
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
dsh-plugin-doc-reader
Advanced tools
DeepSeek Harness host plugin: a read_document tool for text, PDF, DOCX and XLSX files over the harness filesystem backend (ctx.fs).
dsh-plugin-doc-readerA DeepSeek Harness host plugin: the model-facing read_document tool. It reads document files that the plain read tool cannot handle — PDF, DOCX and XLSX — plus UTF-8 text files, all through the harness filesystem backend (ctx.fs), so it inherits the session workspace resolution, the sandbox policy and the fs-observation policy exactly like the built-in tools.
One tool, four formats, dispatched by file extension (or an explicit format argument):
| Format | Extensions | Extractor |
|---|---|---|
text | anything else (.md .txt .csv .json .py …) | UTF-8 decode, binary rejected (NUL sniff), BOM stripped |
pdf | .pdf | pdf-parse (extracts the text layer only; see limitations) |
docx | .docx | mammoth.extractRawText |
xlsx | .xlsx .xlsm | xlsx → per-sheet TSV rows |
Extracted text is windowed with the same semantics as the built-in read tool: 1-based line numbers, offset/limit paging, line-length and byte caps, and the OpenCode-style <path>/<type>/<content> envelope.
| Key | Default | Meaning |
|---|---|---|
readLimit | 2000 | Default and maximum lines returned by one call. |
maxFileBytes | 67108864 | Byte cap for one document read. |
sheetRowLimit | 200 | Rows kept per worksheet (longer sheets get a ... (N more rows) footer). |
dsh plugin --profile web add dsh-plugin-doc-reader
# restart dsh web
npm install --legacy-peer-deps # pdf-parse / mammoth / xlsx
node --test # pure-parse + mock-ctx contract tests
One guidance section (tool:read-document) points the model at read_document for PDF/DOCX/XLSX and notes offset/limit paging.
read_document(file_path, format?, offset?, limit?) with a structured { path, format, offset, lines, totalLines } output schema and the line-numbered envelope rendering.
.doc is not parsed — only OOXML .docx.FAQs
DeepSeek Harness host plugin: a read_document tool for text, PDF, DOCX and XLSX files over the harness filesystem backend (ctx.fs).
The npm package dsh-plugin-doc-reader receives a total of 24 weekly downloads. As such, dsh-plugin-doc-reader popularity was classified as not popular.
We found that dsh-plugin-doc-reader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.