WoYun520/dsh-purge

dsh‑purge – a red‑team plugin for DeepSeek Harness

What it is

• A community‑maintained plugin that works with the official DeepSeek Harness (the UI that runs DeepSeek LLMs). It targets the two supported Harness builds – the web version (dsh web) and the official desktop executable (v0.2.0‑rc.2).
• The plugin adds a small UI dock next to each chat session with two tabs:
  • Clean – shows which patches are applied, lets you apply, restore or uninstall them, and edit the jailbreak prompt.
  • Drill – (stable) lets you explore assets, skills and the local environment after you have been authorised (intended for controlled red‑team exercises).
• Its purpose is to separate the model‑level refusal logic from the host‑level policy that DeepSeek Harness enforces. By applying the plugin you can replace the default prompt and policy, letting you test how tightly the host is sandboxing the model.

How it works

• The plugin never modifies the Harness source code. It only writes into the user’s $DSH_HOME (or the equivalent .dsh folder) – the place where Harness stores its profiles and bundles.
• When you click Apply on the Clean page, the plugin writes a patched prompt and policy file into the profile’s configuration and restarts the host so the changes take effect.
• A /purge status command can be run in chat to show the current home directory and which patches are active.

Installation

1. Web profile – run dsh plugin --profile web add dsh‑purge.
2. Desktop profile – run dsh plugin --profile desktop add dsh‑purge.
3. Restart the host, open the dsh‑purge dock, and click Apply on the Clean tab.
   • Alternatively you can install manually by cloning the repo into $DSH_HOME/plugins/dsh‑purge and adding a file: dependency to the profile’s package.json.

Supported versions

• Only works with DeepSeek Harness 0.2. Older 0.1.x builds need an older tag of the plugin (see the Releases page).

Legal & ethical stance

• The author stresses that the tool is non‑profit, research‑only and must be used only on the user’s own locally‑installed Harness or on authorised test environments.
• Redistribution for profit, commercial resale, or use in illegal activities is explicitly prohibited and will terminate the MIT licence.

Who might use it

• Security researchers who want to evaluate how well DeepSeek Harness blocks jailbreak prompts.
• Developers building their own LLM‑powered assistants who need to understand the interaction between model refusals and host‑level sandboxing.
• Anyone interested in controlled red‑team style testing of AI chat interfaces (always with proper authorization).

---

Bottom line: dsh‑purge is a legitimate, open‑source red‑team utility that plugs into DeepSeek Harness to let you replace the default prompt/policy and see how the host enforces safety. It is scoped to local, authorised use and does not contain malicious payloads.