deepseekplugins

DeepSeek Harness plugin

dsh-secure-remote

Security and connection-stability overlay for DeepSeek Harness SSH workspaces

Security & Permissions
Jump to install

Source facts

Repository
startGalway/dsh-secure-remote
Latest update
Aug 19, 2026
Category
Security & Permissions
GitHub stars
1
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/startGalway/dsh-secure-remote
Plugin: dsh-secure-remote
Author: startGalway

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.en.mdSource · read only
README language

dsh-secure-remote

![CI](https://github.com/startGalway/dsh-secure-remote/actions/workflows/ci.yml) ![Latest release](https://github.com/startGalway/dsh-secure-remote/releases) ![License](LICENSE) ![Platforms](#platform-support) ![SSH](#security-model)

dsh-secure-remote is an independent DeepSeek Harness plugin that hardens SSH workspaces without forking or modifying DeepSeek Harness.

Highlights

  • Keeps existing SSH profiles, workspace RPCs and ssh_workspace v1 records compatible.
  • Enforces a remote Workspace root for file tools and rejects symlink/path escapes.
  • Fixes macOS PTY startup failures caused by long OpenSSH ControlPath values.
  • Reuses Unix SSH connections in a private 0700 directory and cleans them up on teardown.
  • Shows connected, connecting, degraded and disconnected status in the Web UI.
  • Discovers SSH Config aliases and private keys without reading or displaying key contents.
  • Supports macOS, Linux and Windows as local clients; remote targets must be POSIX.

Requirements

  • DeepSeek Harness Web profile with a compatible @deepseek-ai/dsh-ssh interface.
  • Node.js 22 or newer.
  • OpenSSH client available as ssh on macOS/Linux or ssh.exe on Windows.
  • POSIX remote target for remote Workspace operations.

Install

After publishing, install a tagged release with:

dsh plugin --profile web add github:startGalway/dsh-secure-remote#v1.1.0

For local development:

dsh plugin --profile web add file:/absolute/path/to/dsh-secure-remote

Restart the Web profile after installation. Existing remote Workspaces do not need migration.

Security model

File tools are constrained to the configured remote Workspace root. Bash is intentionally unchanged: it has the full permissions of the remote SSH account and is not limited by the file-tool boundary. Host-key checking remains strict by default. Passwords are stored through the existing DSH credentials service and are never put in SSH arguments or status responses.

Platform support

Local clientSSH clientControlMasterStatus/reconnectRemote target
macOSsystem OpenSSHenabledsupportedPOSIX
Linuxsystem OpenSSHenabledsupportedPOSIX
Windowsssh.exedisabledsupportedPOSIX

Windows remote targets are rejected with REMOTE_OS_UNSUPPORTED.

Development

npm run check
npm test
npm run pack:check

See [CONTRIBUTING.md](CONTRIBUTING.md) and [SECURITY.md](SECURITY.md) before submitting changes.

License

MIT. See [LICENSE](LICENSE).

Back to searchOpen GitHub repository

More related plugins

View category