Introduction

The DeepSeek Harness plugin ecosystem is expanding, but finding plugins still requires searching GitHub, confirming compatibility, and manually copying installation commands. DSH Plugin Store is a native plugin directory for DeepSeek Harness maintained by SandbaseAI. It integrates DSH Plugin Leaderboard directory data into DSH Web’s Settings and provides a retrieval tool for agents. It connects to a standalone directory site, not the official app store.

What Is It

The positioning of DSH Plugin Store is A native plugin marketplace for DeepSeek Harness. The problem it solves is discovering, filtering, installing, and managing community plugins without leaving DeepSeek Harness.

The current public materials provide a preview release: v0.1.0-preview.5, targeting the public DeepSeek Harness 0.1.0-rc.8 Web profile. The license is MIT.

Core Features

The following capabilities come from the repository README and package description:

  • Browse over 4,000 plugin packages, covering 3,400 community repositories.
  • Search by name, repository, description, or category.
  • Filter using the Leaderboard’s tag taxonomy.
  • Sort by Leaderboard rank, GitHub stars, or weekly growth.
  • Install directory entries into the local DSH Web profile.
  • View the list of plugins already loaded by Cordis.
  • Provide three agent tools: store_search, store_catalog, and store_install.

The native Store UI includes two tabs: Community and Installed. It supports tag filtering, pagination, same-origin catalog proxy, local profile installation, Cordis Loader inventory, and a responsive light/dark UI.

Installation and Enablement

First, download the preview tarball, then add it to the Web profile:

curl -fL https://github.com/sandbaseai/dsh-plugin-store/releases/download/v0.1.0-preview.5/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz -o /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz
dsh plugin --profile web add -w /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz

After installation is complete, restart DSH Web, open Settings, and select Store.

If verifying or building at the source code level, you can use the following development installation paths:

cd /path/to/deepseek-harness
git clone https://github.com/sandbaseai/dsh-plugin-store.git packages/plugins/dsh-store
pnpm install
pnpm --filter @sandbaseai/dsh-plugin-store typecheck
pnpm --filter @sandbaseai/dsh-plugin-store bundle

After building, you need to enable this bundle in the Web profile and specify the catalog address:

- insert:
    - id: sandbase-plugin-store
      name: '@sandbaseai/dsh-plugin-store'
      config:
        enabled: true
        catalogUrl: https://dshpluginleaderboard.com/api/catalog
        timeoutMs: 30000

Typical Usage

The following describes the usage of the three types of agent tools mentioned in the README:

  1. store_search: Search by name, description, and category.
  2. store_catalog: Browse catalog entries and sort by dimensions provided by the catalog.
  3. store_install: Return reviewed installation instructions.

The usage path within the UI is: Open Store, first check candidate plugins in Community, narrow down the scope using tags, search, and sorting, then install to the local profile. After the steps above, you can view the loaded content in Installed.

Applicable Scenarios and Notes

Suitable for the following scenarios:

  • Developers discover and install community plugins in their local DSH Web profile.
  • Agents need to retrieve the same directory set through tools rather than relying solely on UI operations.
  • Enterprise deployments need to add organizational review and allowlist processes to the plugin directory.

Please note:

  • Current materials only provide preview tarball installation and source code development installation; the roadmap has not yet completed upstream review with DeepSeek Harness, a stable npm release aligned with public DSH packages, update/disable/uninstall workflows, and enterprise catalog allowlists and audit events.
  • Installing plugins may download and execute third-party code, including package lifecycle scripts. Plugins run with the permissions of the current dsh process; you should check the source code, license, and dependencies before installing.
  • Enterprise deployments should place the catalog behind organizational review and allowlist processes.
  • The native installer validates GitHub repository identifiers, requires the selected catalog entry to be runtime-verified, parses the exact npm package spec from the Leaderboard detail API, and rejects URLs, git specs, shell syntax, and unverified entries.
  • The package.json engines require node ^22.19.0 || >=24.0.0; peerDependencies include @deepseek-ai/cordis ^4.0.1 and @deepseek-ai/dsh-* ^0.1.0-rc.8.

Conclusion

The value of DSH Plugin Store is to bring community plugin discovery back inside DSH Web and provide the same retrieval path for agents. It is currently still a preview integration and is suitable for reviewing the source code before installation.

Directory Page:

https://dshpluginleaderboard.com/plugins/sandbaseai-dsh-plugin-store

GitHub:

https://github.com/sandbaseai/dsh-plugin-store