dsh-safe-download-files
Verifiedby Apoze · Security & Policy
Secure download_files tool for DeepSeek Harness with SSRF protection and MIME validation.
Verified plugin
Depends on the Cordis runtime or ships a cordis.yml, so it loads as a real dsh plugin.
What we found in the repo
- — depends on @deepseek-ai/cordis
- — depends on @deepseek-ai/dsh-system-prompt
- — npm package dsh-safe-download-files
Installing
No published npm package was found. Clone the repository and follow its README to build from source.
Before you install
A listing here is not a security audit. The tier above records whether this repo is wired as a real dsh plugin — not whether it is safe to run. A plugin executes with your agent's permissions: your files, your shell, your network. How to vet a dsh plugin before installing
Found malware or an impersonation in this repo? Report this listing
Repository details
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Language
- JavaScript
- License
- MIT
- Created
- 2026-08-26
- Last push
- 2026-08-31
Topics
More in Security & Policy
TokenLedger
Verifiedzh667
Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials
dsh-auto-mode
VerifiedNanmiCoder
Safe automatic permissions for DeepSeek Harness.
dsh-reverse-skill
Verifieddhicoc
Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
dsh-permission-rules
VerifiedPerryLink
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
dsh-secure-audit
VerifiedPensiveFei
Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.
dsh-usage
VerifiedAisland-SJL
🌊 Persistent dock & fully-customizable balance/usage panel for DeepSeek Harness — activity heatmap, dual-channel comparison, local-only & privacy-first