DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-web-fetch-enhanced

Configurable non-public address allowlists and enhanced web fetch provider for DeepSeek Harness.

Browser & WebSecurity & Policy
6GitHub Stars0ForksUpdated2026-09-11

Install

$ dsh plugin --profile web add dsh-web-fetch-enhanced

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-web-fetch-enhanced provides a drop-in replacement or enhancement for DeepSeek Harness web_fetch HTTP provider. It enables granular CIDR and hostname allowlists for non-public IP addresses, solving access issues with Clash/Mihomo Fake-IP proxying (198.18.0.0/15) and trusted intranet documentation servers while maintaining strict SSRF mitigations.

Key Capabilities

  • Configurable IPv4 and IPv6 CIDR allowlists for non-public address exceptions
  • Secondary hostname allowlist filtering with wildcard support (*.example.com)
  • DNS resolution validation and IP connection pinning
  • Same-origin redirect verification per hop
  • Resource limits enforcement (response bytes, body characters, timeouts, redirect counts)
  • DeepSeek Harness Web UI settings integration with live configuration updates

Useful For

  • Allowing DSH web_fetch to work behind Clash or Mihomo transparent proxies using Fake-IP ranges
  • Enabling AI agents to fetch trusted intranet documentation, wikis, and internal knowledge bases
  • Applying strict perimeter policies on non-public HTTP fetches without disabling SSRF checks

Who It Fits

  • DeepSeek Harness users running behind transparent/Fake-IP proxy setups
  • Enterprise developers integrating DSH agents with internal web endpoints
  • System administrators managing network access security boundaries for AI agents

Documented Limitations

  • Only GET requests without credentials, cookies, or Authorization headers are sent
  • Only same-origin redirects are followed automatically; cross-origin redirects require separate fetch requests
  • Wildcard domain rules match subdomains only and do not match the base apex domain
  • Requires proper permissions on Host settings service when editing via Web UI

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

No automated security signals have been published yet.

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
Yurzi/dsh-web-fetch-enhanced
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
005d1d6 · 2026-09-20

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
6GitHub stars
Forks
0
Open issues
0
Last commit
2026-09-11
Last release
No release detected
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app