dsh-pentester
Multi-agent PTES penetration testing orchestrator for DeepSeek Harness with Docker/Kali toolboxes, MCP support, and native skills.
Install
$ dsh plugin --profile web add dsh-pentester@latestPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Root-orchestrator design managing continuable child worker delegations across PTES phases
- Isolated execution runtime supporting local and remote Docker/Kali daemons with filesystem synchronization
- 19 built-in expert agents partitioned by penetration testing phases with customizable skill allocations
- DeepSeek Harness Skill Runtime V4 native integration with frozen delegation grants
- Comprehensive MCP integration supporting STDIO, Streamable HTTP, and Legacy SSE (Burp Suite)
- Dedicated client UI featuring stage timeline topologies, live execution traces, findings tracking, and report generation
Useful For
- Authorized penetration testing and red team operational workflows
- Automated web and infrastructure vulnerability scanning in sandbox environments
- CTF challenge solving, reverse engineering, and security research
- Compiling structured PTES assessment deliverables and executive remediation reports
Who It Fits
- Penetration testers and ethical hackers
- Red team operators
- Security researchers and CTF competitors
- DevSecOps teams auditing authorized internal infrastructure
Documented Limitations
- Strictly requires DeepSeek Harness 0.2.x (>=0.2.0-rc.1 <0.3.0) and rejects 0.1.x hosts
- Requires access to a Docker daemon and pulling external container images such as Kali Linux
- Built-in skill packs are distributed separately as GitHub Release assets and require initialization from settings
- Built-in pre-authorization checks and RoE prompts are collaborative safety measures and do not replace legal testing authorization
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 11 runtime, 40 development, 12 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as NOASSERTION.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- fb0sh/dsh-pentester
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 2ef56bd · 2026-10-09
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 37GitHub stars
- Forks
- 5
- Open issues
- 0
- Last commit
- 2026-10-09
- Last release
- 2026-10-09
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Bundle of 88 open-source Agent Skills for research, business intelligence, marketing, and SEO in DeepSeek Harness.
View plugin →Compatibility bridge running unmodified Pi ecosystem extensions natively on DeepSeek Harness.
View plugin →