dsh-pentest
Penetration testing mode bundle for DeepSeek Harness with exploration graphs, asset tracking, and vulnerability reporting.
Install
$ dsh plugin --profile web add @howmp/dsh-pentestPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Registers an automated 'penetration mode' preset for DeepSeek Harness sessions
- Provides pentest-focused agent tools for logging goals, intents, facts, findings, and assets
- Tracks testing graphs deterministically with node-edge relationships like spawns, yields, derived_from, and proves
- Visualizes exploration links using xyflow in dedicated Web UI tabs
- Generates structured findings with mandatory reproducible steps and asset associations
- Routes engagement data to an isolated SQLite database backend
- Includes a bundled repair utility (dsh-pentest-repair) for recovering legacy session logs
Useful For
- Conducting authorized penetration testing and security audits through guided AI workflows
- Mapping target attack surfaces and discovering multi-tier infrastructure assets
- Documenting vulnerabilities with reproducible steps and real-time relationship tracing
- Generating exportable Markdown security assessment reports directly from agent sessions
Who It Fits
- Security engineers and penetration testers using DeepSeek Harness
- Red team operators tracking multi-step exploit chains and target assets
- Developers conducting automated security assessments within authorized local environments
Documented Limitations
- Requires DeepSeek Harness host version 0.1.6 or higher and Node.js >= 22.5 for node:sqlite support
- Engagement tracking is scoped per session; cross-session project continuation is not supported
- Web graph projection caps displays at the latest 200 nodes, assets, and edges
- Graph layout in the Web UI is statically layered and does not support drag-and-drop repositioning
- Does not enforce network or operational guardrails; activities remain bounded by DSH sandbox and approval settings
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 3 runtime, 18 development, 5 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub did not report an SPDX license for this repository snapshot.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- howmp/dsh-pentest
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- 8b695fe · 2026-10-08
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 599GitHub stars
- Forks
- 70
- Open issues
- 0
- Last commit
- 2026-10-08
- Last release
- 2026-10-08
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Ontology-first agent preset and epistemic loop platform for DeepSeek Harness research workflows.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Comprehensive long-term memory, self-evolution, skills, task management, and multi-agent dispatch bundle for DeepSeek Harness.
View plugin →Multi-model workflow teams and DAG orchestration GUI for DeepSeek Harness Web profile.
View plugin →