Introduction

In the DeepSeek Harness (DSH) ecosystem, extending capabilities through plugins is the primary approach. However, when installing plugins directly, environment configuration conflicts or runtime errors often prevent the system from starting, and troubleshooting can be unfriendly to beginners. dsh-plugin-safe-install is a plugin that encapsulates a standardized “safe installation skill” as a built-in workflow, covering auditing, individual installation, five-level validation, dependency handling, and clean uninstallation, thereby addressing the pain points described above.

Plugin Overview

This plugin is maintained by user rouyiemei and is released under the MIT license. Its core value lies in making the installation process more “engineering-oriented,” helping avoid system crashes caused by installing multiple plugins at once or by misconfiguration.

Core Features

After installing this plugin, the DSH Agent gains the dsh-plugin-safe-install skill. During execution, the Agent follows the process below:

  • Security audit: checks the source and content of the plugin before installation to mitigate risks.
  • Individual installation and five-level validation: installs one plugin and validates it before moving on, preventing accumulated errors.
  • Native dependency handling: resolves common build issues for packages such as node-pty and sharp.
  • Clean uninstallation/rollback: provides cleanup and rollback mechanisms to keep the environment clean.
  • Final check: performs a comprehensive validation after installation is complete.

Installation and Activation

Run the following command in the terminal to add the plugin. The plugin is automatically mounted via the declaration in dsh.bundle.patch, so manual editing of configuration files is not required.

dsh plugin --profile web add github:rouyiemei/dsh-plugin-safe-install

After installation is complete, you must restart the dsh web process for the skill to take effect.

Usage and Precautions

After successfully installing the plugin, the Agent automatically executes the workflow when it recognizes related instructions. A typical trigger is natural language conversation, such as “Help me install the XX plugin.”

When verifying the installation result, you must use the dsh-doctor boot command. After this command finishes execution, it exits automatically, making it suitable for determining whether the system starts normally.

Note:
* Do not use dsh web --port 0 for testing, because this command starts a persistent service, does not exit automatically, and can easily lead to timeout-based misjudgments.
* If you need to uninstall this plugin, run the following:

    dsh plugin --profile web remove dsh-plugin-safe-install

Technical Features

The plugin is implemented to remain minimal and secure:
* Zero runtime dependencies: it does not depend on external libraries.
* No lifecycle scripts: no arbitrary code is executed during installation, it has no network access permissions, and it only reads local files.
* Readability: the full skill text is stored in skills/dsh-plugin-safe-install/SKILL.md, with content that is 100% readable.

Conclusion

dsh-plugin-safe-install focuses on providing a stable and predictable plugin installation experience. For developers who want to maintain system stability in the DSH environment, this is a plugin worth adding to your toolbox. For more details, please refer to the GitHub repository.