At a glance

What it does

A DeepSeek Harness Web UI marketplace for finding dsh-plugin repositories from Settings.

Code-evidenced contributions

What it adds to DSH

Web UIPlugin Marketplace settings tab

Adds a DeepSeek Harness Web UI settings section for searching and comparing dsh-plugin repositories, viewing install details, and requesting an AI explanation.

Mechanism evidence ↗

Before you choose it

Adds a Plugin Marketplace section to DeepSeek Harness Web UI. Search the GitHub dsh-plugin topic, sort results by stars or update date, open repository details and install guidance, or ask the configured default model for a plain-language explanation.

Best for

DeepSeek Harness Web users who want to discover plugins without starting from a terminal.

Common tasks

Search dsh-plugin repositories by keyword.
Compare plugin cards by stars, language, description, and update date.
Open a plugin's README summary, repository link, npm link, and install command.
Ask the configured default model what a selected plugin roughly does.

Permissions and data

The browser UI queries public GitHub data; optional AI explanations use the configured default model.

Permissions

Registers a DeepSeek Harness Web settings section.
Uses settings-backed install and AI-explain flows.

Data handling

Searches GitHub's public dsh-plugin topic.
Fetches selected plugin READMEs on demand and truncates them to about 1,200 characters.

External services

GitHub public search API.
The configured default model when AI Explain is selected.

Credentials

No GitHub key is required for the documented public API flow.

Limitations

Unauthenticated GitHub API use is documented as limited to 60 requests per hour.
GitHub search returns at most 1,000 results.
For DSH 0.1.0-rc.6, the README directs users to pin marketplace version 0.2.6.
On a non-loopback Web origin, documented install and AI-explain requests do not reach the host.

What DSHub checked

Pinned Git source, package manifest, and Cordis bundle patch were verified.
The package declares Web client support, Node >=20.18, and DeepSeek Harness peer dependency ranges.
The README documents the Web-profile installation command and marketplace behavior.

What DSHub did not check

Installation, restart behavior, GitHub API behavior, settings writes, and AI explanation were not executed in the supplied evidence.
npm registry package contents were not audited.

Pinned install

Install DSH Plugin Marketplace

This plugin bundle does not have a DSH Plugin install action. Use its source documentation for the delivery method.

Visit the source project ↗

Maintainer source

Project README

View at commit 2db2cef ↗

Maintainer-authored contentCaptured from README.md on Sep 10, 2026. The text and repository-relative media are fixed to commit 2db2cef78b5b with content hash d23efb48e314; provider-hosted badges may update independently. README commands are upstream documentation; the DSHub copy action above is the verified, version-pinned install.

dsh-plugin-marketplace

GitHub: Scorp1o117/dsh-plugin-marketplace · npm: dsh-plugin-marketplace

Part of the DeepSeek Harness Enhancement Suite — Vision · Soul/Persona · Long-term Memory · Plugin Marketplace.

A plugin marketplace inside the DeepSeek Harness Web UI: browse github.com/topics/dsh-plugin right from the settings page — no terminal needed.

Search the topic by keyword, sort by stars or last update
Plugin cards with description, stars, language, and update date
Detail panel: GitHub README summary, install command, repo/npm links
AI explain: one click asks the configured default model what a plugin roughly does, answered in the UI — no need to read the README yourself
Powered by the public GitHub search API (CORS-enabled, no key needed; unauthenticated rate limit 60 req/h)
Zero client dependencies (React only), no build step — hand-written ModuleLoader bundle

Install

As a profile bundle (recommended):

dsh plugin --profile web add dsh-plugin-marketplace

or via the package's dsh.bundle.patch layer — add dsh-plugin-marketplace to dsh.profile.bundles in $DSH_HOME/profiles/web/package.json.

Manual mount in $DSH_HOME/profiles/web/cordis.patch.yml:

- insert:
    - id: plugin-marketplace
      name: 'dsh-plugin-marketplace'

Upgrading from ≤ 0.2.2? If you previously mounted the plugin manually, remove that row from cordis.patch.yml before switching to the bundle install — the bundle layer already inserts the entry, and two entries with the same id abort boot with duplicate loader entry id: plugin-marketplace. The two ways are alternatives, not both.

Then restart dsh web (new client plugins require a process restart to be scanned into the browser roster) and open Settings → Plugin Marketplace.

DSH 0.1.0-rc.7 and newer expose every registered settings namespace, so the marketplace works without patching official files. Version 0.2.8 and newer therefore require DSH 0.1.0-rc.7 or newer. DSH 0.1.0-rc.6 users must pin dsh-plugin-marketplace@0.2.6, the last release carrying the legacy settings-allowlist compatibility patch.

DSH 0.1.2-rc.1 removed the client-side connection.api (the legacy settings RPC face); version 0.3.1 therefore writes through the bound settingsScope's own mutate (hosts older than 0.1.2-rc.1 still use the legacy channel). Note: when dsh web is opened from a non-loopback origin (a LAN IP, say), DSH keeps settings writes process-local, so install / AI-explain requests never reach the host.

How it works

Layer	File	Role
host shell	`index.js`	settings-backed install + AI-explain flows; `dsh.bundle.patch` makes the package a proper profile bundle
browser half	`client.js`	registers the `settings.section` "marketplace" tab; fetches GitHub search API; renders cards + detail; "AI explain" button
manifest	`package.json`	`dsh.bundle: { patch: "./cordis.patch.yml" }` + `dsh.client: { platform: "web" }` + `exports["./client"]` — discovered by `dsh-client-modules`

The browser half needs no dsh.client.inject packages: it only uses react (provided by the web runtime) and the slots / locale client services.

Notes

The GitHub search API returns at most 1000 results; the topic currently has 280+ repos, so paging covers everything.
READMEs are fetched per plugin on demand and truncated to ~1200 chars.
If you see "rate-limited", wait an hour or run the web through a proxy that adds a GitHub token.

License

MIT

Operate deliberately

Install and manage

Prerequisites and target Profile

Target： Web Profile

Delivery： Dsh Bundle Git — Scorp1o117/dsh-plugin-marketplace#2db2cef78b5bf807091559dddc8d93db9137e59b。

Verify, update, and remove

Show lifecycle commands

Verify

dsh plugin --profile web list

Compatibility and access

DSH Web bundle; Node >=20.18 and listed peer dependencies required： DSH 0.1.0-rc.7 or newer; supplied peers list rc.7 through 0.1.5-rc.1。

Review compatibility evidence ↗

Risk facts

External Service

Uses GitHub's public search API and fetches plugin READMEs on demand; unauthenticated use is documented as limited to 60 requests per hour.

Evidence ↗

Settings Write

The documented install and AI-explain flows are settings-backed; on non-loopback Web origins, the README says these requests remain process-local.

Evidence ↗

Evidence and editorial reviewManifest, Bundle patch, distribution and freshness

Immutable evidence

Review status and source activity

AI reviewed

MIT-licensed package with a verified immutable Git bundle path; evaluate its external API and model use against your local policy before enabling it.

AI reviewed Sep 10, 2026, 2:17 PM UTC。GitHub facts last checked Sep 10, 2026, 2:17 PM UTC。

No material source change has been recorded since this evidence baseline.

Next step

Follow the Plugin installation workflow →

Subscribe to material changes for DSH Plugin Marketplace →