MIT-licensed, TypeScript plugin marketplace for the DeepSeek Harness ecosystem, with a first-class native DSH Web plugin (installed via the official `dsh plugin` CLI), a public catalog API and a sandboxed validation pipeline.
DSH integration
Native runtime
Author-claimed
Safety audit
Unaudited
Last verified
2026-08-28
License
MIT
01What can it help you accomplish?
Browse, search and install DeepSeek Harness plugins from the community marketplace inside DSH Web
A catalog of DSH plugins browsable via `/store`, the settings page and Agent sessions, with install / update / remove of Web-profile plugins after explicit confirmation; plus directory, verified and leaderboard pages with search, category, filter and sort
DeepSeek Harness (dsh) users and developers who want to discover, vet and install community plugins
Pull the full DSH plugin catalog programmatically for tooling or automation
Complete read-only catalog JSON from `GET https://api.dshmk.com/` — `schemaVersion`, `generatedAt`, `source`, `stats` and `repositories` — refreshed roughly every 30 minutes
Developers building tooling on the DSH ecosystem that needs plugin discovery and validation status
02How to install into DeepSeek Harness
Prerequisites
- DSH Web runtime — the plugin is installed into the `web` profile of the official dsh CLI, and the README requires restarting DSH Web after install
Installation steps
- 01
Run `dsh plugin --profile web add npm:dsh-plugins-store` to install the marketplace's own DSH Web plugin
$ dsh plugin --profile web add npm:dsh-plugins-store
- 02
Restart DSH Web and refresh the browser
Verify the integration
Not specified by the author
03DSH integration and capability boundaries
First-class DSH integration — the marketplace's own DSH Web plugin is installed via the official dsh CLI (`dsh plugin --profile web add npm:dsh-plugins-store`) and adds `/store`, a settings-page marketplace and an Agent search skill to DSH Web
Plugin catalog & discovery
public GitHub repos carrying both `dsh-plugin` and `deepseek-harness` topics→curated catalog with directory / verified / leaderboard pages, search, categories, filters and sort; GitHub repo data auto-synced every 30 minutes
archived repos, forks and host applications are excluded from inclusionDSH Web plugin marketplace in `/store` and Agent sessions
official dsh CLI with the `web` profile→marketplace browsing via `/store`, the settings page and Agent sessions; install, update or remove of Web-profile plugins after explicit user confirmation
plugin installs only start after the user reads the risk notice and explicitly confirmsDSH Web must be restarted after installSandboxed validation pipeline
repo metadata pinned to a fixed source SHA→'已验证' verified markers bound to repo ID, SHA, DSH version, platform and validator version
the one-shot Linux sandbox has no store keys, is non-root and resource-limitedfailed results enter manual review with an error code, never into the source exclusion listPublic read-only catalog API
none (no auth, no query parameters)→full catalog JSON from `https://api.dshmk.com/`: `schemaVersion`, `generatedAt`, `source`, `stats` and `repositories` with validation and install candidates
the catalog refreshes roughly every 30 minutesconfirmation, source verification, timeout, cancellation and execution results are the consumer's responsibility
04Who is it for? When not to use it?
Good for
- DeepSeek Harness (dsh) users and developers who want to discover, vet and install community plugins
- Developers building tooling on the DSH ecosystem that needs plugin discovery and validation status
Not for
- The '已验证' (verified) marker only appears for results bound to the current repo ID, SHA, DSH version, platform and validator version — it is not a full security audit or an official endorsement.
- Inclusion in the catalog only means a repo carries both `dsh-plugin` and `deepseek-harness` topics and is not an archived repo, fork or host app — it does not mean the project has passed installation, compatibility, security or quality validation.
05Compatibility, maintenance and safety notes
- The '已验证' (verified) marker only appears for results bound to the current repo ID, SHA, DSH version, platform and validator version — it is not a full security audit or an official endorsement.
- Inclusion in the catalog only means a repo carries both `dsh-plugin` and `deepseek-harness` topics and is not an archived repo, fork or host app — it does not mean the project has passed installation, compatibility, security or quality validation.
- The catalog sync module only reads public repo metadata and never executes third-party code; the optional DSH Web plugin only initiates an install after the user reads the risk notice and explicitly confirms.
- The catalog API does not receive or infer the user's local profile — confirmation, source verification, timeout, cancellation and execution results are the consumer's responsibility, and `command` / `args` are for display and legacy consumers only (never execute `command` as shell text).
- The sync script reads `GITHUB_TOKEN` or `GH_TOKEN`; without a token it is subject to GitHub API's lower request-rate limit.
MIT · actively maintained (created 2026-08-13, last push 2026-08-26, no releases yet)
06Frequently asked questions
How do I install the dsh-plugins-store DSH Web plugin?
Run `dsh plugin --profile web add npm:dsh-plugins-store` to install the marketplace's own DSH Web plugin, then restart DSH Web and refresh your browser. Full instructions for source install, local builds, uninstall, marketplace tools and the `search-dsh-store` skill live in the package README.
What can I do with the marketplace inside DeepSeek Harness?
The DSH Web plugin lets you browse the marketplace through `/store`, the settings page and Agent sessions, and — only after you explicitly request and confirm — install, update or remove Web-profile plugins. The site itself offers directory, verified and leaderboard pages with search, category, filter and sort.
How does the 'verified' badge work?
A dedicated pipeline first classifies source characteristics at a fixed SHA, then runs a one-shot Linux sandbox on the shortlisted directories. The sandbox has no store keys, is non-root and resource-limited; installs, activation, entry imports and `apply` calls all run in isolation. Only results bound to the repo ID, SHA, DSH version, platform and validator version show as verified — that mark is not a full security audit or an official endorsement.
Is everything in the catalog safe to install?
No. Inclusion only means a repo carries both `dsh-plugin` and `deepseek-harness` topics and is not archived, a fork or a host app — it does not imply the project passed installation, compatibility, security or quality validation. The sync module only reads public repo metadata and never executes third-party code.
Is there a public API?
Yes — `GET https://api.dshmk.com/` returns the full read-only catalog with no auth and no query parameters: `schemaVersion`, `generatedAt`, `source`, `stats` and `repositories`. It refreshes roughly every 30 minutes; consumers are responsible for confirmation, source verification, timeouts, cancellation and execution results.
07Related DSH workflows
openviking
by volcengine
Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.
nocobase
by nocobase
NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability.
archify
by tt-a1i
Agent skill for beautiful, verifiable architecture, workflow, sequence, data-flow, and lifecycle diagrams—self-contained HTML with motion and crisp export.
learn-harness-engineering
by walkinglabs
Harness engineering beginner tutorial, from 0 to 1
08Data and sources
配套的 [DSH Web 插件](packages/dsh-plugins-store/README.md)可独立安装并接入 `/store` 和 Agent 会话；验证结果来自固定源码 SHA 的结构检查与 Linux 隔离沙箱。
配套 DSH Web 插件支持通过 `/store`、设置页和 Agent 会话浏览市场，并在用户明确请求和确认后安装、更新或移除 Web profile 插件
dsh plugin --profile web add npm:dsh-plugins-store
This page is generated from the project’s public documentation, repository metadata and a structured parse of DSH Plugins; last verified on 2026-08-28. Found an error? Submit a correction.
Best DeepSeek Harness Plugins
Twelve plugins worth installing first — picked from the whole catalog, across every category.