# dsh-superagent (DeepSeek) (slim)

> dsh-superagent is DeepSeek's MIT-licensed research prototype of a proactive coding agent for one GitHub repository, run as a DeepSeek Harness bundle. A main Session admits requests from allowed people and parallel Executor Sessions work them into pull requests.

- Full: https://www.anchorterminal.com/tools/deepseek-superagent.md (~8,800 tokens) · this version ~1,680 tokens · JSON https://www.anchorterminal.com/tools/deepseek-superagent.json · canonical https://www.anchorterminal.com/tools/deepseek-superagent
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01 · pricing https://www.anchorterminal.com/tools/deepseek-superagent#pricing · reviews https://www.anchorterminal.com/tools/deepseek-superagent#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**E · 42.1/100 · rank #1108 of 1251 · #41 in Agent harnesses · not agent-ready · confidence medium**


Assessment: The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.

## Facts

- Kind: Agent harness · vendor: DeepSeek · category: Agent harnesses · legal entity: DeepSeek (the LICENSE names the DeepSeek Harness Team; DeepSeek Harness's terms name Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) · provenance 52/100
- Auth: Token · pricing: Free · x402: no · licence: MIT
- Probe metrics: not measured yet (probes haven't run)
- Roles: One main Session (`dsh-superagent-router` preset) evaluates Triggers and routes them. Each accepted Ticket gets an Executor Session (`worker-<ticket id>`, `dsh-superagent-worker` preset) and its own directory, prepared by a team command such as `git worktree`
- Sources: GitHub (mentions of the agent account in Issues, pull requests and comments, with optional receive-all switches for new Issues, pull requests, comments and default-branch CI) and Feishu (optional, bot mentions and direct messages). github.com only; GitHub Enterprise Server isn't supported
- Authorization: Allowed lists per Source, an admission table, a bot list, rules for proactive work and an accept mode (`off`, `observe` by default, `auto`). Every Ticket records a Mandate under the Policy version that accepted it, revalidated before resuming
- Permissions: Both presets run `danger-full-access` as the operator's OS user. Command shims in `<stateDir>/worker-bin` route `gh` and `lark-cli` to the agent's accounts and block listed commands, which docs/003 calls defaults, not a security boundary
- Interfaces: Mentions on GitHub or Feishu, a web panel on 127.0.0.1 (port 3082 in the example), and a Management API under `/orchestrator/api/` that needs the `x-orchestrator-request: 1` header and a loopback Host
- Requirements: Node.js 22.19+ or 24+, pnpm, git 2.32+, Python 3.8+, tmux, GitHub CLI 2.48+, `@deepseek-ai/dsh@0.2.1-rc.3` (within `engines.dsh` ^0.2.1-alpha.2), a model provider for DSH, and a dedicated GitHub user account with write access
- Graded version: package.json 0.1.0 on the `main` branch, read on 1 November 2026. Not published to npm. No tag, release or changelog found
- Related listing: Runs on DeepSeek Harness (deepseek-harness), whose session-log upload, telemetry and CVE record apply to the runtime it runs on

- Scores: Reliability 15, Performance pending, Schema & documentation 61, Agent ergonomics 67, Security & auth 33, Payments & pricing 40, Task success pending, Maintenance & community 34, Transparency & trust 52 · total over the 7 assessed categories
- Why: Reliability, Local-package reading, since it runs as a DSH bundle on the operator's machine. · Schema & documentation, Framework reading, as for deepseek-harness. · Agent ergonomics, Harness reading, scored on what a team or pipeline driving it has to supply. · Security & auth, Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-inject… · Payments & pricing, Self-hosted rule, as for the other open-source harnesses. · Maintenance & community, Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). · Transparency & trust, MIT, Copyright (c) 2026 DeepSeek Harness Team (30).
- Sources: 25, open questions: 6, both in the full twin
- Capabilities: agent.harness, agent.multi-agent
- JSON: https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/deepseek-superagent.svg` or a link to https://www.anchorterminal.com/tools/deepseek-superagent from the front page of github.com/deepseek-ai or of one of its repositories, or the README at the root of github.com/deepseek-ai/dsh-superagent-prototype, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: harness-service@deepseek.com; https://github.com/deepseek-ai/dsh-superagent-prototype; more in the full twin

## Before you call it

1. Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory
2. Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code
3. Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right
4. Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request
5. Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409

## Connect

```bash
npm install -g @deepseek-ai/dsh@0.2.1-rc.3 && git clone https://github.com/deepseek-ai/dsh-superagent-prototype dsh-superagent && cd dsh-superagent && pnpm install && pnpm build && dsh superagent --from-default-profile web --dump-config > /dev/null && dsh plugin --profile superagent add "link:$PWD"
```

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| goose | BB | 74.3 | agent.harness, agent.multi-agent | https://www.anchorterminal.com/tools/goose.min.md |
| Kilo Code CLI | BB | 73 | agent.harness, agent.multi-agent | https://www.anchorterminal.com/tools/kilo-code-cli.min.md |
| Qwen Code | BB | 72.6 | agent.harness, agent.multi-agent | https://www.anchorterminal.com/tools/qwen-code.min.md |
| OpenHands | BB | 71 | agent.harness, agent.multi-agent | https://www.anchorterminal.com/tools/openhands.min.md |
| OpenCode | B | 68.8 | agent.harness, agent.multi-agent | https://www.anchorterminal.com/tools/opencode.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)