# DeepSeek Harness CLI

> DeepSeek Harness CLI is an officially published AI tool from DeepSeek. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/dsh-cli
- **Kind:** AI tool
- **Publisher:** DeepSeek
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://github.com/deepseek-ai/deepseek-harness
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/agent/dsh-cli

## Description

DeepSeek Harness local Web UI and CLI (dsh, npm @deepseek-ai/dsh) with plugin profiles, Cordis patch layers, skills and JSONL sessions under ~/.dsh

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `dsh-cli-web-profile` — Web UI profile manifest created by `dsh web` (presence)
    - win32: `${USERPROFILE}\.dsh\profiles\web\package.json`
    - darwin: `${HOME}/.dsh/profiles/web/package.json`
    - linux: `${HOME}/.dsh/profiles/web/package.json`
- `dsh-cli-web-profile-patch` — Web UI profile patch layer (models, plugins, MCP rows)
    - win32: `${USERPROFILE}\.dsh\profiles\web\cordis.patch.yml`
    - darwin: `${HOME}/.dsh/profiles/web/cordis.patch.yml`
    - linux: `${HOME}/.dsh/profiles/web/cordis.patch.yml`
- `dsh-home-patch` — Machine-wide Cordis patch layer shared by every profile
    - win32: `${USERPROFILE}\.dsh\cordis.patch.yml`
    - darwin: `${HOME}/.dsh/cordis.patch.yml`
    - linux: `${HOME}/.dsh/cordis.patch.yml`
- `dsh-env` — Harness-home environment file (API key, proxy) (presence)
    - win32: `${USERPROFILE}\.dsh\.env`
    - darwin: `${HOME}/.dsh/.env`
    - linux: `${HOME}/.dsh/.env`
- `dsh-credentials` — Saved provider API keys (presence only - never read)
    - win32: `${USERPROFILE}\.dsh\.credentials.yaml`
    - darwin: `${HOME}/.dsh/.credentials.yaml`
    - linux: `${HOME}/.dsh/.credentials.yaml`
- `dsh-agents-md` — User-global agent instructions (AGENTS.md)
    - win32: `${USERPROFILE}\.dsh\AGENTS.md`
    - darwin: `${HOME}/.dsh/AGENTS.md`
    - linux: `${HOME}/.dsh/AGENTS.md`
- `dsh-user-skill` — User-scope skills
- `dsh-project-skill` — Project-scope skills
- `dsh-profiles` — Profile directories (package.json + cordis.patch.yml), incl. web and desktop
- `dsh-sessions` — Session transcript directory (JSONL, presence)

## Related AI tools

- [5ire](https://catalog.anomity.ai/agent/5ire) — risk 10 (low)
- [9Router](https://catalog.anomity.ai/agent/9router) — risk 10 (low)
- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Orchestrator](https://catalog.anomity.ai/agent/agent-orchestrator) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [AIChat](https://catalog.anomity.ai/agent/aichat) — risk 10 (low)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json