dsh-pentester

Pentesting agent plugin for DeepSeek Harness.

This package is a standard DSH bundle: package.json declares dsh.bundle.patch, and cordis.patch.yml inserts the plugin row into a profile.

AI 开发从 AGENTS.md 开始。文档索引：docs/README.md。官方 Quickstart：https://deepseek-harness.github.io/deepseek-harness/guide/quickstart

Architecture

Start here:

1. CONTEXT.md
2. docs/domain-model.md
3. docs/architecture.md
4. docs/ptes-workflow.md
5. docs/agent-model.md
6. docs/ptap.md
7. docs/execution-model.md
8. docs/findings.md
9. docs/workspace.md
10. docs/adr/

package.json         # dsh.bundle manifest + built entry
src/index.ts         # Cordis plugin: name / Config / apply
lib/                 # generated by tsdown (pnpm run build)
cordis.patch.yml     # profile layer that inserts this package
tsconfig.json
tsdown.config.ts

Develop

pnpm install
pnpm run check

Keep these three names in sync if you rename the package:

• package.json → name
• src/index.ts → name
• cordis.patch.yml → id and name

Install

dsh plugin --profile web add .
dsh --profile web --dump-config   # look for "# == dsh-pentester"
dsh web --profile web

A successful load prints:

[dsh-pentester] loaded

From GitHub (pnpm ≥10 will refuse prepare until you allow the build):

dsh plugin --profile web add github:fb0sh/dsh-pentester
# copy the printed key into ~/.dsh/profiles/web/pnpm-workspace.yaml:
#   allowBuilds:
#     dsh-pentester: true
dsh plugin --profile web add github:fb0sh/dsh-pentester

Remove it with:

dsh plugin --profile web remove dsh-pentester

Status

Scaffold only. Plugin capabilities are not implemented yet.

License

MIT