Xsdsh-purge-next

⚔️ DeepSeek Harness cybersecurity red-team tool (Xsdsh-purge)

Version 4.0.0

DeepSeek Harness jailbreak: every model, swap prompts per model. Default prompt for 小码酱. Please star ⭐ If you build on this, see Attribution required.

English | 中文

> Renamed in 4.0.0: dsh-purge → Xsdsh-purge. Package name, plugin name, install dirs, module specifiers, HTTP routes (/Xsdsh-purge/), CSS prefixes, localStorage keys, the data dir and the backup suffix all changed. Existing installs migrate themselves: already-injected host markers are rewritten on the next Clean*, legacy .dshpurge.bak backups still restore, $DSH_HOME/dsh-purge moves to $DSH_HOME/Xsdsh-purge on first boot, and the wallpaper / glass settings carry over from the old localStorage keys.

> Updates paused. The author has no steady income for now because of work. Maintenance is on hold: no new releases, issues / PRs are not taken, and new dsh versions are not guaranteed. The repo stays usable; see Sponsor below. When maintenance resumes, this README will say so.

> Official Web and the official desktop app are both supported. Official dsh web uses profile web. The official desktop EXE (DeepSeek Harness 0.2.1-rc.5) uses profile desktop. Install and Apply them separately. This release pins engines.dsh to 0.2.1-rc.5 exactly; other dsh builds (including the 0.2.1-rc.2 web host) need a matching plugin build. Community Desktop is not maintained.

>

> Adding the plugin to a profile does not patch the host. Click Xsdsh-purge beside the session title → Clean → Apply. A successful Apply restarts; an unfinished Apply does not. After the restart, start a new chat — that is when the inject enters the session.

>

> Node.js ≥18. Windows no-flash needs Node ≥22. Hub one-click and the commands below both install the npm package Xsdsh-purge.

Contents

• [Sponsor](#sponsor)
• [What this is](#what-this-is)
• [Attribution required](#attribution-required)
• [Unauthorized commercial use](#unauthorized-commercial-use)
• [Supported hosts](#supported-hosts)
• [Install](#install)
• [Preview](#preview)
• [Usage](#usage)
• [Own servers](#own-servers)
• [How it works](#how-it-works)
• [Restore](#restore)
• [Releases](#releases)

---

☕ Sponsor

If this project helps you, send it over — I'm out here asking~

| Asset | Address |

| --- | --- |

| USDT (TRC20) | TV5ajPkRD8RH623Dx9mqvYZVNN8nPGRKid |

| Solana | 6x16GhRgLVpKFFXaU1seKNdx2rypspSJTL4dbpt6Xpwk |

| Ethereum | 0xB68BD60C0e8c519513B7DF9bB147696815423B3E |

| Bitcoin | bc1qu70yxkrtwnymt8ryluz9x8y8hqzune5340npht |

---

What this is

Xsdsh-purge is a cybersecurity red-team plugin for the official [DeepSeek Harness](https://www.deepseek.com/harness/) already installed on your machine. Official Web (dsh web) and the official desktop EXE are both supported. Install and Apply them separately.

Harness does more than forward a prompt. It rewrites prompts, approval gates, sandbox policy, and session migration at runtime. Asking only “will the model answer” treats a host-layer block as a model refusal. This plugin separates those two layers on your own install, for controlled evaluation and for seeing which default policy is too tight.

| You get | What it does |

|---|---|

| Xsdsh-purge dock | A button beside the session title opens the right dock. Three pages: Clean, Rewrite and Drill |

| Clean | Grouped patch status, Apply / Restore / Uninstall, prompt editor, multiple rule sets |

| Rewrite | Turns a rough request into one precise, actionable prompt. Uses the host's current model — no extra endpoint or API key |

| Drill | Built into the stable release: assets, skills, and the local environment. It assumes you control every target you submit and already hold the authorization — it never asks about ownership, written authorization, or SRC scope |

| Host policy | Default copy, permission policy, and tool limits. Official capabilities stay. No second invented identity |

| On start | Checks and reapplies. After npm overwrites node_modules, you do not hand-edit files |

No hardcoded drive letters. It looks at $DSH_HOME, .dsh next to the dsh launcher, then ~/.dsh. It does not patch the Harness source tree. Apply on the Clean page of Xsdsh-purge is what writes the changes. Identity comes from the encrypted prompt shipped in the plugin, the text the prompt box shows by default. The host prompt file is not read.

It only touches the official @deepseek-ai packages and local config on the user's machine. It is not a public scanner and not an attack kit for third-party sites. The repo does not ship malware, unauthorized-exploit scripts, or payloads aimed at the public internet.

---

Non-profit public project. Commercial sale, paid resale, and profit from illegal or gray-market activity are forbidden. For technical reference only.

Attribution required

If you borrow this project's name, ideas, code, or prompts, you must credit the author and name the source repository: [YuJunZhiXue/Xsdsh-purge](https://github.com/YuJunZhiXue/Xsdsh-purge).

Using them without attribution, hiding the source, or passing them off as your own will be pursued.

---

Unauthorized commercial use

Douyin live account 「老张的ai」 (room name 「老张AI讲堂」) is selling this repository: taking fees in the live room, no attribution, and ignoring the non-profit rule above. The author was in the room. They still charged.

This project is free and non-profit. Selling courses, the plugin, tokens, or reselling it voids the license on the spot. The author reserves the right to pursue it.

Recorded 2026-10-12:

WeChat name 「老张的ai科技」, same handle as the live-room viewer board. Asked if they were this repo's developer, they said they were. The author said they would report it.

---

⚠️ Strict legal and compliance disclaimer

Disclaimer: This is a non-profit open-