Preface¶

The core philosophy of DeepSeek Harness (DSH) is “everything is a plugin” — model integration, memory, interface skins, and workflow orchestration are mostly mounted as plugins. As long as a GitHub repository is tagged with the dsh-plugin topic, it will be indexed in the ecosystem. The problem arises when the number of repositories grows large: using the command line to add plugins one by one with dsh plugin add is not only tedious but also strains the eyes and hands. Moreover, the installation methods in READMEs are inconsistent, and version updates are easily overlooked.

Today, we introduce DSH-Plugins-Marketplace (npm package name dsh-plugin-marketplace), maintained by community developer bradeGithub. It provides a visual plugin marketplace directly within the DSH Web GUI settings page: browse, search, and install or update all GitHub repositories tagged with dsh-plugin with a single click, all without leaving the browser. As of August 2026, this repository has approximately 140 stars and 6 forks on GitHub, uses the MIT license, and is categorized as a network tool in the SkillHub plugin library.

A note in advance: SkillHub (https://www.skillhub.cn/plugins) is a DSH plugin community directory aimed at Chinese users and has no official affiliation with DeepSeek or幻方; this plugin marketplace is also a third-party community tool and is not an official DeepSeek application store.

What Is This¶

In one sentence: A visual plugin marketplace that brings the GitHub topic:dsh-plugin ecosystem into the DSH Web settings page.

It addresses three core pain points:

1. Discovery difficulty: Community plugins are scattered across GitHub with no unified entry point;
2. Installation complexity: Different plugins have varying installation scripts, environment variables, and registration methods;
3. Slow updates: Manually comparing versions and reinstalling profiles can easily lead to omissions.

After installing this plugin, open the DSH Web GUI → Settings → DSH Plugin Marketplace to view a card-style plugin list. It supports searching, category filtering, one-click installation, and version detection and updates.

Core Features and Highlights¶

Based on cross-referencing the GitHub README and SkillHub directory page, the main capabilities are as follows.

1. Full-Index, Instant List Loading¶

The marketplace uses GitHub Actions to incrementally scan topic:dsh-plugin every 2 hours, generating a static index registry.json distributed via jsDelivr CDN. End-users experience zero GitHub API calls when loading the list, ensuring quick access even with thousands of plugins. The GitHub search API (with a 10-minute cache) is only used as a fallback when the index is unavailable.

The README claims the current index covers 9,500+ DSH plugins. There is also a separate “Universal Skills” section that includes 20,000+ repositories with the agent-skills and claude-skills topics.

2. Smart Identification of Four Plugin Types¶

The installation pipeline automatically detects the repository type and executes corresponding steps:

• Cordis plugins (containing package.json) → Install dependencies and register to the web profile;
• Skills (containing SKILL.md) → Install to ~/.dsh/skills/;
• Agent presets (containing preset.yml + agent.cordis.yml) → Install to ~/.dsh/.agent-presets/;
• Installation scripts (install.sh / install.ps1) → Execute the script to complete deployment.

3. Version Detection and One-Click Updates¶

For installed Cordis plugins, the marketplace compares the local version with the latest version in the repository. When versions differ, the button changes to “Update,” allowing one-click upgrade. Installed plugins are displayed at the top, and others are sorted by star count.

4. Security Guardrails¶

• A confirmation popup appears before executing third-party installation scripts;
• When environment variables like API_KEY or TOKEN are required, installation pauses and prompts for input on the page to avoid blind installation;
• Installation endpoints require the X-DSH-Marketplace header and a host whitelist to reduce cross-site forgery risks.

5. Categories and Community Badges¶

During the build phase, plugins are automatically categorized into 12 types (e.g., Visual Multimodal, Document & Office, Memory & Knowledge, Development & Coding) based on descriptions and tags. The front-end provides category chips for filtering. Repositories aggregated by the awesome-dsh-plugin page display a “Community Recommended” badge (which does not imply official endorsement).

6. Bilingual Support¶

The interface and installation logs automatically switch between Chinese and English based on the DSH language setting (Settings → General → Language).

Installation and Activation¶

Method 1 (Recommended): Official dsh CLI

Requires dsh CLI and pnpm to be installed (usually already available for dsh web users):

dsh plugin --profile web install bradeGithub/DSH-Plugins-Marketplace

Uninstallation and updates are also done via the official command:

dsh plugin --profile web remove bradeGithub/DSH-Plugins-Marketplace
dsh plugin --profile web install bradeGithub/DSH-Plugins-Marketplace   # Reinstall to update

Method 2: Installation Script (for environments without dsh CLI)

The installation script downloads and executes code from the repository, operating on a “trust and execute” model. It is recommended to download the script, review it visually, and then run it. The official CLI method uses Harness itself to handle the installation, which is relatively more secure.

After installation, restart DSH (by rerunning dsh web) and refresh the page for the marketplace entry to appear.

Typical Usage¶

1. After restarting DSH, open the Web GUI and go to Settings → DSH Plugin Marketplace;
2. The page automatically loads all plugins (installed ones are pinned to the top, others sorted by stars), and you can click “Refresh” to force a reload;
3. Use the search box to filter by name, or use category chips to filter sections;
4. Click the button on the card:
   - Install → Starts installation, with real-time log scrolling;
   - When materials like API Key are required → A popup appears for input; fill it in and click “Submit Materials and Continue Installation”;
   - Update → Covers and upgrades when a new version is detected;
   - Installed (gray) → No action needed;
5. Switch to the Universal Skills tab to browse 20,000+ skill repositories, with support for searching, bottom pagination, and one-click installation.

The installation process roughly follows five steps: Clone repository → Identify type → Scan environment variables → Execute installation (requires confirmation for script-based plugins) → Write to ~/.dsh/marketplace/installed.json installation list.

Use Cases and Considerations¶

Who It’s For:

• Users who regularly use DSH via dsh web and prefer a graphical interface to manage community plugins;
• Those who want to quickly try new dsh-plugin repositories on GitHub without checking each README;
• Advanced users who need to manage Cordis plugins, Skills, and Agent presets simultaneously.

Important Notes:

1. Permission Model: Plugins run with the current dsh process permissions. Installation means executing third-party code on your machine (including npm dependencies and installation scripts). Read the repository source code, README, and license before installing.
2. No Official Endorsement: Plugins in the marketplace come from third-party GitHub repositories; the marketplace itself does not guarantee quality or security. Inclusion in the index does not constitute a recommendation.
3. Network Exposure: Installation endpoints rely on local network isolation and CSRF protection. Do not expose the DSH web port to untrusted public networks.
4. Restart Required: The web profile disables configuration hot-reloading. Restart DSH after modifying plugins or registration entries.
5. Version Detection Limitations: Only applies to Cordis plugins containing package.json. Skills, presets, and script-based plugins do not have a version concept.

Conclusion¶

If you are already using DeepSeek Harness but are still struggling with “which plugins are available in the community, how to install them, and whether to update,” DSH-Plugins-Marketplace is worth installing first: it consolidates the scattered dsh-plugin ecosystem on GitHub into the settings page, streamlining discovery and installation with cards, search, and one-click buttons.

• SkillHub Directory Page: https://www.skillhub.cn/plugins/bradeGithub/DSH-Plugins-Marketplace
• GitHub Repository: https://github.com/bradeGithub/DSH-Plugins-Marketplace