dsh-vault
An encrypted credential-vault bundle for DeepSeek Harness with model tools and a Settings UI.
Install
$ dsh plugin --profile demo add dsh-vaultRepository Intelligence
AI-assisted, source-grounded explanation based on the public repository snapshot. It does not replace compatibility or security verification.
Key Capabilities
- Stores login, SSH, API-key, secret, OAuth, custom, and TOTP credential records.
- Encrypts vault entries at rest using Node.js crypto with scrypt-derived keys and AES-256-GCM, as described by the repository.
- Provides vault_add, vault_get, vault_search, vault_update, vault_delete, vault_totp, and vault_generate_password tools.
- Returns secret-free summaries from vault_search; full credential data is retrieved by explicit ID with vault_get.
- Supports readonly, ask-before-write, and automatic read-write access modes.
- Provides a Settings UI for configuration and access-mode selection.
- Supports npm, GitHub, local-path, and tarball installation paths.
Useful For
- Keep SSH connection details available to DeepSeek Harness workflows.
- Store API keys, OAuth tokens, and other developer credentials for explicit retrieval.
- Generate TOTP codes from saved TOTP secrets.
- Generate strong passwords and save account credentials locally.
- Require approval for credential writes through the ask access mode.
Who It Fits
- DeepSeek Harness users managing personal credentials.
- Developers who use SSH, API keys, OAuth tokens, or TOTP secrets.
- Users who want model-accessible credential tools with configurable write access.
Documented Limitations
- Vault security is bounded by the strength of the master password.
- Forgetting the master password permanently prevents access to stored data, according to the README.
- Secrets returned through vault_get enter the tool result and model context.
- The project states it targets single-machine, personal deployments; team-shared vaults are out of scope.
- GitHub-source installation may require allowing its prepare build script in pnpm.
- The package requires Node.js 20 or later.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 14 development, 8 peer, and 0 optional dependencies.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 14 development, 8 peer, and 0 optional dependencies.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 14 development, 8 peer, and 0 optional dependencies.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 14 development, 8 peer, and 0 optional dependencies.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Traceable source and registry metadata for this entry, kept separate from runtime verification.
- Source repository
- Ox0400/dsh-vault
- Registry source
- Public GitHub repository
- Source snapshot
- 94adb5b9ad01
- Artifact type
- plugin-bundle
- AI enrichment
- gpt-5.6-terra · 2026-08-14
- Prompt version
- dsh-plugin-enrichment-v3
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-14
- Last release
- 2026-08-14
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
DeepSeek Harness vision-routing plugin with provider fallback chains and pixel-level image tools.
View plugin →Schedule standalone coding tasks in fresh DeepSeek Harness Agent sessions, with workspace-scoped controls and durable run history.
View plugin →An installable DeepSeek Harness bundle for robotics and embodied-intelligence research workflows.
View plugin →Generate self-contained interactive HTML reports from Markdown, tables, charts, China province maps, flowcharts, math, and drill-down tables — a DeepSeek Harness (dsh) plugin
View plugin →