deepseekplugins

DeepSeek Harness plugin

dsh-pentester

Pentesting agent plugin for DeepSeek Harness

Workflow & Automation
Jump to install

Source facts

Repository
fb0sh/dsh-pentester
Latest update
Aug 22, 2026
Category
Workflow & Automation
GitHub stars
1
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/fb0sh/dsh-pentester
Plugin: dsh-pentester
Author: fb0sh

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.mdSource · read only
README language

dsh-pentester

面向 DeepSeek Harness 的 PTES 渗透测试编排插件。

它是一个标准的 DSH bundle：package.json 声明 dsh.bundle.patch，cordis.patch.yml 将插件插入 profile。

能力

  • PTES 七阶段工作流
  • 自动 Engagement bootstrap（pentester_ensure_engagement，幂等）
  • Orchestrator + subagent Agent Run
  • Agent Template、Skills、MCP、Toolbox
  • Tool Broker（Scope、grant、AUTO / APPROVAL / DENY）
  • Docker 与 MCP 执行后端
  • Artifact / Evidence / Finding 持久化
  • 审批与 capability 控制
  • Native DSH 人机交互（ask_user_question）
  • Pentester Native UI（conversation.view）
  • 报告（report.md）

架构状态：[docs/status.md](docs/status.md)。 AI / 贡献者规则：[AGENTS.md](AGENTS.md)。 文档索引：[docs/README.md](docs/README.md)。 英文版 README：docs/README.en.md。

安装

dsh plugin --profile web add .
dsh --profile web --dump-config   # 查找 "# == dsh-pentester"
dsh web --profile web

加载成功会输出 [dsh-pentester] loaded。生产默认：devSeed=false。仅开发 fixture：dsh web --patch ./cordis.dev.patch.yml。

从 GitHub 安装（pnpm ≥10 在允许构建前会拒绝 prepare）：

dsh plugin --profile web add github:fb0sh/dsh-pentester
# 复制到 ~/.dsh/profiles/web/pnpm-workspace.yaml：
#   allowBuilds:
#     dsh-pentester: true
dsh plugin --profile web add github:fb0sh/dsh-pentester

卸载：dsh plugin --profile web remove dsh-pentester。

保持以下名称同步：package.json 的 name、src/index.ts 的 name、cordis.patch.yml 的 id / name。

开发

pnpm install
pnpm test
pnpm run check
pnpm run build

pnpm run check 即 tsc --noEmit 加 pnpm run build（host tsdown + client bundle）。

官方 Quickstart：https://deepseek-harness.github.io/deepseek-harness/guide/quickstart

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category