MARKETPLACE GUIDE

How to use a DSH plugin marketplace safely.

A marketplace is useful only when it helps you move from a keyword to an auditable source. For an early ecosystem like DeepSeek Harness, that matters more than a large headline count.

1. Treat discovery and verification as different things

A repository tagged dsh-plugin is easy to discover, but the topic alone does not establish compatibility, maintenance quality, or safety. A good directory labels its evidence level and links directly to the source repository.

2. Review the capability and its permissions

Before installing, identify what the plugin can read, write, execute, or send over the network. Look for configuration files, install scripts, environment variables, and any instructions involving credentials.

3. Match the plugin to your DSH version

Because DSH is in developer preview, version assumptions can age quickly. Prefer projects that state compatibility, publish changes, and provide reproducible setup notes.

4. Test before adding it to a real workspace

Use a disposable repository or sandbox first. This is especially important for tools that touch shells, files, browsers, or remote services.