0-licensed Awesome DeepSeek Harness Plugin list. Inclusion here is an editorial record of source facts at one commit, not an endorsement.

License

MIT