The core feature extension of DeepSeek Harness relies on plugins. Finding a compatible plugin on GitHub and installing it manually often requires validating configuration files and running extra commands. dsh-plugin-marketplace is a standard DeepSeek Harness plugin package that adds a plugin marketplace entry under Settings → Plugins. It can scan public GitHub repositories with the dsh-plugin topic, validate the configuration in package.json, and install the selected repository into the current configuration file.

Core Features

This plugin primarily provides the following capabilities:

  1. Marketplace entry: Adds a “Plugin market” tab in the plugins settings.
  2. Repository discovery: Searches public GitHub repositories with the dsh-plugin topic.
  3. Configuration validation: Automatically checks whether the package.json at the repository root declares dsh.bundle.patch.
  4. Card display: Renders result cards and supports expanding them to view details (such as package name, default branch, license, update date, etc.).
  5. One-click installation: Installs the selected repository into the current configuration file using the dsh plugin command.

Installation and Enablement

Installing this plugin requires running a command that includes the --allow-build parameter.

dsh plugin --profile web add github:mengxingGG/dsh-plugin-marketplace --allow-build=dsh-plugin-marketplace

After running the command above, restart dsh --profile web and open Settings → Plugins → Plugin market to start using it.

Typical Usage

After installation, you can operate it in the following ways:

  • List popular repositories: Leave the search box empty, and the system lists popular repositories under the dsh-plugin topic.
  • Search for specific capabilities: Enter keywords to search, for example balance (balance), memory (memory), or tools (tools).
  • View unlisted repositories: Paste the exact owner/repository slug or a full URL of a GitHub repository to view details for repositories that are not in the topic list.
  • Installation flow: Expand a card to view the source information, then click Install. The confirmation dialog states that lifecycle scripts and plugins from third-party packages will run with local account permissions.

Use Cases and Precautions

  • Permissions and security:
    • Lifecycle scripts and plugins from third-party packages run with the current local account’s permissions.
    • Before execution, the installation script removes environment variables containing KEY, SECRET, TOKEN, or PASSWORD.
    • GitHub credentials are not sent to the browser.
    • If anonymous GitHub access hits a rate limit, configure the environment variable GITHUB_TOKEN.
  • Compatibility:
    • The verified baseline version is DeepSeek Harness 0.1.1-rc.2, and the runtime is the web profile with Node.js 22.19+ or 24+.
    • Compatibility with 0.1.0-rc.8 and 0.1.1-rc.1 is unknown and is not claimed.

Configuration Options

The plugin supports local configuration through cordis.patch.yml; all fields are optional:

  • topic: Defaults to dsh-plugin; the topic used for discovery.
  • searchMaxResults: Defaults to 8; the maximum number of repositories checked per search (1-30).
  • requestTimeoutMs: Defaults to 15000; the timeout for a single GitHub request.
  • installTimeoutMs: Defaults to 300000; the timeout for installing a single package.
  • profile: Defaults to web; the configuration file/profile to be modified.
  • tokenEnv: Defaults to GITHUB_TOKEN; the environment variable name for the GitHub token.
  • allowRemote: Defaults to false; whether same-origin non-loopback clients are allowed.

Conclusion

dsh-plugin-marketplace is a bridge connecting the DeepSeek Harness ecosystem with the GitHub open-source community. It reuses DSH’s native plugin mechanism and avoids duplicate installation logic. For developers who need to quickly integrate third-party capabilities into the web profile, this is a practical tool.

  • GitHub repository: https://github.com/mengxingGG/dsh-plugin-marketplace
  • Plugin directory: https://www.skillhub.cn/plugins/mengxingGG/dsh-plugin-marketplace