The core design of DeepSeek Harness (DSH) revolves around plugin extensibility. Installing third-party plugins essentially means running code written by others locally, which poses uncontrollable risks. Existing community catalogs typically provide only a list and cannot answer the question of whether a plugin is safe. This plugin connects community-recommended catalogs with the official installation capability, allowing users to discover plugins by use case, install them directly after confirmation, and supports AI-based security review of installed versions.

Core Features

  • Plugin Marketplace: Provides browsing, searching, and category filtering for community-recommended catalogs, with support for viewing Editor’s Picks.
  • Direct Installation and Optional Review: Unified invocation of the host’s official plugin manager for installation. After a successful installation, a read-only review draft can be generated on the installed card.
  • Installed Panel: Displays the plugin list for the current profile, supports one-click disable/enable (immediate effect) or uninstall.
  • Skills Page: Lists the skills available in the current session, along with their source directories and invocation methods.

Installation and Activation

This plugin is installed via the official CLI:

dsh plugin --profile <profile> add safer-dsh-market@0.9.1

The marketplace is disabled by default. After installation, it must be enabled in the host configuration; only after enabling will it connect to the network to read the community catalog.

Typical Usage

  1. Install: Install the plugin using the command above.
  2. Enable: Find the marketplace entry in the interface and click Enable.
  3. Browse and Install: Browse and search for plugins in the marketplace interface, then click “Install”; the official manager completes the installation.
  4. Security Review: After installation is complete, click “AI Review Installed Version”. The review generates a read-only draft and checks for potential risks in the code (such as external connections, credential access, and file operations), but does not execute the reviewed code.

Use Cases and Notes

  • Use Cases: Users who need to manage DSH plugins and want to perform security audits on installed code.
  • Important Notes:
    • Review is an after-the-fact check: AI review does not provide pre-installation protection and cannot prevent a plugin from executing during installation.
    • Permission Risk: Plugins run with the permissions of the current DSH process. Before installation, inspect the source code and license.

References