Iniciar sessão
DeepSeek Harness logo

DeepSeek Harness

Beta

DeepSeek's open-source, plugin-based harness for running AI coding agents locally

Visitar site
Cuidado

DeepSeek Harness is a free, MIT-licensed way to run a coding agent from a local web UI, reading and editing files and running commands with DeepSeek, Anthropic, OpenAI, Kimi, GLM or custom compatible models. Caution because DeepSeek's own safety notice calls it unaudited and not secure or production-ready, and a critical flaw, CVE-2026-82533, let a sandboxed agent switch off its own sandbox on unpatched installs. Right for experimenters in a disposable VM; wrong for machines holding credentials or production code.

IA nativa

An agent loop sends model requests and runs tool calls that read and edit workspace files and run commands in a sandbox.

É adequada para ti?

Bom para

  • Running a coding agent from a local browser UI: npx @deepseek-ai/dsh web starts it at http://127.0.0.1:3080, and the agent can read and edit workspace files, run commands, delegate work and keep a plan
  • Choosing your model: besides a DeepSeek API key, built-in provider ids include anthropic, openai, moonshotai for Kimi and zai for GLM, and custom providers can speak openai-completions, openai-responses or anthropic-messages
  • Developers who want to rework the agent itself, since everything is a plugin on the Cordis framework, including model adapters, tools, persistence, sandbox and approval policy
  • Zero software cost under the MIT licence

Não recomendado para

  • Production or sensitive machines: DeepSeek's SAFETY.md says it has not undergone a security audit, must not be treated as secure or production-ready, and recommends a disposable virtual machine, container or dedicated environment
  • Stable integrations, since the README warns of compatibility-breaking changes in the developer preview
  • Agents that read untrusted content on unpatched installs: under CVE-2026-82533, attacker-supplied text the agent read could get it to disable its own sandbox with one shell command, on shipped defaults and with no network exposure
  • Trusting the CVE record's fix version on npm: The Hacker News reports 0.1.2-alpha.1 was fixed on GitHub only and never published to npm, so npm users need 0.1.2-alpha.2 or later

A nossa experiência

We haven't tested DeepSeek Harness ourselves. This profile is based on public documentation, user reviews, and community feedback.

Preços

Código aberto
Open source (MIT)$0
  • MIT licensed harness
  • Requires a DeepSeek API key or another configured model provider
  • Custom OpenAI- or Anthropic-compatible endpoints supported
Ver preços completos

Receitas de fluxo de trabalho

Try it in an isolated environment

Run the developer preview the way DeepSeek's safety notice recommends

  1. Start from a disposable virtual machine, container or dedicated environment with only the files the agent needs
  2. Install Node.js and run npx @deepseek-ai/dsh web
  3. Open http://127.0.0.1:3080 and enter a DeepSeek API key or configure another provider
  4. Choose the workspace directory where you started dsh
  5. Confirm the installed version is 0.1.2-alpha.2 or later before letting the agent read untrusted material

Ainda sem alterações de veredicto

O relógio começa a contar no primeiro dia: as alterações aparecem aqui à medida que o nosso veredicto evolui.

Fontes

Registo de verificação

  • Estado— Sem alterações

    Agente automatizado

  • Perfil— Sem alterações

    Agente automatizado

Como avaliamos

Quer isto a funcionar na sua empresa?

Testámos esta ferramenta e construímos com ferramentas assim todos os dias. Diga-nos o fluxo de trabalho e nós instalamos, integramos e entregamos a funcionar.

Diga-nos o que precisa (abre num novo separador)Veja o que construímos

A conversa funciona com Gnosari, uma das ferramentas deste diretório. Uma conversa real, não um guião de vendas.