dsh-plugins-hub

An independent, community-friendly plugin index for DeepSeek Harness (dsh). Curated by automation + human review. Topic: dsh-plugin.

Featured Plugins

Plugin	Description	Install	Status	Security	Trial	Checked at	Commit
dsh-netdoctor	Network diagnostics toolbox: DNS lookup (10 record types incl. SOA/CAA), ICMP ping, TCP port check, TLS cert check, traceroute, public IP, WHOIS registry lookup (TCP 43, IANA referral chain + TLD fallback map, ARIN for IPs, structured summary) — seven read-only probes, zero runtime dependencies	dsh plugin --profile web add github:TYEclipse/dsh-netdoctor#v0.2.0	✅ active	✅	✅ e2e (whois example.com → registrar RESERVED-IANA + expiry 2027-08-13 + SOA/CAA lookups, headless)	2026-08-26	289f3df
dsh-webfetch	Web page reader: fetch any URL as clean Markdown / plain text, inventory links, read RSS/Atom feeds, inspect HTTP status/headers/redirect chain without the body (web_headers: HEAD with automatic GET fallback), extract HTML tables as structured rows (web_table: header detection, colspan/rowspan grid expansion, row/table caps), zero-dependency http proxy support — zero runtime dependencies, read-only	dsh plugin --profile web add github:TYEclipse/dsh-webfetch#v0.4.0	✅ active	✅	✅ e2e (isolated install v0.4.0; installed-copy execution 4/4 anchors — web_table colspan/rowspan grid H/Top/Top, caption + entity decode, tool registration shape, default UA)	2026-09-17	86a1836
dsh-units	Unit conversion toolbox: 20 categories (length, mass, temperature, data sizes decimal-vs-binary, data transfer rates Mbps-vs-MB/s, acceleration incl. g-force, illumination lux/foot-candle, speed, time, volume, pressure, energy, angle, frequency, power with 3 horsepower definitions, force, torque, typography px/pt/em/rem, fuel economy mpg ↔ L/100km) — zero runtime dependencies, pure math	dsh plugin --profile web add github:TYEclipse/dsh-units	✅ active	✅	✅ e2e (isolated install v0.4.0; installed-copy execution 6/6 anchors — 100 Mbps→12.5 MB/s, 1 g0→32.174049 ft/s², 1 fc→10.76391 lx)	2026-09-11	84a5094
dsh-color	Color toolbox: parse/convert any CSS color (hex, rgb()/hsl()/hwb(), all 148 CSS Color 4 named colors), WCAG 2.x contrast ratio with AA/AAA verdicts, named-color lookup by name or value, harmonious palette generation (color_scheme: complementary / analogous / triadic / split-complementary / tetradic / square / monochromatic), color adjustments (adjust_color: lighten / darken / saturate / desaturate / hue-rotate), color blending (blend_colors: alpha compositing "over" and premultiplied sRGB interpolation "mix", i.e. the color-mix() math), and contrast repair (ensure_contrast: nearest color to a foreground that reaches an AA/AAA target, reporting the best achievable ratio when the target is unreachable) — zero runtime dependencies, pure math	dsh plugin --profile web add github:TYEclipse/dsh-color#v0.3.0	✅ active	✅	✅ e2e (isolated install v0.3.0; installed-copy execution 11/11 anchors — rgba(255,0,0,0.5) over #ffffff → #ff8080, mix #ff0000 + #0000ff @0.5 → #800080, ensure_contrast #777777 on #ffffff → #767676 at 4.54:1, #555555 on #000000 AAA → #959595 at 7.01:1, unreachable #8080ff on #808080 → best #000000 at 5.32:1, rgb(51,102,153) → 51/102/153)	2026-09-18	72c22e7
Code2Skill	Three agent skills that generate portable Function / MCP Tool / workflow Skill packages (with offline tests) from user-authorized code, plus independent flow and source-semantics review — pure skill bundle, MIT	dsh plugin --profile web add github:leechen298/Code2Skill#v1.1.3	✅ active	✅	✅ e2e (code2skill-review-source skill invoked headless)	2026-08-16	7815d8f1
dsh-semver	Semantic versioning toolbox: parse any semver string (semver_parse), compare versions with spec-compliant prerelease ordering (semver_compare, build metadata ignored), check npm-style ranges (semver_satisfies: ^ ~ >= <= > < =, x-ranges, hyphen, ||, AND, tuple-lock prerelease semantics, includePrerelease override), increment versions per npm semver.inc incl. prerelease counters and identifier restarts (semver_inc), report npm semver.diff release-type differences with special cases (semver_diff), and sort version lists with build-metadata tie-break (semver_sort) — zero runtime dependencies, pure logic	dsh plugin --profile web add github:TYEclipse/dsh-semver#v0.2.0	✅ active	✅	✅ e2e (semver_inc 1.2.4-beta.0 +prerelease beta → 1.2.4-beta.1 + semver_diff 1.2.3→2.0.0-beta.1 → premajor, headless)	2026-08-28	370700a
Archify for DSH	Opt-in skill-only bundle (@tt-a1i/archify-dsh) bringing the Archify architecture-diagram skill to dsh: typed JSON specs (architecture / workflow / sequence / dataflow / lifecycle) rendered to self-contained interactive HTML with inline SVG, showcase-quality validation (9 artifact checks) — pure skill bundle, MIT	dsh plugin --profile web add @tt-a1i/archify-dsh@0.1.0	✅ active	✅	✅ e2e (archify skill headless: 9/9 showcase validation)	2026-08-16	0.1.0
dsh-finance	Money math toolbox: fixed-rate loan payment with amortization schedule and extra-payment impact (loan_payment), compound growth projection with monthly contributions and any compounding frequency (compound_growth), nominal ↔ effective annual rate conversion incl. continuous (rate_convert), NPV/IRR/payback cash-flow analysis with explicit no-root/multiple-root reporting (cashflow_analysis), and retirement withdrawal planning — time-to-exhaustion + sustainable withdrawal with lasts_horizon verdict (retirement_plan) — zero runtime dependencies, pure arithmetic, headline values verified against published anchors (Excel IRR example, mortgage tables)	dsh plugin --profile web add github:TYEclipse/dsh-finance#v0.2.0	✅ active	✅	✅ e2e (retirement_plan 300k@4%/30y → 1432.25 + cashflow_analysis NPV 267.95/IRR 21.86%, headless)	2026-08-29	6479bc8
dsh-ipcalc	IP & subnet math toolbox: full IPv4 subnet layouts (ipv4_subnet: network/broadcast/mask/hosts + IANA classes, RFC 3021 /31), minimal covering CIDR aggregation (ipv4_summarize), IPv4/IPv6 parsing with RFC 5952 normalization and embedded-IPv4 recognition (ip_parse), IPv6 subnet layouts with 128-bit BigInt math and exact decimal-string address counts (ipv6_subnet, RFC 6164 /127), and CIDR membership tests for bare IPv4/IPv6 addresses with mixed-version rejection (ip_match) — zero runtime dependencies, pure local math, no network I/O	dsh plugin --profile web add github:TYEclipse/dsh-ipcalc#v0.2.0	✅ active	✅	✅ e2e (ipv6_subnet ::/0 → 340282366920938463463374607431768211454 usable of 340282366920938463463374607431768211456 + ip_match 2001:db8::5 in 2001:db8::/32 → INSIDE, headless)	2026-08-31	7170f61
dsh-geodesy	Geodesic math toolbox: great-circle distance with bearings and compass direction (geo_distance), initial/final bearings plus great-circle midpoint (geo_bearing), direct-problem destination point with round-trip check (geo_destination), decimal/DMS coordinate parsing (coord_parse), rhumb-line constant-heading distance & bearing (geo_rhumb), great-circle path intersection with antipodal crossing (geo_intersection), and spherical polygon area via spherical excess (geo_area) — zero runtime dependencies, pure trigonometry on the IUGG mean Earth radius, configurable radiusKm	dsh plugin --profile web add github:TYEclipse/dsh-geodesy#v0.2.0	✅ active	✅	✅ e2e (geo_area octant 63,758,235.1 km² + geo_rhumb 2416.086 km @ 62.598° + geo_intersection (40.569, -17.986) @ 1747.377 km)	2026-09-03	5b79543
dsh-checkdigit	Check-digit mathematics toolbox: generate, validate and auto-detect check digits for 13 schemes — Luhn (cards/IMEI), Verhoeff, Damm, ISBN-10 (mod-11, X) / ISBN-13, EAN-8/13, UPC-A, ISIN (ISO 6166), CUSIP (ANSI X9.6), IBAN (ISO 13616, 75+ country BBAN table), CAS Registry Number (position-weighted mod 10) and ABA routing number (3-7-1 weighted mod 10) — plus ISBN-10 ⇄ ISBN-13 conversion with source check-digit verification, 978-prefix semantics and hyphen-group preservation (isbn_convert) — zero runtime dependencies, pure integer arithmetic anchored to published worked examples	dsh plugin --profile web add github:TYEclipse/dsh-checkdigit#v0.2.0	✅ active	✅	✅ e2e (isbn_convert 1-56619-909-3 → 978-1-56619-909-4 + checkdigit_validate 50-99-7 → cas + 121000358 → aba + 979 prefix correctly reported as no ISBN-10 equivalent, installed-copy execute)	2026-09-04	8c08e11
dsh-musictheory	Music theory math toolbox: parse any note name into MIDI/octave/pitch class/exact 12-TET frequency with enharmonic spellings (note_info), frequency → nearest note with cents deviation (freq_to_note), correctly spelled chords for 26 qualities (chord_build — G# major is G# B# D#, Cdim7 is C Eb Gb Bbb), correctly spelled scales for 17 types (scale_generate — F# major has E#), interval engine (interval_build — G# + M3 = B#; interval_info — C→F# is an A4, C→Gb a d5, compound intervals), and scale harmonization (scale_harmonize — C major → I ii iii IV V vi vii°, sevenths: true → Imaj7 ii7 iii7 IVmaj7 V7 vi7 viiø7) — zero runtime dependencies, pure arithmetic, configurable A4 reference pitch	dsh plugin --profile web add github:TYEclipse/dsh-musictheory#v0.2.0	✅ active	✅	✅ e2e (scale_harmonize sevenths C4 major → 7th table all correct + interval_build C4+M3→E4 + interval_info C4→F#4=A4, headless LLM-driven)	2026-09-05	5562bd3
dsh-chem	Chemistry math toolbox: chemical formula parsing with nested parentheses, hydrates (CuSO4·5H2O), ionic charges (Fe3+/SO4^2-, documented disambiguation rule) and IUPAC molar mass with per-element breakdown (formula_mass), mass/mole/particle conversions with Avogadro constant (mass_moles, 6 modes), solution concentration math — molarity, preparation mass, C1V1=C2V2 dilution, percent w/v·v/v·mass (solution), and pH/pOH/[H+]/[OH-] + Henderson–Hasselbalch buffer math at 25 °C (ph) — zero runtime dependencies, pure arithmetic over the 118-element IUPAC table, anchors from an independent Python oracle cross-validated against published textbook molar masses	dsh plugin --profile web add github:TYEclipse/dsh-chem#v0.1.0	✅ active	✅	✅ e2e (formula_mass Fe2(SO4)3 → 399.858 + ph 0.005 M → 2.3010, headless LLM-driven)	2026-09-06	f6ffe3b
dsh-probstat	Probability & statistical inference math toolbox: distribution calculator for six distributions — normal, binomial, poisson, exponential, uniform, geometric (pdf/cdf/survival/quantile/stats) (dist_calc), standard-normal z-table math — z ↔ probability/percentile, two-sided p-values, interval probabilities (z_score), confidence intervals — mean with z or Student-t critical values, proportion via Wilson score (confidence_interval), and event-probability identities — union/intersection/conditional/Bayes/complement/at-least-one (event_probability) — zero runtime dependencies, pure arithmetic, normal quantile via Acklam (rel. err < 1.15e-9), Student-t cross-checked against published t-table values, anchors from an independent Python oracle	dsh plugin --profile web add github:TYEclipse/dsh-probstat#v0.1.0	✅ active	✅	✅ e2e (confidence_interval proportion 40/100 → [0.3094, 0.4980] + event_probability bayes 0.01/0.99/0.05 → 0.1667, headless LLM-driven)	2026-09-07	9c35289
dsh-linalg	Linear algebra math toolbox: matrix multiplication with dimension checking (matrix_multiply), single-operation matrix math — transpose / determinant / inverse / trace / reduced row echelon form (matrix_compute), linear system solver Ax=b with unique / infinite (particular solution + nullspace basis + free-variable count) / no-solution classification (solve_linear), and vector operations — dot / cross (3D) / norm / projection / angle in degrees (vector_ops) — zero runtime dependencies, pure local arithmetic, Gaussian elimination with partial pivoting, outputs rounded to 10 decimals, singular and inconsistent systems fail cleanly with explicit messages, anchors from an independent exact-arithmetic (fractions) oracle	dsh plugin --profile web add github:TYEclipse/dsh-linalg#v0.1.0	✅ active	✅	✅ e2e (matrix_compute inverse [[4,7],[2,6]] → [[0.6,-0.7],[-0.2,0.4]] + vector_ops cross [1,2,3]×[4,5,6] → [-3,6,-3] + solve_linear under-determined → particular (-2,8,0) + nullspace basis (1,-2,1), headless LLM-driven)	2026-09-08	c6cdfad
dsh-complex	Complex-number math toolbox: parse rectangular/polar strings into the full identity (complex_parse — "3+4i"/"5∠53.13°", modulus, argument rad & deg, conjugate), one-operation arithmetic — add/subtract/multiply/divide/conjugate/reciprocal/integer power via De Moivre (complex_calc), polar ↔ rectangular conversion (complex_convert), principal values of exp/log/sin/cos/tan/sinh/cosh/sqrt with branch conventions reported (complex_functions), and complete n-th root sets listed from the principal root (complex_roots, n ≤ 64) — zero runtime dependencies, closed-form formulas on the principal branch, output rounded at the boundary only, anchors from an independent Python cmath oracle	dsh plugin --profile web add github:TYEclipse/dsh-complex#v0.1.0	✅ active	✅	✅ e2e (complex_calc divide (3+4i)/(1-2i) → -1+2i + complex_convert to_polar 3+4i → 5∠53.13°, headless LLM-driven)	2026-09-09	fa89489
dsh-boolean	Boolean algebra toolbox: parse logic expressions over single-letter variables with symbol, word or unicode operators (truth_table — full table up to 8 variables with per-row results, minterm/maxterm indices, tautology/contradiction/satisfiability flags and canonical DNF+CNF strings; logic_eval — evaluate under one complete trueVars/falseVars assignment, missing variables reported never silently defaulted; logic_equiv — equivalence check over the combined table plus a concrete counterexample when expressions differ; logic_convert — canonical nnf/dnf/cnf plus NAND-only and NOR-only gate networks in NAND()/NOR() call syntax) — zero runtime dependencies, XOR/IMPLIES/IFF desugared at parse time, truth-table and DNF/CNF anchors from an independent Python brute-force oracle, 99 unit tests	dsh plugin --profile web add github:TYEclipse/dsh-boolean#v0.1.0	✅ active	✅	✅ e2e (truth_table a^b → minterms [1,2] + DNF (!a & b)	(a & !b) + logic_equiv !(a	b) vs !a&!b equivalent + logic_convert a->b cnf → (!a
MemOS Cloud for DSH	Cloud lifecycle-memory plugin: pre-step recall injection and post-turn memory sync backed by the MemOS Cloud API (memos.memtensor.cn); no tools registered — agent/pre-step + session/event hooks with graceful degradation when no API key is configured; MIT	dsh plugin --profile web add @memtensor/memos-cloud-dsh-plugin@0.1.0	✅ active	✅	✅ e2e (headless turn completes 17×23=391 with plugin mounted, no-credential degradation verified)	2026-08-20	0.1.0
PicGo Upload for DSH	Image & file uploading to the user's configured image host (PicGo Cloud, GitHub, S3, …) via the PicGo engine: picgo_upload tool + /picgo command + bundled picgo-upload skill; prefers the running PicGo desktop app (local server, 127.0.0.1:36677) and falls back to the in-process PicGo library reading ~/.picgo/config.json; MIT	dsh plugin --profile web add @picgo/dsh-plugin@0.2.0	✅ active	✅	✅ e2e (isolated install; picgo-upload skill + trigger surfaced in a headless session — 17×23=391 mount check; picgo_upload executed through the installed copy: signed-out degradation relays /picgo login with no hang, empty input rejected)	2026-09-11	0.2.0
WeKnora for DSH	Tencent WeKnora knowledge-base plugin: four tools — list the credential's knowledge bases (weknora_list_knowledge_bases), hybrid vector+keyword retrieval returning passages verbatim with rank/score/chunk metadata plus by-name document matches (weknora_search), reassembled document reading with paging and generated summaries (weknora_read_document), and WeKnora-composed answers with citations (weknora_ask) — env-var configuration (WEKNORA_BASE_URL / WEKNORA_API_KEY / WEKNORA_KNOWLEDGE_BASE_IDS), load-time config validation, tool prefixing for two deployments side by side; zero runtime dependencies, MIT	dsh plugin --profile web add @wxg-prc-cpg/dsh-weknora@0.1.0	✅ active	✅	✅ e2e (isolated install; 4-tool registration verified; list / search / read_document executed against a mock deployment — ranked passages with scores, named-document enrichment, ordered chunk assembly; unreachable deployment errors cleanly and fast; headless mount session 17×23=391)	2026-09-15	0.1.0
dsh-web	DSH Web GUI plugin family (npm aggregate @linxin666/dsh-web-all of 19 family packages + external dsh-better-sidebar): task board with host-side cron execution, mobile/PC remote access via device pairing, SSH panel (terminal / transfer / tunnels), usage stats, model capability profiles, session archive with auto policies, git graph, preset / skin / market / community browsers, pet, i18n — mounted as 21 namespaced web-ui-* rows; five opt-in rows (ssh / describe-image / liangshen / skill-explorer / doctor) ship disabled by default; Apache-2.0	dsh plugin --profile web add @linxin666/dsh-web-all@0.3.22	✅ active	✅ (anon. daily install heartbeat — documented; no conversation data)	✅ e2e (isolated install v0.3.22 — native-build approval step per README 安装排障; 21 web-ui-* rows mounted; web host boot smoke: token fence 401 → 303 → 200, GUI served carrying the family's blue-fantasy skin)	2026-09-16	0.3.22
dsh-market	Visual plugin market inside DSH: browse/search the community catalog (2300+ plugins) with category filters and host-aware compatibility hints; one-click install (prefers repo-verified npm packages, then prebuilt GitHub Release tarballs, then source), per-plugin update checks, community themes/skins with live switching, favorites, backup & restore (readable JSON export / WebDAV / private GitHub Gist), hot enable/disable and load-order editing via the profile patch layer, a plugin diagnostics page, and a capability-gated public update API v1 — MIT	dsh plugin --profile web add dshmarket@1.47.0	✅ active	✅ (no telemetry — "never phones home"; documented outbound: catalog + GitHub content routes, gh-proxy/ghfast acceleration fallbacks; comments contact giscus.app/GitHub only when opened; installs restricted to the curated registry; build scripts stay blocked by default; same-origin install endpoint)	✅ e2e (isolated install dshmarket@1.47.0 — prebuilt npm, 1.3s, no build step; dsh-market layer in composed config; web boot smoke 401→303→200; live /dsh-market/api/v1/capabilities → 200 JSON, marketVersion 1.47.0)	2026-09-17	1.47.0
dsh-honcho	Honcho memory for DSH — persistent cross-session memory that survives context resets: injects your profile, this project's session summary and Honcho's relevant conclusions at session start, captures every user/assistant turn in the background (debounced, flushed at turn boundaries, before compaction and on shutdown) with best-effort secret redaction, and registers three tools — honcho_search (raw messages plus derived conclusions), honcho_chat (judgement questions over everything Honcho knows) and honcho_remember (durable facts / preferences / decisions); configured through the shared ~/.honcho/config.json contract (workspace, peer name, baseUrl, global kill switch), shared with the sibling claude-honcho / codex-honcho integrations — MIT	dsh plugin --profile web add @honcho-ai/dsh-honcho	✅ active	⚠️ memory-service client: captured session text is uploaded to api.honcho.dev by default (self-hostable via baseUrl / HONCHO_BASE_URL); secrets are regex-redacted before upload and the redactor is documented as best-effort, so novel secret formats can pass through; also reads/writes ~/.honcho/config.json and shells out to git for repo metadata; no telemetry or analytics SDKs found	✅ e2e (isolated install of npm @honcho-ai/dsh-honcho@0.1.0 — prebuilt tarball, 2.1s, no build scripts; honcho layer present in the composed config; plugin loads in a headless dsh-base + dsh-headless profile on host 0.1.5-rc.2 with no apply error despite newer peer pins; no-credential degradation verified — "[honcho] no API key … Memory is off." and the turn still completes; memory round-trip not exercised, it needs a Honcho API key or a self-hosted instance. Use the npm package: a github: install would run its prepare build)	2026-09-18	0.1.0
dsh-ouroboros	Ouroboros (spec-first AI dev workflow engine: Socratic interview → Seed spec → execute → evaluate → evolve) mounted into DSH as native tools by a config-only bundle row that spawns ouroboros mcp serve over stdio — 36 tools registered (ouroboros_interview / ouroboros_pm_interview / ouroboros_generate_seed / ouroboros_execute_seed / ouroboros_auto / ouroboros_evaluate / ouroboros_evolve_step / ouroboros_qa / ouroboros_ralph …) so "ooo interview " or "ooo auto " in chat resolves to the matching tool on its own; ouroboros_auto gets a 30-minute MCP timeout, the execution step defaults to the host model (OUROBOROS_AGENT_RUNTIME=host) with claude-cli / codex / opencode selectable, and failOnStartupError: false keeps DSH booting on machines without uv/Ouroboros — MIT	dsh plugin --profile web add "github:Q00/ouroboros#main&path:integrations/dsh-plugin"	✅ active	⚠️ anonymous usage telemetry is on by default (PostHog us.i.posthog.com via the bundled ouroboros-ai Python package): closed command/status dimensions, runtime backend, version, OS and failure-reason codes only — never code, prompts, seed content, file paths or arguments; identity is a random UUID; opt out with DO_NOT_TRACK=1, OUROBOROS_TELEMETRY=0 or telemetry.enabled: false in ~/.ouroboros/config.yaml (contract in the repo's TELEMETRY.md). The row also forwards DEEPSEEK_API_KEY + ANTHROPIC_API_KEY into the spawned child (explicit short allowlist after dsh's credential scrub), executes a third-party PyPI distribution at runtime, and keeps its project state in the working directory it is launched from	✅ e2e (isolated install of github:Q00/ouroboros#main&path:integrations/dsh-plugin — whole-repo clone ~3m50s, +1 package, no build step; dsh-ouroboros layer with the mcp-ouroboros row present in the composed config; LLM-driven headless turn on host 0.1.5-rc.2 — 36 tools registered from ouroboros-ai 0.54.4 and a real ouroboros_project_status call returned its payload, clean shutdown, rc=0. Needs Python ≥3.12 for uvx, which does not auto-download it: on a 3.11 host the row soft-fails silently and no ouroboros tools appear — remedy uv python install 3.12 (verified here) or UV_PYTHON=3.12. Install follows #main (no tag/npm package available). Full interview → seed → execute → evaluate workflow not exercised)	2026-09-19	0.1.0 (repo main @2026-09-15)
ModLens	Vision bridge for text-only models: registers one modlens_read_image tool (name configurable) and auto-discovers every provider route that carries an eligible text-only DeepSeek / GLM / MiMo model, adding a "(modlens vision)" wrapped entry per route so a pasted image is turned into structured JSON evidence at request time — summary, full transcription, reading-order layout regions, entities and relations, and an explicit uncertainty list instead of invented values; the engine is the CLI shipped inside the same package (dist/main.js, spawned from the plugin and version-locked to it), providers / keys / failover / cooldown / reuse grants live in a shared ~/.modlens/config.json, modlens doctor reports local routing and providers offline without spending quota; can reuse existing logins of locally installed agents (Claude Code, Codex, OpenCode, Pi, Kimi CLI) and ships a zero-config start — MIT	dsh plugin --profile web add @liustack/modlens@3.26.2	✅ active	⚠️ no telemetry or analytics SDK in the package (no PostHog/Sentry/GA/analytics libs, no install-time scripts — only a prepublishOnly release hook), but it is a vision bridge by design: the image leaves the machine to whichever third-party provider is selected (Antigravity CLI built-in default, or Gemini API / OpenAI / Anthropic / agent CLIs with user-supplied keys in ~/.modlens/config.json), and it can reuse logins of other locally installed agents — on the verification host modlens doctor printed decisions: claude granted, codex not asked, opencode not asked, pi not asked, grok not asked, i.e. the Claude Code reuse grant is on by default; it spawns the bundled CLI as a child process, recovers pastes as 0600 files in fresh 0700 temp dirs and deletes the throwaway working copy after the read, and redacts keys from errors. Its own docs/security.md is unusually explicit (image content treated as untrusted input, --dangerously-skip-permissions for agy, --allowedTools Read for claude-cli, kimi-cli run only when named) and states plainly that this is exposure reduction, not a sandbox	✅ e2e (isolated install of npm @liustack/modlens@3.26.2 — prebuilt tarball, 1.9s, no build step and no allowBuilds approval; modlens layer present in the composed config; modlens doctor ran clean and offline on the host — Node v26.8.1 ≥ 22.19, node:sqlite available, guard verdict allow; LLM-driven headless turn on host 0.1.5-rc.2 with a synthetic image fixture — modlens_read_image was registered, invoked with a real image path and the bundled CLI was spawned, exiting 1 with its documented, actionable "no vision provider is set up on this machine" message (install Antigravity CLI or modlens config set gemini-api.apiKey); clean exit, rc=0. The actual vision read was not exercised — this host has no provider configured, so image → evidence was never produced)	2026-09-20	3.26.2

Columns: Security = passed preliminary source review (TRACE-lite: trust / reliability / auditability / confidentiality / effectiveness); Trial = verified in an isolated profile with a real end-to-end tool call; Commit = the exact revision that was verified.

How to add your plugin

1. Add the dsh-plugin topic to your plugin repository
2. Open an issue in this repository using the Plugin Submission template (plugin name, repo link, release tag, license, install command)
3. The pipeline verifies the submission in an isolated profile — security review, install, and one real end-to-end tool call
4. Verified plugins are added to the index and the issue is closed; failed submissions stay open with a needs-fix label and a summary reply

About

• Independent community index (not affiliated with DeepSeek AI)
• Updated automatically on a daily basis
• MIT License

---

Maintained by the dsh-autopilot pipeline.