dsh-discovery

DeepSeek Harness currently lacks an official plugin marketplace, meaning third-party plugins distributed in the community are essentially executable code that can run directly on your host. Without proper vetting, installing these plugins poses significant security risks such as supply chain attacks or unauthorized data exfiltration. dsh-discovery is designed to bridge this trust gap. As a strict read-only search browser, it not only offers categorized browsing and keyword search but also introduces a dual-layer defense mechanism: "deterministic pre-check" combined with "LLM deep audit." By using static rules for rapid scanning and leveraging Large Language Models to deeply inspect source code and dependencies, it provides a comprehensive risk report before installation, ensuring every decision is evidence-based.

Furthermore, the plugin integrates deeply into the Agent ecosystem, enabling AI assistants to perceive and utilize the community library through system prompt injection and dedicated tools. It supports scenario-based filtering, allowing users to find high-reputation plugins tailored for writing, development, model integration, and automation. Whether you are a developer prioritizing security compliance or a user looking to expand your Agent's capabilities, dsh-discovery helps you navigate this open ecosystem safely and efficiently.