Security & PermissionsDeepSeek Harness plugin

dsh-ui-auth

Name: dsh-ui-auth
Author: 0QwQ0

Authentication gate for the DeepSeek Harness Web UI: login covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies, IP-based login lockout, a user-management settings panel (users edit their own profile, admins add or remove users and reset passwords), admin-only model and API-key configuration guards, per-user isolation on the REST/list APIs and the WebSocket event streams, session persistence across restarts, a JSONL audit log, and a fail-closed gateway.

License: MIT
Added: 2026-08-28

GitHub info

License: MIT
Primary language: JavaScript
Last push: Aug 24, 2026, 3:40 PM
Maintainer: 0QwQ0
Added: 2026-08-28

Install

Install command

dsh plugin --profile web add "https://github.com/0QwQ0/dsh-ui-auth/releases/download/v0.4.0/dsh-ui-auth-0.4.0.tgz"

README badge

Add this Markdown to your plugin README to link back to its listing.

Listed onDSH Get

[![Listed on DSH Get](https://img.shields.io/badge/Listed_on-DSH_Get-1677ff?style=flat-square)](https://dshget.com/plugins/0QwQ0/dsh-ui-auth)

Security & Permissions

api-relay-audit

★ 819

Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.

Security & Permissionstoby-bridges

dsh-pentest

★ 324

Authorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.

Security & Permissionshowmp

dsh-auto-review

★ 120

Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.

Security & PermissionsPerryLink