DeepSeek Harness Plugin

QqiqiQ/dsh-profile-vault

Category Memory Added 2026-11-04

A consent-gated personal profile store: people are indexed by name, entries by person and key, and no profile record is read before the current session is authorised. Sensitive entries come back masked unless the user authorises that tier separately; credential-like values are refused at write time. Ages and next birthdays are computed at read time, so asOf restores the answer for a past date, and facts that rot (height, weight, address) carry freshness warnings. Five profile_* tools plus a settings page to browse, edit, delete and revoke grants.

Install

# from a prebuilt release tarball

dsh plugin --profile web add "https://github.com/QqiqiQ/dsh-profile-vault/releases/latest/download/dsh-profile-vault.tgz"

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:QqiqiQ/dsh-profile-vault

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.