Treat every plugin as executable code

A DeepSeek Harness plugin can run inside a profile and may register tools, read configuration, start processes, or integrate with external services. A sandbox used by an agent tool does not automatically sandbox the package installer or every host-side plugin capability.

A verified repository in this directory means its source and dsh relationship were checked. It is not a security audit or a guarantee that the code fits your threat model.

Verify source and ownership

Open the repository from the plugin page and confirm that the package name, owner, release tag, and documented install source agree. Look for recent maintenance, a license, issue history, and commits that explain generated or bundled files.

  • Prefer an exact release over an unpinned branch for important environments.
  • Watch for lookalike npm package names and changed repository owners.
  • Compare the published package contents with the source repository when possible.

Review installation behavior

Inspect package scripts and lockfile changes before installation. Native binaries, postinstall scripts, downloaded executables, and broad dependency trees deserve additional review. Run experimental installs in a disposable profile and workspace.

npx -y @deepseek-ai/dsh plugin --profile review add <package-or-git-source>

Map data and permission boundaries

List what the plugin can read, write, execute, and transmit. Pay special attention to workspace files, session history, model prompts, network destinations, shell commands, and any service credentials exposed to the profile.

  • Use narrowly scoped API keys and separate development credentials.
  • Do not store secrets in a repository or copied command history.
  • Restrict network and filesystem access to the minimum required.
  • Test failure and cancellation paths before trusting an autonomous tool.

Re-review updates and removal

Security review is not a one-time install step. Read changes before updating, keep a record of the source and version, and remove plugins that are no longer needed. Confirm whether a removed plugin leaves configuration, credentials, databases, or generated artifacts behind.

npx -y @deepseek-ai/dsh plugin --profile review update <package>
npx -y @deepseek-ai/dsh plugin --profile review remove <package>