dsh-cloud-disk

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

# `@aicloud360/dsh-cloud-disk-bundle`

English | [中文](README.zh.md)

This optional Profile Bundle installs the Host-side CloudDisk service, direct 360 API Provider, CloudDisk workspace, and a local stdio CloudDisk MCP bridge. Desktop Plugin Center and `dsh plugin` install the same Bundle. It declares a version-pinned Plugin Center icon, so its published identity does not depend on a publisher avatar. The bridge registers the selected CloudDisk tools at the Host level, so built-in and user Presets can call them directly. The Provider resolves the user `CLOUD_DISK_API_KEY` through `dsh-credentials`; the MCP child receives it only as `API_KEY` at startup. Missing or deleted credentials leave its tools unavailable, while a set or replacement starts a new child. `toolCallTimeoutMs` in [`cordis.patch.yml`](cordis.patch.yml) bounds each MCP call.

[`cordis.patch.yml`](cordis.patch.yml) contains the application signing material as a literal deployment value. Anyone able to read the Bundle can read it. The same file includes the endpoint, client identifiers, timeout, and retry count. On first visit, each user is prompted to save their API Key through the Host credential store; the UI reads only configured state, never credential values.

The browser supports directory navigation with a clickable path, refresh, and incremental loading when the remote API supplies a continuation cursor. The Bundle does not invent additional pages when a directory fits in one remote response. It distinguishes incomplete Host configuration, missing API Key, rejected authentication, network failures, and remote service failures without exposing user API Keys or remote response bodies.

## Known Limitations and Deferred Work

- The Bundle exposes only the ten operations documented by the CloudDisk Skill. Create, move, rename, save, share, and upload ask for Harness approval; delete and other MCP operations are not registered.
- The Provider requires a user API Key through the Host credential store. Signing-material rotation requires editing and redeploying the Bundle configuration.