🗑️ The original repository has been deleted or made private. This page is an archival snapshot from indexing time; the install command may no longer work.

dsh-plugins

Ecosystem plugins for DeepSeek Harness: bounded cross-session memory and skill lifecycle curation, ported from hermes-agent. Tagged dsh-plugin.

PluginAI ModelsKnowledgeStorageMemory

Verification

L1 · Found

Risk

Out of scope

Health

Archived

Trust

Unrated

Install verification: No L4/L5 install test yet

L1–L5 verification rules

What it doesAI

Provides bounded cross-session memory and skill lifecycle curation for DeepSeek Harness, ported from hermes-agent.

Bounded cross-session memory for AI agents
Skill lifecycle curation and management
Ported from hermes-agent as dsh-plugin

aiAImemoryAI

Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.

Installation

dsh plugin --profile web add github:hyls9527/dsh-plugins

security scan passed · default branch source

Install method: GitHub · no verification record (L1-L5)

Verification & Compatibility

No verification record yet for this plugin.

• Node.js: not stated
• DSH: not stated
• External credentials: none detected

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO VETPASSEDd13aef

Security reviewAutomated review · daily

PASSED

Vet static analysis found no suspicious behavior — verdict is clean.

0 critical·0 high·1 medium

Version binding

plugin versionv0.1.0

scanned version0.1.02026-08-19

current version0.1.0same version

vet verdictclean · npm

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
medium	R9	registry.js:6	正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-13 · activity: Archived

• Repo created: 2026-08-14

• Stars: ★ 3 · Forks: 0

• Health: Archived — repository archived

Source

GitHub: github.com/hyls9527/dsh-plugins

Plugin notes

What is the dsh-plugins DeepSeek Harness plugin?

dsh-plugins is a DeepSeek Harness plugin maintained by @hyls9527. It is cataloged on dsh.so as a AI Models plugin for Memory tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-plugins?

Run dsh plugin --profile web add github:hyls9527/dsh-plugins in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but its install spec is not yet verified (L3); sandbox install and runtime testing have not passed.

How does the security scan relate to a manual audit?

The scan is automated static analysis of the repository source — a scalable first line of defense that can produce false positives and miss context; it is not a manual security audit. Before using a plugin, review the repository and installed permissions, and combine the scan with the verification level (L4/L5) and health signals.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-19