DeepSeek Harness Plugin

moldkey/dsh-deepseekbase

Category Plugin Markets & Managers Added 2026-11-10

Brings the third-party deepseekbase.com index into DSH: eight tools and five DSHIO standard skills (from the @liangjiehappy/dsh-dshio dependency). Search 8,400 plugins with real sandbox install verdicts and risk levels (including red-line warnings where credential access meets network), submit a plugin for a four-stage sandbox test from the conversation, read the verdict, check the remaining free quota, and run a clause-by-clause DSHIO/T 10 conformance check. The skill text is fetched from dshio.org at startup and replaces the bundled copy, so updates need no reinstall. Network: HTTPS to deepseekbase.com and dshio.org, plus an npm registry lookup before a test is submitted; no file reads or writes, no credential access, no shell.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:moldkey/dsh-deepseekbase

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.