dsh-http-debug
DeepSeek Harness 的 HTTP 网络调试工具集插件，具备 SSRF/私有网络保护与请求历史重放功能。
AI 分析
核心用途是为 Agent 提供安全的通用 HTTP 客户端工具，防止 SSRF 攻击并支持请求重放。适合需要 Agent 进行安全网络请求、API 调试的任务。
安裝
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:JohnXu22786/net-debug說明文件
閱讀完整 README ↗Configuration
All fields are optional; defaults are the safe ones.
| Key | Default | Meaning |
|---|---|---|
ssrf.enabled | true | Master switch for all IP/DNS checks. |
ssrf.blockPrivate | true | Block 10/8, 172.16/12, 192.168/16, CGNAT 100.64/10, ULA fc00::/7. |
ssrf.blockLoopback | true | Block 127.0.0.0/8 and ::1. |
ssrf.blockLinkLocal | true | Block 169.254/16 and fe80::/10 (covers cloud metadata). |
ssrf.blockReserved | true | Block the remaining special-use ranges (documentation, multicast, broadcast, benchmarking, NAT64/6to4 prefixes, …). |
ssrf.whitelist | [] | Hosts / *.wildcards / IPs / CIDRs that always pass. |
client.timeoutMs | 30000 | Per-request timeout in ms. |
client.maxRedirects | 10 | Redirect cap. |
client.maxBodyBytes | 131072 | Captured body bytes; larger bodies are truncated. |
client.wafHeaders | true | Add sane default User-Agent (and Referer if configured) when the caller doesn't send one. |
client.userAgent | a Chrome UA | Default User-Agent. |
client.referer | '' | Default Referer; empty means none. |
history.maxEntries | 200 | Ring-buffer capacity. |
har.enabled | false | Attach HAR to every response by default. |