← DeepSeek Harness Plugins
DeepSeek Harness PluginManifest Valid

dsh-zcode-scribe

Security-focused long-term memory plugin for DeepSeek Harness with subagent permission narrowing and path safety.

Terminal & TUIDeveloper ToolsSecurity & Policy
0GitHub Stars0ForksUpdated2026-09-24

Install

$ dsh plugin --profile web add dsh-zcode-scribe

Plugin Overview & Capabilities

AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.

source-grounded
dsh-zcode-scribe is a long-term memory plugin for DeepSeek Harness that emphasizes security against memory poisoning and injection (OWASP ASI06). Built around a local Markdown-based memory store, it incorporates hard subagent permission narrowing (removing shell, MCP, network, and execution tools from memory writers), strict path-safety validations (blocking path traversal, Unicode smuggling, and NTFS alternate data streams), and loud non-truncating indexing budgets.

Key Capabilities

  • Registered `scribe_recall` tool for accessing local Markdown memory rooms
  • Strict path safety checks (`checkMemoryPath`) mitigating traversal, Unicode bidi smuggling, and NTFS alternate data streams
  • Scoped tool restriction design to strip network, code execution, MCP, and subagent tools from writer contexts
  • Index budget monitoring that fails explicitly on overflow instead of silent truncation
  • Tunable minimum user prose thresholds (`minUserWords`) to prevent unneeded extraction operations

Useful For

  • Local-first agent memory retrieval over structured Markdown files
  • Preventing agent memory poisoning and untrusted prompt injection in persistent memory stores
  • Isolating subagent memory read/write permissions from sensitive execution tools

Who It Fits

  • Developers building persistent agent workflows in DeepSeek Harness
  • Security-focused engineers seeking protection against memory injection and OWASP ASI06 vulnerabilities
  • Users needing inspectable, plain-markdown agent memory management

Documented Limitations

  • Currently read-only; memory extraction and automated writing are awaiting the M0 milestone
  • Compatible exclusively with dsh >=0.1.5-rc.2 <0.2.0 and >=0.1.6-alpha.1 <0.2.0 (dsh >=0.2.0 is unsupported)
  • Requires Node.js >=20 and peer dependencies from @deepseek-ai

DSH Compatibility

Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.

Not tested yetNo runtime compatibility tests have been published yet.

Security Signals

Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.

Dependency Counts

package.json declares 0 runtime, 0 development, 2 peer, and 0 optional dependencies.

info
Dsh Bundle Declared

package.json declares DSH bundle metadata.

info
License Declared

GitHub reports the repository license as MIT.

info
Package Manifest Available

A root package.json was captured and can be inspected by the registry.

info
Source Available

Public GitHub source metadata is available for this registry snapshot.

info

Source & Registry Notes

Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.

Source repository
BOWLUNA/dsh-zcode-scribe
Registry source
GitHub · dsh-plugin topic
Registry classification
Plugin
Source checked
ab49f95 · 2026-09-26

This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.

Repository Activity

GitHub stars
0GitHub stars
Forks
0
Open issues
0
Last commit
2026-09-24
Last release
2026-09-21
For maintainers

Maintaining this plugin?

This listing is generated from public repository data. If you maintain this project, you can review the information and share this listing with your users if you find it useful.

Add to README
Listed on DSHPlugin.app