nanshan1995/DSH-Plugin-Market
41Last commit Aug 15, 2026
DSH-Plugin-Market DSH plugin
DSH-Plugin-Market is a built-in plugin marketplace for DeepSeek Harness. It allows users to browse the community plugin topic, search across languages, and install plugins with a pre-install static security audit. The market also provides management features like favorites, updates, and hot mounting.
How to install the DSH-Plugin-Market DSH plugin
dsh plugin --profile web add github:nanshan1995/DSH-Plugin-MarketCopying does not run this command. Review the repository and version before installing the DSH-Plugin-Market DSH plugin.
DSH-Plugin-Market DSH plugin data source
DSH-Plugin-Market DSH plugin snapshot date: Aug 16, 2026
discovered
What the DSH-Plugin-Market DSH plugin can do
- Live community browse of the GitHub dsh-plugin topic, sorted by stars or latest.
- Cross-language search with built-in thesaurus and real-time LLM translation via the host model.
- Pre-install static audit that blocks dynamic execution, credential access, and install scripts.
- In-flight operations (install/update/uninstall) pinned to the top with live progress indicators.
- Git links for every installed plugin, resolving repository from package.json or README.
- In-market README viewer with language switching, encoding repair, and proxy detection.
- Cross-platform support (macOS, Windows, Linux) with automatic toolchain detection.
- Network-adaptive download with auto proxy detection and direct fallback.
Where the DSH-Plugin-Market DSH plugin fits
- Discover and install new plugins from the community plugin topic.
- Search plugins in Chinese or English, with LLM-powered query translation.
- Manage installed plugins: enable/disable, update, uninstall, and view README.
- Save favorite plugins for quick access across restarts.
- Inspect a plugin's source repository from the installed list.
Who the DSH-Plugin-Market DSH plugin is for
- Users of DeepSeek Harness who want to extend functionality via plugins.
- Plugin developers testing their own plugins in a real marketplace environment.
DSH-Plugin-Market DSH plugin limitations
- Requires DeepSeek Harness (dsh web) running and pnpm available.
- Windows requires version 10 1803+ for bundled bsdtar during audit.
- Static audit only detects static patterns, not runtime data-flow intent.
- GitHub search API rate-limited (~10 req/min unauthenticated); token can raise quota.
- Community browsing limited to 1000 results as per GitHub search API cap.
- If DSHMARKET_AUDIT_GATE=off, all sources are refused outright (fail-closed).
DSH-Plugin-Market DSH plugin: from the repository README
Quoted from the nanshan1995/DSH-Plugin-Market README, the upstream source of the DSH-Plugin-Market DSH plugin. Copyright remains with the original authors.
**English** | [中文](README.zh.md) [](https://github.com/topics/dsh-plugin) [](https://github.com/nanshan1995/DSH-Plugin-Market) [](LICENSE) Plugin market inside DeepSeek Harness: browse, search, one-click install — every install/update passes a **static security audit gate** first. ## Features - **Live community browse** of the GitHub `dsh-plugin` topic (ranked by stars / latest, paginated) plus a personal **My Favorites** list (☆-save, survives restarts) - **Cross-language search**: Chinese queries find English plugins and vice versa — built-in thesaurus **plus real-time LLM translation** via the host model - Pre-install audit of the exact published artifact (dynamic exec, credential access, install scripts are hard-blocked); when blocked, the audit card offers **"Install anyway" (forced download, at your own risk)** and **"Cancel"** side by side - In-flight ops (installing / updating / uninstalling / audit-blocked awaiting decision) are **pinned to the top** of the lists with
Read the full READMERepository license: MIT
DSH-Plugin-Market DSH plugin questions
How do I install DSH-Plugin-Market?
Run `dsh plugin --profile web add github:nanshan1995/DSH-Plugin-Market` while DeepSeek Harness is running. You can also use `dsh plugin --profile web add link:$(pwd)/DSH-Plugin-Market` for local development. After installation, restart DeepSeek Harness and open Settings → Plugin Market.
Why does installation fail with an audit block?
The plugin's audit gate statically scans the install artifact for risky patterns like dynamic execution, credential access, or install scripts. If blocked, you can force install by clicking 'Install anyway' on the audit card, but this is at your own risk. To disable the audit entirely, set the environment variable `DSHMARKET_AUDIT_GATE=off` (note: this will then refuse all sources).
Can I search for plugins in Chinese?
Yes. The market has a built-in Chinese-English thesaurus and uses the host LLM to translate your query in real time. The search results will include English plugins whose descriptions match the translated query. The translated query is shown in the UI as 'Translated as: …'.
How do I find the source repository of an installed plugin?
For each installed plugin, the market resolves the repository from its `package.json` (`repository` or GitHub `homepage`), the `github:` spec, or by scanning the shipped README. The spec text becomes a link and a 'Source' button opens the repo in your browser.
What happens if a plugin doesn't activate after installation?
If the plugin lacks a `dsh.bundle` declaration, a yellow notice appears with a 'Let the Agent handle it' button. Clicking it opens a fresh agent session with a pre-filled diagnosis task, so the agent can finish the wiring for you.