DeepSeek HarnessHub
プラグインを投稿

TencentCloud/cloudq-for-dsh ↗★ 1

dsh-cloudq

CloudQ integration for DeepSeek Harness with secure credential, workspace, and plugin-management surfaces

AI 分析

核心用途是在 DSH 中集成 CloudQ 模式与技能。适合需要安全凭据管理、云端工作区协同以及特定 CloudQ 风险分析与开发任务的用户。

integrations生産性
パッケージ
dsh-cloudq
バージョン
0.1.4
ライセンス
MIT
最終更新
2026/08/31

インストール

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:TencentCloud/cloudq-for-dsh

ドキュメント

README 全文を読む ↗

dsh-cloudq

English | 简体中文

CloudQ integration for DeepSeek Harness. It adds a CloudQ mode to the Web profile, bundles the cloudq skill, and provides CloudQ usage and architecture views, local credential setup, and plugin management.

Screenshots

CloudQ risk analysis conversation

CloudQ settings and plugin management

Requirements

  • Node.js >=22.19.0
  • DeepSeek Harness 0.1.1-rc.2 or a compatible newer 0.1.x release
  • pnpm available to the dsh plugin command
  • Python 3 available as python3
  • macOS or Linux

Install

dsh plugin --profile web add dsh-cloudq

Restart the Web profile after installation:

dsh --profile web

Open the URL printed by DSH. The conversation input area and sidebar will expose the CloudQ entry. You can also invoke the bundled skill explicitly with /cloudq.

Upgrade and remove

dsh plugin --profile web update dsh-cloudq
dsh plugin --profile web remove dsh-cloudq

Restart the Web profile after changing the installed package set.

Credentials

The settings card accepts a Tencent Cloud SecretId/SecretKey pair.

  • Credentials are stored locally at ~/.tencent-cloudq/credential.json with owner-only permissions.
  • Secret values are sent to Python helpers through standard input, never command-line arguments.
  • Browser APIs return only credential state and masked identifiers; local credential paths and secret values are not returned.
  • Use the logout action to remove the stored credential.

Follow least-privilege: grant only the permissions required for the CloudQ operations you intend to run. The bundled skill can invoke read and write cloud-management operations; review each action before approving it.

Security model

  • Host APIs accept only loopback, same-origin requests.
  • JSON request bodies are limited to 64 KiB.
  • Python helper output is bounded, and unexpected internal errors are not returned to the browser.
  • Remote values are inserted with DOM text nodes rather than HTML injection.
  • Download links require HTTPS.
  • No credentials, tokens, or local environment files are included in the npm package.

Report security issues through GitHub Issues without including live credentials.

Development

pnpm install
pnpm run lint
pnpm run typecheck
pnpm run test:all
pnpm run build
pnpm run check:client
npm pack --dry-run --registry=https://registry.npmjs.org/

The npm package ships prebuilt Host and Web client artifacts, the bundle patch, the runtime logo, and the bundled skill. Registry installation runs no build scripts.

Repository layout

src/                         Host and Web client source
skills/cloudq/               Bundled CloudQ skill and Python helpers
assets/cloudq.png            Runtime logo served by the Host
scripts/                     Build and release checks
tests/                       Unit, integration, and package-contract tests
cordis.patch.yml             DSH bundle layer

Release

Source is reviewed and versioned in TencentCloud/cloudq-for-dsh. An npm version is published to the official registry only after the repository checks and the package-install smoke test pass.

More documentation

License

MIT. See LICENSE.