Same code: the original has 24 stars, the rebranded one has 700. How a DSH "armor-breaking" workflow plugin took off
What it is A canvas workflow plugin for DeepSeek Harness (the code came from someone else's 24-star project), paired with a 15-step pipeline that automatically tests a target model, then generates and validates jailbreak prompts.
Why it blew up It rode the hottest "armor-breaking" tag in the dsh plugin ecosystem and sold "make your own wording" instead of a word list that stops working. Then the fame of an "infinite series" author and 11-03 three X accounts posting the same text pushed stars from 32 to 275 in a day.
EHow you could follow it Don't follow the jailbreak angle. Take the packaging instead: in a hot platform, swap a generic tool for a concrete scenario name, ship a ready-to-import content pack, and in a legitimate category where finished outputs expire, sell a "auto-generate + validate" pipeline while keeping the original author credited.
- Data (updated daily) · repo created 2026-11-01 · 744 stars
GitHub · stars Data 2026-11-03 → 2026-11-08 (6 days, 6 observations). Points before 10-28 come from deeply / archive backfill, not every day has one
2026 Nov 1, GitHub user Minglink created a repo. The first commit read "fork of dsh-workflow-lite"; half an hour later the second commit was "Remove original author's copyright traces, rebrand to Minglink." Five days later it had 704 stars and 241 forks (GitHub repo page, 11-06), while the original of the code it borrowed had only 24 stars. The difference isn't the code. It's a name, a companion content pack, and a few posts within one day. Below: what it actually sells, where the stars came from, why this path isn't recommended, and the one move worth taking away.
What it actually is
DeepSeek Harness (dsh) is an agent framework DeepSeek open-sourced in August, at about 274k stars by early November, built on "everything is a plugin." This repo is a canvas workflow plugin for dsh: you connect steps on a canvas, it compiles them into a plan prompt, and the model in the current session executes the plan itself, with branching, loops, version management, and export to a Skill. The plugin has no execution engine of its own.
The code is almost identical to xiaoso456/dsh-workflow-lite (created 10-08, 24 stars). The first line of the CHANGELOG still reads "This file records the version updates of @xiaoso/dsh-workflow-lite", and the install command in the README and tweets still installs the npm package published by the original author. In other words, users are actually running someone else's code, and this repo is just a facade.
The genuinely new piece lives in the companion repo Minglink/dsh-workflows: a workflow pack called "armor-breaking production." "Armor-breaking" is what China's communities call jailbreaking LLMs. The pack is a 15-step pipeline that runs a batch of tests against a target model, analyzes how it refuses, generates jailbreak prompts aimed at that model and validates them, and finally outputs a "words + manual + report" bundle. The top of the README also links to an armor-breaking forum with an invite code.
Where the stars came from
| Date | star | fork | Sources |
|---|---|---|---|
| 11-03 | 32 | 23 | GitHub stars per day |
| 11-04 | 275 | 115 | Same as above |
| 11-05 | 575 | 204 | Same as above, +300 in one day |
| 11-06 | 704 | 241 | GitHub repo page |
The inflection point came on Nov 3. That day at 1:19 Beijing time, DSH content account @NFT_Chen on X posted a long text that opened with "🔥Awesome! The DSH armor-breaking nuclear weapon is open source! A 15-step pipeline generates custom armor-breaking words with one click, DeepSeek Harness is taking off!" The middle line said "not an ordinary prompt collection, but a complete automated research pipeline," and it closed with "the infinite-series author has open-sourced the methodology and the pipeline in full." A few hours later @mingzi206 and @linyi64965449 posted nearly word-for-word the same piece. HotRepo logged a jump from 9 to 104 stars in the hour after roughly 119 UTC that morning. The next day, it reached 275.
Three posts with the same text went out on the same day, which looks like coordinated paid promotion or a cross-posting matrix. I haven't verified whether money was spent. The key line in the posts is "infinite-series author": Minglink's earlier dsh-infinite-gen-5 had 3,938 stars, and people on CSDN were asking how to load his second-generation plugin, so he's a familiar name in this circle.
The fork-to-star ratio of 34% stands out; new repos typically sit around 11%. Looking at the accounts that forked early, registration years range from 2013 to 2026, and many are older accounts that bookmark things, not obvious batch throwaway accounts (inference). A more likely explanation is a habit in this circle: after the original dsh-purge repo was deleted, dozens of mirrors appeared, and users learned to "fork first in case it gets deleted."
Why the original has 24 stars and this one has 700
Put the same code in two places and the difference is obvious:
- It attached itself to the hottest keyword. In the dsh plugin ecosystem, "armor-breaking" is one of the largest subcategories. HunYiSage/dsh-purge has 19,078 stars, and gained 6,062 over 7 days; its mirrors, forks, and community-maintained versions number in the dozens, with the largest in the thousands of stars. General-purpose workflow plugins that don't carry this tag top out at around 318 stars.
- It told a new story. Other offerings gave you a ready-made jailbreak word list that stopped working the moment dsh or the model updated. Someone on linux.do said "even the latest dsh purge can't break anymore," and issue #30 in the fifth-generation plugin from the same author was "not enough breaking force." This repo says: we won't give you words, we'll give you a pipeline that makes your own. The posts kept hammering that point.
- Some people recognized the author, and others hyped him on the same day.
The code itself isn't the reason. The original with the same code having 24 stars is the proof.
Who it's competing with
| Project | star(11-06) | What it is |
|---|---|---|
| HunYiSage/dsh-purge | 19,078 | The originator of the category: one-click injection of ready-made jailbreak words |
| kingcharleslzy-ai/dsh-purge | 4,607 | Community-maintained dsh-purge version |
| Minglink/dsh-infinite-gen-5 | 3,938 | The same author's fifth-generation "infinite" plugin |
| mmparko/dsh-purge | 3,164 | Mirror after the original repo was deleted |
| ADWMC/helm-d | 1,068 | Combined jailbreak + security analysis plugin |
| qiao-obs/dsh-jailbreak-workflow | 1 | Created by 11-03, copying this repo under the same name |
The author also rode the wave: 11-05 released dsh-armor-gen5 (46 stars).
Its weak spots
- The code isn't theirs, and the original author's credit was removed. If the original author comes forward to assert rights, this repo could be in trouble at any moment.
- The effectiveness has never been verified. I haven't seen independent tests of whether the pipeline reliably produces working words. Of the 4 issues in the issue tracker, 2 are about version compatibility (#1 "dsh version adaptation problem," #4 "new version 0.22-rc1 not supported," 11-06).
- The topic itself sits on the platform's red line. Jailbreak tools can be taken down by GitHub at any time, and can be patched by dsh and the model vendor at any time.
- Heat is falling. Daily gains dropped from +300 to around +97.
If it were you
One-line verdict: don't follow it. These 700 stars come from a gray-area topic, a well-known author in a niche circle, and borrowed code. You shouldn't copy any of those three, and most people won't get anything out of them either.
Who it suits: nobody should follow it step by step. The only thing worth taking away is the packaging method.
Who it doesn't suit: anyone trying to build fame through jailbreak or armor-breaking tools. A reputation from this kind of project doesn't carry over to a résumé, and deletions, takedowns, and patches can happen at any time. Author fame is the real gate here, and newcomers don't get traffic in.
What's worth learning: inside a hot subcategory of a very large platform, "categorize" a general-purpose tool: keep the same code, rename it for a scenario, and bundle a content pack that runs after download and import. Star counts can differ by 30x. Also, "sell the rod, not the fish": in a category where finished outputs expire (prompts, rule sets, configuration templates), an "auto-generate + auto-validate" pipeline tells a fresher story than a finished product.
How to do it: find a legitimate need where finished outputs go stale quickly, for example a workflow pack for agent platforms like dsh that automatically generates and checks AGENTS.md / rule files against your codebase, or a pipeline that automatically runs evaluations and picks the model and prompt best suited to your task. You can build on the open-source workflow plugin, but keep the original author credited, explain it clearly in the README, and ideally open a PR to the original project or ship it as its official content pack.
How to get users: post on launch day in the platform's community and plugin directories; write one long post that makes clear "it's not a template, it's a pipeline," with a canvas screenshot; get two or three content creators in the platform's ecosystem to repost on the same day.
When to move: before the platform is still growing fast and the plugin ecosystem hasn't settled. Going by this dsh cycle, that's roughly the next one to two months.
What would show you misread it: if this repo is still around a month from now, with steady daily gains of dozens or more, and neither the original author nor the platform has acted, that would mean this circle tolerates more than expected. Even then, anyone following in would be facing a head start that already has a name, so the verdict stays the same.
---
Data and sources: GitHub repo pages, commit history, and issue tracker (Minglink/dsh-jailbreak-workflow, xiaoso456/dsh-workflow-lite, HunYiSage/dsh-purge, etc., 11-06); GitHub daily star counts (11-03 to 11-06); X posts by @NFT_Chen, @mingzi206, @linyi64965449 (11-03); HotRepo (11-03); related linux.do and CSDN posts. Where it says "inference," it is an inference.
Research notes: competitor table, acquisition evidence, full research report
- Competitors
Name Where Launched Scale How it differs from this one HunYiSage/dsh-purge Open source 2026-08-19 19,078 stars, 7 days +6,062 (GitHub repo 11-06) Ready-made armor-breaking words with one-click injection; this offers a pipeline that generates custom armor-breaking words kingcharleslzy-ai/dsh-purge and dozens of dsh-purge mirrors and forks including mmparko, WoYun520, JeffKeeping Open source 2026-10 4,607 / 3,164 / 536 / 546 stars, etc. Maintains a fixed set of armor-breaking words and host patches; it doesn't sell words, it sells the word-making process Minglink/dsh-infinite-gen-5 (same author) Open source 2026-08-15 3,938 stars The jailbreak / armor-breaking plugin itself; this repo extends the same author's "methodology," borrowing his fame xiaoso456/dsh-workflow-lite (original) Open source 2026-10-08 24 stars, npm @xiaoso/dsh-workflow-lite Same code; users install its npm package. The only difference is the armor-breaking positioning and the bundled workflow pack ADWMC/helm-d Open source 2026-08-14 1,068 stars Combined armor-breaking + security analysis plugin, not a workflow / word-making pipeline omdsh-dev/dsh_workflow, xuanyuanzhifeng/dsh-plugin-agent-workflow, and other general workflow plugins Open source 2026-08 154–318 stars General orchestration with no armor-breaking angle and no ready-to-use content pack DeepSeek Harness official workflow pack Big-company features Ships with DSH 0.2.x DSH main repo, 274k stars Official-script-style multi-agent orchestration, not a jailbreak - Where users come from
- Verified X Chinese AI accounts posting templated tweets: @NFT_Chen posted at 2026-11-03 05:19 UTC, @mingzi at 206 08:46 UTC, @linyi at 64965449, all with nearly identical long-form posts: "DSH jailbreak nuke open-sourced, 15-step pipeline…"; after posting, stars jumped from dozens to over a hundred
- Verified Author reputation / prior users: the tweets all say "by the author of the Infinite series"; the same author's dsh-infinite-gen-5 has 3,938 stars; a CSDN Q&A teaches people to jailbreak with dsh-infinite-gen-2 from Minglink
- Verified Threads English repost: @dailyaionly posted "THIS IS A WHOLE JAILBREAK RESEARCH PIPELINE", about 10 likes
- Verified Aggregator SEO: HotRepo indexes Chinese and English pages
- Verified Cross-promotion with own forum: the README links to openorigin.link's jailbreak forum with invite code CESFAVBR
- Inferred Paid promotion / sock-puppet matrix: multiple accounts posted the same copy on the same day, which looks like coordinated distribution, but paid promotion is not confirmed
Why Minglink/dsh-jailbreak-workflow took off
Channel: GitHub. Research day 2026-11-06. Data sources: our GitHub database (repo_profile / repo_day), live GitHub API checks, Jina web search.
Bottom line
It's someone else's general-purpose plugin, republished with a "jailbreak" label and pushed by the author's "Infinite series" reputation and a round of templated X posts. The plugin is xiaoso456/dsh-workflow-lite, a DeepSeek Harness canvas workflow plugin; the original repo had only 24 stars. After the rename, it added a 15-step "jailbreak creation" workflow pack and slotted into the hottest DSH category, jailbreaks. The code itself is not the differentiator. The pitch is: where others hand you a ready-made jailbreak prompt that stops working after a while, this offers a pipeline that builds your own, "teach a man to fish".
What it is
- The repo was created on 2026-11-01 04:50 UTC. The first commit message reads "Initial commit: dsh-jailbreak-workflow (fork of dsh-workflow-lite)", and 05:27 a later commit reads "Remove original author's copyright traces, rebrand to Minglink" (from the GitHub commit history).
- The code comes from xiaoso456/dsh-workflow-lite (created 2026-10-08; our database records 11-06 stars for this repo, 24 stars for the original; npm package @xiaoso/dsh-workflow-lite, author [email protected]). The first line of the CHANGELOG still reads "This file records version updates of
@xiaoso/dsh-workflow-lite". The README's install command still installs the original author's npm package@xiaoso/dsh-workflow-lite. So users are actually running code published by the original author, and this repo mainly serves as a storefront and entry point for the workflow pack. - Features: arrange steps on a canvas → compile into a plan prompt → hand it to the current session's model to execute. The plugin has no execution engine; it supports branching, loops, version management, and export as a Skill.
- The companion repo Minglink/dsh-workflows (created the same day; our database records 220 stars) contains the workflow pack "破甲制作.wflite.zip". It's a 15-step "LLM jailbreak research pipeline": 200+ probe tests → refusal-pattern analysis → custom jailbreak-prompt generation → API verification → three outputs (prompt file, usage manual, research report), with a built-in jailbreak-research Skill (10 test scripts, 4 template sets). 11-05 A community member later submitted a second pack, pojia-fullflow (a full reverse-engineering flow that depends on an unpublished local plugin).
- 11-03 and 11-04 have two "Apply community optimization" commits, both marked "Merged from the community-maintained copy", containing canvas performance optimizations with test data.
- The top of the README links to the "jailbreak technical exchange forum openorigin.link, invite code CESFAVBR". O-site (openorigin) is a forum on AI security / reverse engineering / jailbreaking. The repo is one of the entry points feeding traffic to that forum.
Growth data
Our GitHub database's repo_day records are as follows:
| Date | stars | fork |
|---|---|---|
| 11-03 | 32 | 23 |
| 11-04 | 275 | 115 |
| 11-05 | 575 | 204 |
| 11-06 | 672 | 235 |
- Largest single-day gain +300 (11-05). 11-06 A live GitHub API check shows 702 stars and 240 forks.
- Forks/stars are about 34%, which is very high. I spot-checked the 14 accounts among the first 100 forks: account creation dates range from 2013 to 2026 years ago, and many have dozens to hundreds of public repos (looks like people who collect forks). No sign of batch-created new accounts. Our suspect list for this repo is empty. The stargazer list API returned 404, so the stars could not be verified.
- HotRepo records: about 11-03 09:48 UTC, stars rose from 104 to 119 within about an hour (https://hotrepo.ai/Minglink/dsh-jailbreak-workflow).
- The inflection point lines up with the X posts: after the two tweets at 11-03 05:19 and 08:46 UTC went out, stars jumped from dozens to over a hundred, and reached 275 the next day.
Competitors (DSH jailbreak category, our GitHub database 11-06)
DeepSeek Harness (deepseek-ai/deepseek-harness, created 2026-08-13, 274k stars) is one of the largest agent hosts of the 2026 years, built on "everything is a plugin". In its plugin ecosystem, "jailbreak" is a huge subcategory:
| Project | Stars (11-06) | Repo created | What it is |
|---|---|---|---|
| HunYiSage/dsh-purge | 19,078 (7 days +6,062) | 08-19 | The original jailbreak-plugin line, one-click injection of jailbreak prompts |
| kingcharleslzy-ai/dsh-purge | 4,607 | 10-16 | Community-maintained dsh-purge version |
| Minglink/dsh-infinite-gen-5 | 3,938 | 08-15 | The same author's "Infinite Five-Gen" reverse-engineering / jailbreak plugin |
| mmparko/dsh-purge | 3,164 | 10-13 | dsh-purge mirror (original repo YuJunZhiXue deleted) |
| ADWMC/helm-d | 1,068 | 08-14 | All-in-one jailbreak security analysis plugin |
| JeffKeeping/dsh-purge-plus, WoYun520, ZiPengWei, evilevil, ZXEB, and others | Dozens to hundreds | October | Many dsh-purge forks / mirrors / adapted versions |
| c3cvld7aag/fujiang-dsh, daha1216/dsh-adult-tension, Rain-kl/dsh-preset-plus, xqpsec/dsh-jailbreak, etc. | 59–496 | 08–October | Assorted jailbreak prompts / presets / request-rewriting plugins |
| xiaoso456/dsh-workflow-lite (original) | 24 | 10-08 | Identical canvas workflow plugins with no jailbreak packaging |
| omdsh-dev/dsh_workflow, xuanyuanzhifeng/dsh-plugin-agent-workflow, GZX2211/dsh-Visual-Workflow | 64–318 | August | General DSH workflow / orchestration plugins |
| Official DSH workflow package (deepseek-harness/packages/workflow) | Big-company features | — | Official workflow / Ralph tooling |
What we can see:
- Demand for jailbreaks is enormous, and several repos already have tens of thousands or thousands of stars. After the original dsh-purge author deleted the repo, dozens of mirrors and forks appeared, showing strong demand and chaotic supply: users chase whichever jailbreak still works.
- Jailbreak prompts stop working: DSH updates inject weakening text, and models get patched too. A linux.do post says "even the latest dsh purge can't break anything anymore", and issue #30 on the same author's dsh-infinite-gen-5 is "jailbreak not strong enough". The user pain point is that ready-made prompts go stale within days.
- The same workflow plugin without the jailbreak label, the original, has only 24 stars; general workflow plugins top out at 318 stars. So these 700 stars are not for a workflow plugin; they are for the word "jailbreak" and the pipeline packaged with it.
Growth tactics (evidence)
- Templated tweets from Chinese X AI accounts (confirmed): 11-03 at least three accounts posted nearly word-for-word identical long posts, all titled "DSH jailbreak nuke open-sourced, 15-step pipeline generates custom jailbreak prompts in one click, DeepSeek Harness takes off":
- @NFT_Chen (SuSu_酥酥) at 2026-11-03 05:19 UTC, x.com/NFT_Chen/status/2117486881399284175. This account keeps posting roundups like "DSH 6 plugins" and is a content account in the DSH ecosystem.
- @mingzi206 2026-11-03 08:46 UTC,x.com/mingzi206/status/2117538957432861004
- @linyi64965449, x.com/linyi64965449/status/2117733781058834549: multiple accounts posted the same copy on the same day, which looks like coordinated distribution or a cross-promotion matrix (not verified as paid). Someone also tagged @grok under it to summarize the install steps (https://x.com/grok/status/2117667079167861069).
- The author's existing reputation (confirmed): the tweets all say "the Infinite series author fully open-sourced the methodology and pipeline". The author's earlier dsh-infinite-gen-5 has 3,938 stars; CSDN also has a Q&A teaching people to load "dsh-infinite-gen-2 developed by Minglink" for jailbreaks (https://wenku.csdn.net/answer/5d3tfu18wr67). The author has 107 followers on GitHub and is a familiar face in the DSH jailbreak scene.
- English-account repost (confirmed, small reach): on Threads, @dailyaionly posted "THIS IS A WHOLE JAILBREAK RESEARCH PIPELINE", about 10 likes.
- Aggregators / SEO (confirmed, small effect): HotRepo indexes Chinese and English pages.
- Forum loop (existence confirmed, traffic effect not verified): the README links to the O-site invite code; the O-site has many "looking for DSH jailbreak" posts (e.g., openorigin.link/msg?id=114). The repo and the forum feed each other.
- The linux.do "jailbreak" tag has a lot of DSH jailbreak discussion, but no post specifically promoting this repo was found. Our x-radar local corpus did not surface these tweets (it doesn't cover these accounts).
Why it took off
- Riding the hottest category: DSH is a 270k-star platform, and jailbreaks are one of its largest plugin subcategories. dsh-purge alone gained 7 stars in 6,000 days. Adding "jailbreak" to the name brings traffic on its own.
- Telling a new story: where others sell a prompt that stops working, this sells a pipeline that probes any target model, analyzes refusals, and generates and verifies custom prompts. That addresses the "jailbreak prompts always go stale" pain point head-on, and the tweets repeatedly stress "not a generic prompt collection".
- Author reputation + multiple accounts posting on the same day: the "Infinite series author" identity, plus 11-03 three same-copy tweets, pushed stars from dozens into the hundreds.
- Forks came from people wanting the workflow pack and code to modify: forks/stars are 34%, far above the 11% typical for new repos. A "community-maintained" version also appeared and was merged back into the main repo. This fits the jailbreak scene's habit of forking before a repo gets deleted (the flood of mirrors after dsh-purge was deleted is the precedent).
Differentiation
- No code-level differentiation: the plugin is xiaoso456's dsh-workflow-lite, and the install command was never changed.
- Content-level differentiation: ① repositioning from "general canvas workflow" to "jailbreak-prompt creation workflow"; ② a bundled research pipeline that imports and produces three outputs; ③ selling the method instead of a finished prompt. These three points are why it took off. The evidence is that the original version of the same code has only 24 stars.
- This differentiation is easy to copy and fragile. Copying: swap the workflow pack and the name (qiao-obs/dsh-jailbreak-workflow already exists with 11-03 stars, currently 1 stars). Fragility: ① the borrowed code had the original author's credit removed, so the original author could come forward to object; ② no independent verification that the pipeline reliably produces effective jailbreak prompts. Issues already include feedback that "the new 0.22-rc1 version doesn't work" (#4,11-06).
Visibility
Within niche circles: the DSH Chinese jailbreak scene, several Chinese X accounts, and the O-site. No mainstream media coverage and no major English accounts.
Copycats
- qiao-obs/dsh-jailbreak-workflow (created 2026-11-03, description "DSH Workflow Lite plugin, dsh workflow plugin", 1 stars), a same-name copy.
- The author themselves jumped on the momentum and released dsh-armor-gen5 "Infinite Gen-5 Armor-Break One-Click Plugin" (46 stars) at 11-05.
- Looking at it the other way around, this repo is just a renamed copy of xiaoso456/dsh-workflow-lite.
What others can borrow
- In a hot subcategory of a giant platform, "categorize" a general tool: same code under a new scenario name, plus a ready-to-use content pack (workflows / templates). Stars can end up 30x higher.
- Sell "how to build the fishing rod" instead of "fish": in categories where finished outputs expire (armor-piercing words, prompts, rule sets), an "auto-generate + verify pipeline" is a positioning with a fresh story.
- Cold-start playbook: the author has a name in the community, several X accounts posted the same long post on the same day, and the repo funneled traffic to their forum. Stars, forks and forum signups formed one chain.
Uncertain
- Whether those X posts were paid promotion or a sock-puppet network is unverified. Post engagement numbers were not obtained.
- The stargazer detail API returned 404, so whether the stars are real can only be judged indirectly from the fork accounts, which look like real people.
- Whether the workflow can reliably produce valid armor-piercing words was not tested.
- Whether original author xiaoso456 objected to the removal of attribution was not found.
- Compliance risk on the topic is high (GitHub policy, official DSH patches), and how long the heat lasts is uncertain. 11-06 single-day +97, already down from the peak.