Task fit
30%15 points for catalog classification, 8 for an explicit category tag, and 7 when the name, description, or tags match: security, guard, credential, approval, audit, sandbox, redaction, safe, permission.
Security, guardrail, audit, credential, and safety projects ranked by public ecosystem evidence—not assumed trust.
Published selection rule
Standalone, installable public repositories classified as Security. Upstream, directory/list, archived, adaptation-required, watch, removed, placeholder, and non-plugin records are excluded. This is discovery, not a source-code security audit.
Ties are resolved by maintenance score, then Stars, then repository name.
100
point scale
15 points for catalog classification, 8 for an explicit category tag, and 7 when the name, description, or tags match: security, guard, credential, approval, audit, sandbox, redaction, safe, permission.
25 points if updated within 30 days; then 20 within 90, 14 within 180, 8 within 365, and 2 thereafter.
Stars are bucketed, not directly sorted: 20 at 1,000+, 17 at 250+, 14 at 50+, 10 at 10+, 7 at 3+, and 4 at 1+.
Forks are bucketed: 10 at 100+, 8 at 25+, 6 at 10+, 4 at 3+, and 2 at 1+.
8 points for Awesome + Topic, 6 for Awesome only, or 2 for Topic only; 4 for an 80+ character English description or 2 for 30+; 3 for 3+ tags or 1 for 1–2.
Scores use public catalog and repository metadata. They do not replace hands-on evaluation, permission review, or a security audit.
Scored results
iflytek / skillhub
Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
Why it placed here
kenryu42 / cc-safety-net
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
Why it placed here
ADWMC / helm-d
DeepSeek Harness 破甲一体化安全分析插件:Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合(9 bundle + 1 preset)
Why it placed here
BotHarness / DeepSeekBot
Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.|基于 DeepSeek Harness 的开源 GrokBot 平替:有长期记忆的个人 AI Bot 团队,支持多 Bot 协作、身份权限与插件生态扩展。MIT.
Why it placed here
MichengAI / dsh-skills-manager
DSH Skills Manager — 在 DeepSeek Harness 中统一加载并安全管理本机 Agent Skills · Load and safely manage local Agent Skills in DSH
Why it placed here
SepineTam / mcp-for-stata
Stata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.
Why it placed here
sjh9714 / dsh-win32
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
Why it placed here
FuRongJun-1999 / dsh-memory
白箱AGI架构探索:元认知(自我认知循环)、持续学习(知识飞轮)、世界模型(条件空间+语义时空图)、自我改进(自举纪律)、零LLM白箱管线与可审计信任护栏。
Why it placed here
xiaods / k8e
k8e.sh - OpenSource Agentic AI Sandbox Matrix
Why it placed here
MichengAI / dsh-archive-manager
DSH Archive Manager — 在 DeepSeek Harness 中安全查看、恢复和管理已归档会话 · Safely view, restore, and manage archived sessions in DSH
Why it placed here