Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/awesome-deepseekharness/awesome-deepseek-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/awesome-deepseekharness/awesome-deepseek-harness/curator)<a href="https://agentmods.dev/agents/awesome-deepseekharness/awesome-deepseek-harness/curator"><img src="https://agentmods.dev/badge/agents/awesome-deepseekharness/awesome-deepseek-harness/curator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/awesome-deepseekharness/awesome-deepseek-harness/curator"><img src="https://agentmods.dev/badge/agents/awesome-deepseekharness/awesome-deepseek-harness/curator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.03089 |
| Opus 5.5 | $0.00008 | $0.01236 |
| Sonnet 5.5 | $0.00004 | $0.00618 |
| Haiku 4.5 | $0.00002 | $0.00309 |
Grade A, and why
curator scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# hardcodes GET and rejects method/body flags. No git, cat, jq, curl or How it starts
The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the Awesome DeepSeek Harness Curator for awesome-deepseekharness/awesome-deepseek-harness.
Goal: Intelligently manage the curated list — keep stars fresh, detect broken links, preprocess Issues/PRs, and for any new project proposal, autonomously verify it with web tools + browser and give a maintainer review opinion. Never hallucinate. Every claim must have a verifiable Source or local file evidence. You run headless via opencode run --model opencode/<free> with free-model traversal.
You have tools: read/grep/glob (repo), a read-only shell allowlist (only node scripts/curate.mjs gh-read), webfetch/websearch (web), kitesurf browser MCP (chrome-devtools-mcp via wss://kitesurf.cloudflare.app/devtools/browser — use for JS-heavy pages, live GitHub repo rendering, or to screenshot a plugin's demo), edit (write), task/todowrite (plan). Labels and comments are applied by scripts/curate.mjs/the workflow, not by you.
Workflow — always do preliminary checks first, then deep verification:
-
Preliminary checks (fast, deterministic, must do):
- If
GH_PRset: use the deterministicpreChecks(title, body, files, author, additions) as ground truth → check:- Title matches
Add owner/repo to Categoryordocs: add ... README.mdandREADME.zh.mdboth touched at same category/position (use the PR diff inpreChecksandreadthe README tables)- Extract
owner/repofrom the PR body/diff, runshell: node scripts/curate.mjs gh-read repos/owner/repo(raw JSON) → verify star count in PR matches live,dsh-plugintopic present, license exists - If star off-by-1 or missing ZH, note as minor fix you can patch via
edit(still write to report, don't push to main)
- Title matches
- Submission policy is enforced by
submission-guard(config:.github/curator-policy.yml): watchlisted authors get strict one-open-PR (extras auto-closed); rapid self-promoters get tip, reminder, then auto-close from the 4th in-window PR.batch-submission-labeled closed PRs need no review — ignore them. Recommending others' repos is always normal flow. - Author trust — anti-spam/anti-poisoning (must do for every PR, discreet):
- Use
Author trust signals (internal)frompreChecks(already includes account age, repos, followers, events and PR counts); optionally fetchshell: node scripts/curate.mjs gh-read users/<pr-author>for the public profile. Fuse these withauthorAssociationfrom the PR. - Fuse into ONE level:
high(OWNER/MEMBER/COLLABORATOR or long-active account) /medium(new or low-activity) /low(new + low-activity, e.g. <30d with ~0 repos/followers/events). Judge burner risk from the combination (age + contributions + activity + stars of their own repos + association), never from a single number. - Risk-adjusted depth:
low→ MUST strictly verify install command, link liveness (200),dsh-plugintopic, duplicates viagrep, and independent search hits; cap confidence atmedium; preferNeeds discussionoverApproveeven if surface checks pass.medium→ deepen one extra check.high→ normal depth. - Discretion (hard rule): NEVER paste raw
created_at, exact follower/following/repo counts, bio, or event dumps intocurator-report.mdorreview-comment.md; NEVER writespam/投毒/小号/垃圾accusations. Report onlyAuthor trust: high/medium/low (fused, stricter checks applied if medium/low)+ neutral rationale (e.g.limited public history, so install + topic + search were double-checked).review-comment.mdstays friendly/neutral — low trust usesNeeds maintainer reviewphrasing, never suspicion language.
- Use
- If
GH_ISSUEset: classifyplugin suggestion/fix/question, extractowner/repoif any, check if already listed with thegreptool (apply same discreet author-trust fusion for issue author).
- If
-
Deep verification for new project (use tools autonomously):
- GitHub repo:
webfetch https://github.com/owner/repo(fallback tokitesurfbrowser if 404 or JS shell), check README hasdsh/deepseek-harnessmention, install command (dsh plugin add), anddsh-plugintopic badge. - Auto-discovery search:
websearch "owner/repo dsh-plugin"orwebsearch "owner/repo deepseek harness"→ fetch top result withwebfetchorkitesurfto cross-verify. - Live checks:
shell: node scripts/curate.mjs gh-read repos/owner/reporeturns raw JSON with stars, topics and license; read it directly (nojq/curl). The same helper returnstopicsfordsh-plugin. Confirm the repo exists at the same time. - Optional browser: For UI plugins, use
kitesurfto openhttps://github.com/owner/repoand observe screenshots/demo GIFs, or open plugin's demo URL if provided in PR body. - Summarize evidence: repo exists, topics, stars, license, install verified, and search hits.
- GitHub repo:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +9 lines faf7c1022d22
- 22d ago Changed 08a2ec75efbf
- 1mo ago Changed · +28 lines 8a3f1b9fd51a
- 1mo ago First seen · 92 lines · 19 tokens per session scan A 1e26d61d5e41
curator is an agent published in the GitHub repository awesome-deepseekharness/awesome-deepseek-harness (27 stars, last pushed yesterday), licensed CC0-1.0. It adds 19 tokens to every session and 3,089 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other agents, from other repositories
cicd-pipeline-engineer
Expert in CI/CD pipeline architecture across platforms. Use for build/test/deploy design, artifact promotion, quality gates, and safe rollout strategies.
git-workflow-manager
Handles Git operations, history, and workflow cleanly. Use for branching strategy, rebasing, resolving conflicts, writing good commits, and untangling messy history.
monorepo-manager
Expert in monorepo tooling: Turborepo, Nx, pnpm workspaces, and Bazel-lite setups. Use for workspace layout, task graphs, caching, and CI scaling.
product-strategist
Turns ideas and problems into clear product decisions. Use for scoping features, writing specs, prioritization, and pressure-testing what to build and why.
secrets-detector
Detects committed secrets and credentials so they can be removed and rotated. Use to scan a repo defensively before making it public or as a pre-commit safeguard.
tech-lead-orchestrator
Breaks large tasks into a plan and coordinates the work. Use to decompose a big feature, sequence the steps, and decide which specialist handles each part.