Skip to content
dsh-market Browse plugins GitHub 中文

Darren-Tang/dsh-provenance

Pre-install supply-chain checks for DeepSeek Harness plugins: verify the tarball you are about to install matches the source you read, before any code runs.

Stars ★ 1 Category Security & Permissions Listed 2026-08-19 npm dsh-provenance

Install

Inside DeepSeek Harness, with dsh-market

dsh plugin --profile web add dshmarket

Or from the command line

dsh plugin --profile web add dsh-provenance

Installing runs third-party code with your own permissions — it can read your files, use your credentials and reach the network. Review the source first, and pin a commit (github:owner/repo#sha) when you can.