dsh-plugin-safe-install

For anyone who has ever watched DeepSeek Harness refuse to boot after a plugin install, the pain is all too familiar: a wall of English error messages, no way to debug because the harness itself is down, and a cycle of uninstall-and-retry that eventually corrupts the entire environment. dsh-plugin-safe-install is the direct answer to that loop. It packages a complete safe-install workflow into a single built-in skill so the Agent follows a structured process instead of guessing.

The skill covers seven stages end to end: confirm scope and permissions, snapshot a rollback checkpoint, audit the plugin for suspicious scripts or untrusted sources, install one at a time with five-level verification at each step, resolve native-module build issues such as node-pty and sharp, perform a clean uninstall or rollback when needed, and finish with a final boot check and restart reminder. If something fails, the process stops exactly where it broke rather than letting errors pile up. The plugin has zero runtime dependencies, zero network access, and no lifecycle scripts; the entire skill definition is a single human-readable SKILL.md file you can open and audit after install.

It is aimed at non-technical users who want to add capabilities to DSH without risking a broken setup, and at administrators who need a repeatable, auditable plugin-onboarding process. After installation and a restart, the skill appears in the Agent list automatically. Just say install the XX plugin and the structured workflow takes over.