Introduction

The core design philosophy of DeepSeek Harness (DSH) is “everything is a plugin.” When building a plugin, developers must simultaneously handle host compatibility checks, risk level assessment (R0–R3), permission requests, tool card contract design, and store listing compliance. Handling these steps manually can easily overlook details or introduce risks.

build-dsh-plugin provides a standardized workflow. It converts natural language or structured Briefs into actionable plugin designs, source-code projects, and acceptance processes, and turns security defaults, evidence thresholds, and store compatibility requirements into development constraints.

What It Is

This is a reusable Agent Skill and DSH-native Skill Provider Bundle for DeepSeek Harness (DSH) plugin development.

Maintainer: AI-Scarlett
License: MIT License

It mainly addresses fragmentation from requirements to listing: it breaks the development process into project generation, risk auditing, card contract design, and store structure construction, ensuring plugins comply with DSH STORE specifications from day one of development.

Core Capabilities

1. Brief Transformation and Project Generation

Given the current problem, expected result, and success criteria, the plugin fills in security defaults and outputs a plugin source project, tool card contract, audit steps, and release process.

2. Risk and Compatibility Analysis

Before generating code, it determines DSH host compatibility and assesses the R0–R3 risk level. For plugins that register model Tools, it designs card contracts compliant with DSH specifications, including JSON output specifications, intent definitions (presentCall/presentResult), and persistence projections.

3. Store-Compatible Structure

It keeps a store-compatible structure from day one of development. For plugins preparing to be listed, it routes third-party repositories as direct, monorepo, adapter-required, or blocked, and generates discovery candidates physically separated from the trusted installation library.

Installation

When installing to DSH, the standard Bundle at the repository root is used. To avoid affecting the real environment, perform acceptance in a disposable Profile.

export DSH_HOME="$(mktemp -d)"
dsh plugin --profile build-plugin-e3 add /absolute/path/to/build-dsh-plugin-repository
dsh --profile build-plugin-e3 --dump-config

The commands above install a Provider that only scans the build-dsh-plugin/ directory of this repository. The configuration should contain the unique entry dsh-build-plugin-skill-provider.

Dependency requirements:
* DSH version: >=0.1.0-rc.8 <0.2.0
* Node.js runtime: >=22.13.0

Usage

After successful installation, call the Skill in DSH. Provide a Brief to obtain a complete plugin design proposal.

Sample Brief:

当前问题：会话很多时，很难快速找到失败或长期无响应的任务。
期望结果：在 DSH 设置页看到异常会话及原因摘要。
成功标准：一次性 Profile 中页面可见；异常夹具分类正确；真实 Profile 保持不变。

Based on the Brief above, the plugin outputs an analysis report, strengths and weaknesses, applicable conditions, and execution steps.

Boundaries and Constraints

To ensure safety and consistency, the plugin has explicit design boundaries:

  • No core modifications: When building a standard DSH Bundle, it does not modify DSH source code or @deepseek-ai/* packages, nor disable, replace, or shadow the official plugin manifest.
  • Read-only preference: The read-only-first principle applies. Real Profiles, restarts, credentials, devices, and public-network operations must meet separate conditions and receive authorization.
  • Isolated testing: Tests use only disposable Profiles/fixtures and do not write to the real ~/.dsh.
  • Store listing requirements: To list it in DSH STORE, the following must be satisfied: a public GitHub repository, a 40-character fixed commit, matching manifest/Patch/Entry ID/lifecycle/license, and conservative permission metadata.
  • Directory page: https://www.skillhub.cn/plugins/AI-Scarlett/build-dsh-plugin
  • GitHub repository: https://github.com/AI-Scarlett/build-dsh-plugin
  • Official documentation: https://dsh.store/build/