Pre-install supply-chain poison scanner for DSH plugins: AST (JS-X-Ray) + deobfuscation + regex heuristics, exits non-zero on findings for CI gating.
dsh plugin add zoahdev/dsh-poison-guard
Reviewed DeepSeek Harness extensions — filter by category, search by capability, and jump straight to each plugin's public source.
Pre-install supply-chain poison scanner for DSH plugins: AST (JS-X-Ray) + deobfuscation + regex heuristics, exits non-zero on findings for CI gating.
dsh plugin add zoahdev/dsh-poison-guard
Connect Feishu chats to DeepSeek Harness projects, conversations, replies, and scoped tool approvals over WebSocket.
dsh plugin add 452926826/dsh-feishu-bot
Read and search bounded log output from allowlisted SSH servers and log roots without exposing arbitrary remote commands.
dsh plugin add 452926826/dsh-ssh-logs
LAN / remote-access control, frpc NAT tunneling, a panel password gate, and mobile UI adaptation for the DSH Web GUI.
dsh plugin add 534119219/chicheng-gate
LAN/remote access for the Web UI: injects a crypto.randomUUID polyfill on plain-HTTP origins so the frontend survives LAN or Tailscale IP direct links.
dsh plugin add AcidGr/dsh-web-lan-access
Password-gated public access for the DSH Web GUI through quick or named Cloudflare Tunnels, with HTTP/WebSocket proxying and an in-app directory picker.
dsh plugin add ai-eks/dsh-auth-tunnel
Manage Windows hosts over WinRM from a web panel and seven agent tools with PowerShell exec, service and process control, SMB / chunked file transfer with SHA-256 verification, and cluster execution.
dsh plugin add andyfan1094/dsh-winrm
Install-time patch guard for cross-machine DSH group chat: fixes dsh-weave rc.14 defects (inject crash, random UDP port, 4KB ack frame limit) with four idempotent patches, alongside setup, mechanism and ops docs for the dsh-chat x dsh-weave x dsh-bridge chatroom stack.
dsh plugin add azure5100/huahua-dsh-chatroom
Authenticated LAN, Tailnet, and public HTTPS access for a DSH Host, with persistent host identity, pairing, and QR setup.
dsh plugin add baixianger/dsh-network
Trusted Iroh mesh networking for DSH hosts, with encrypted peer discovery, remote session delivery, and reachability status.
dsh plugin add baixianger/dsh-weave
Mobile web shell for the DSH Web GUI: overlay drawers, draggable FAB, mobile composer fixes, and a floating image-upload button pinned above the composer (native gallery/camera, integrated with the validated add-images pipeline), zero desktop regression. Published on npm as dsh-webui-mobile.
dsh plugin add bbtssama/dsh-webui-mobile
LAN mobile gateway: isolated child-process reverse proxy with first-visit approval, per-device token binding, rate limiting, and mobile layout injection (compact composer pills, randomUUID polyfill).
dsh plugin add Bernardxu123/dsh-mobile-gate
Mobile remote-control suite: bundle plugin with native sidebar entry and admin drawer, self-healing bearer-token gateway over LAN/Tailscale, Android app (sessions/approvals/questions/goals), /fs/* file transfer (Range resume, 2GB upload), latency-based multi-server auto-switch, offline chat cache.
dsh plugin add Blank-not-black/dsh-Remote#plugin
Secure remote access for the official Web UI: authenticated LAN/tunnel gateway with QR + HMAC one-time pairing, per-device sessions and revocation, mDNS discovery, and a fork_session tool.
dsh plugin add BotonJ/dsh-remote-link
Manage your own remote DSH host from the local GUI: SSH tunnels, mixed remote session list, one-click remote GUI, auto-healing tunnels.
dsh plugin add Buzzso/dsh-sev
Use DSH from iPhone/iPad: an explicit-opt-in LAN reverse proxy (Host/Origin rewrite through the loopback trust fence, WebSocket upgrades included), iOS PWA chrome (home-screen icon, standalone meta, viewport-fit), and touch/mobile CSS (safe areas, keyboard lifting, composer row fit).
dsh plugin add cindyguyuehu123/dsh-mobile
Authenticated mobile gateway for DeepSeek Harness: connects the companion native iOS client over WebSocket for sessions, live events, tasks, goals, approvals, commands, and file transfers, with QR pairing and device revocation.
dsh plugin add Clarklevis1995/dsh-plugin-mobile-gateway
HTTPS + login gateway for the DeepSeek Harness web surface: access your DSH Web UI securely from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-only, no accounts until configured); setup and security notes in the README.
dsh plugin add clarknu/dsh-gateway
Remote-control your dsh agent from Telegram: chat, skills, workspace browsing, and file transfer.
dsh plugin add CLASSLU/dsh-telegram-bridge
Identity-gated Tailscale access to the Web GUI with dsh still bound to loopback: a 127.0.0.1 proxy published by `tailscale serve` admits a request only when the Tailscale login it stamps is allowed, with an optional per-device allowlist, so the privileged /api methods behind the loopback check — Settings, Models, Plugins — answer without dsh being told to trust a remote host.
dsh plugin add CREAIT-nl/dsh-plugins#tailnet-gateway
Mobile remote control for the dsh web GUI: scan-to-pair QR entry with one-time pairing tokens.
dsh plugin add DamonKoy/dsh-web-ui#dsh-remote-web-ui
Remote SSH operations for the dsh web GUI: host config store and persisted sessions.
dsh plugin add DamonKoy/dsh-web-ui#dsh-ssh
Browser-first, LAN-only access to the current DeepSeek Harness Web UI with one-time QR pairing, revocable devices, event-driven diagnostics, and a slot-preserving mobile layout; no companion app, cloud relay, or remote tunnel.
dsh plugin add donoteatme/dsh-local-link
SSH remote workspace — run bash, file tools, glob and grep on a remote machine over plain sshd (exec + SFTP), zero remote install, purely additive.
dsh plugin add dsh-ssh/dsh-ssh#dsh-ssh
Page 127 of 138
Filter by category or keyword — every listing is a public GitHub project.
Commands follow the upstream list; check each repo's README for exact package names.
Plugins run third-party code with your permissions — read the source first.
This directory is a snapshot of the community-maintained awesome-dsh-plugin list (updated 2026-09-07). Listings link to the authors' repositories; inclusion is not an endorsement or a security review. Missing a plugin? Contribute to the upstream list.