DSH Plugin Directory

Sessions & Messages

dsh-wsl-secret

173787247/dsh-wsl-secret · ★ 1

173787247

DeepSeek Harness WSL plugin: pass/age secrets with allowlist; list/exists; secret_to_env without dumping values into chat.

RepositorySource
License
MIT
Added
2026-10-30
Maintenance
active
Install kind
github
Manifest details
Manifest status
Declared
Manifest path
package.json#dsh
Manifest checked
2026-10-30T09:37:57.825Z
Lifecycle scripts
None found

Static manifest checks report declarations only; they are not compatibility or security review.

安装

dsh plugin --profile web add 'github:173787247/dsh-wsl-secret#0ae44c0f53a195bfa18da5765d32dd73e355dc29'

GitHub 源码安装：首次需按提示配置 allowBuilds 构建授权后重试

For install and environment setup, plus plugin development tutorials, see DSH community docs ↗

README

Source README · body: en · Read Chinese README

Table of contents
  1. Why this plugin exists
  2. 5-minute setup
  3. 1. Install tools (once)
  4. 2. Put secrets under one prefix
  5. 3. Allow that prefix in Cordis
  6. 4. Agent flow (what to ask / what tools do)
  7. Tools
  8. Security model
  9. Develop
  10. Compatibility
  11. License

Languages: 中文（首页） · English (this file)

Read pass / age secrets into a DSH (Cordis) session — safely.
npm dsh-wsl-secret
Requires WSL/Linux with pass and/or age on PATH
Default reads blocked until you set allowPrefixes

Why this plugin exists

  • dsh-wsl-cred → Git push/pull credential hints only
  • dsh-wsl-secret → App secrets (OpenRouter, Discord bot token, …) from your password store

If secret_status shows ready=false, the plugin is installed but not configured. That is intentional.

5-minute setup

1. Install tools (once)

# Debian/Ubuntu example
sudo apt install pass age
# initialise pass if needed: pass init <gpg-id>

2. Put secrets under one prefix

pass insert dsh/openrouter    # paste API key, first line = secret
pass insert dsh/discord-bot

3. Allow that prefix in Cordis

Edit your profile cordis.patch.yml (example: ~/.dsh/profiles/web/cordis.patch.yml):

plugins:
  dsh-wsl-secret:
    enabled: true
    path: /mnt/c/Users/YOU/Desktop/AIFullStackDevelopment/dsh-wsl-secret
    config:
      # pass: folder names under ~/.password-store
      # age: absolute or ~/ filesystem roots
      allowPrefixes:
        - dsh
        # - ~/secrets
      reveal: false          # keep false; use secret_to_env instead
      timeoutMs: 15000

Restart DSH / reload the profile.

4. Agent flow (what to ask / what tools do)

Step Tool Result
Check secret_status ready=true, lists allowPrefixes
Find secret_pass_list names only, e.g. dsh/openrouter
Confirm secret_pass_exists { exists: true }
Use secret_to_env sets process.env.OPENROUTER_API_KEY, returns preview only
Optional secret_pass_get preview (or full value only if reveal: true — avoid)

Example tool call:

{ "name": "secret_to_env", "arguments": {
  "name": "dsh/openrouter",
  "envKey": "OPENROUTER_API_KEY"
}}

After that, other tools in the same dsh process can read process.env.OPENROUTER_API_KEY. The chat UI only sees a redacted preview.

Tools

Tool Purpose
secret_status pass/age on PATH + allowlist + ready
secret_pass_list list entry names under allowlist
secret_pass_exists boolean exists check
secret_to_env preferred — pass → process.env
secret_pass_get read with preview / optional reveal
secret_age_to_env age file → process.env
secret_age_decrypt decrypt age file (preview / reveal)

Security model

  1. Empty allowPrefixes → every read fails (safe default).
  2. Pass names must match an allowlist prefix (dsh → dsh/...).
  3. Age paths must sit under filesystem roots in the same list (~/secrets/...).
  4. reveal: false (default): tool results never include the full secret.
  5. Prefer secret_to_env / secret_age_to_env so the model never needs the raw string in context.
  6. Never paste secrets into the chat.

Develop

npm test

Compatibility

Field Value
Plugin dsh-wsl-secret 0.2.0
Minimum dsh ≥ 0.1.2 (web UI one-shot ?token= on Windows relay :3081)
Latest verified See dsh-wsl-kit Compatibility (currently 0.2.1-rc.5) — single source of truth for the suite
Kit set optional (not in install.sh / KIT_SET=daily by default)

License

MIT — LICENSE

Sessions & Messages

archify

tt-a1i

tt-a1i/archify

架构图生成 Skill 总仓（多宿主）：可校验的自包含架构图、工作流图、时序图、数据流图与生命周期图。DSH 安装不走本仓根——根目录不是 DSH bundle，请用适配包 @tt-a1i/archify-dsh（见 DSH 集成条目）。

View detailsdsh plugin --profile web add @tt-a1i/archify-dsh@1.0.0
☆ 96,486npm
Sessions & Messages

DeepSeek-Bot

Fei2411

Fei2411/DS-Bot/ds-bot

DS Bot: a team of long-lived Bots for DeepSeek Harness, with Main Bots, Bot-to-Bot messages and group chats

View detailsdsh plugin --profile web add 'ds-bot@0.2.4'
☆ 7,782npm
Sessions & Messages

Study-Mate

Miaotofu01

Miaotofu01/Study-Mate

StudyMate learning skills and lesson engine for DeepSeek Harness, Google Antigravity, Codex and ChatGPT Work.

View detailsdsh plugin --profile web add 'github:Miaotofu01/Study-Mate#d8114f38363272852b339d6788b2f8f007243b43'
☆ 1,452github
Sessions & Messages

dsh-plugin-subscriptions

V1ki

V1ki/dsh-plugin-subscriptions

把 ChatGPT（Codex）、Claude 与 Grok（X Premium）订阅用作 DeepSeek Harness 的 LLM provider——Web UI OAuth 登录，无需 API key

View detailsdsh plugin --profile web add github:V1ki/dsh-plugin-subscriptions
☆ 605github
Sessions & Messages

RabiRoute

vb2250158

vb2250158/RabiRoute/plugins/rabi-dsh-context

Connect DSH lifecycle events and conversation context to Rabi Manager.

View detailsdsh plugin --profile web add 'github:vb2250158/RabiRoute#e483f87e68cef2c8f5112b101e333b1a9577a9f7&path:/plugins/rabi-dsh-context'
☆ 493github
Sessions & Messages

dsh-deepseek-web-login

cv-superding

cv-superding/dsh-deepseek-web-login

Unofficial DSH plugin: use chat.deepseek.com web models as a DSH LLM provider (browser login capture + PoW solving + SSE streaming + prompting-based tool calls), provider route deepseek-web

View detailsdsh plugin --profile web add 'dsh-deepseek-web-login@1.0.3'
☆ 382npm