dshmarket: third-party plugin market for DeepSeek Harness

dshmarket is not the built-in market; it is a third-party visual market installed as a DSH plugin. It solves "browsing plugins in the terminal is inconvenient," but it does not change where plugins really come from.

What dshmarket is

It is a plugin, not a website. After installation it appears as a market interface inside DeepSeek Harness for browsing and installing other plugins (source).

It is a third-party project. Inclusion, verification, and maintenance belong to that project, not to the built-in DSH Plugin Hub.

Names are easy to mix. dshmarket, dsh market, and dsh-plugin-market often refer to different things in search; trust the package name and source, not the display name.

Roles compared with the Hub

Both discover plugins, with different positioning.

The Hub is the built-in default. No extra installation, fixed entry, suitable for daily use.

dshmarket is optional enhancement. Install it for a different browsing experience or different inclusion; it is not required.

Installing both does not sync them. Inclusion and verification are independent; the same plugin may differ between markets.

Install and enable

One command installs; the entry depends on the plugin.

1. Confirm the profile: dsh plugin --profile web list outputs normally.
2. Run dsh plugin --profile web add dshmarket.
3. Restart so the plugin registers.
4. Find the market entry in the UI; its location depends on the plugin.
5. Confirm lists and search load.

If it does not appear, check the profile first. Desktop and web are different environments; then read load logs.

Do not confuse it with custom install. A market is a discovery entry; installing a plugin still follows its own source.

Inclusion and source

Inclusion is not a security endorsement.

1. Read the source label on the plugin: npm package or GitHub repository.
2. Verify owner and package name, not just display name.
3. Check version and update time.
4. Check dependencies and permissions; abnormally many warrant caution.
5. Verify once against the official or repository source before installing.

Source matters more than market name. The same plugin may appear in several markets; the source is what you install.

Inclusion lags. A new plugin may exist in a repository before it appears; install by source when in a hurry.

Risk boundaries

A third-party market adds three risks.

1. Opaque inclusion. It may include unverified plugins; do not treat it as an allowlist.
2. Supply chain. The market is itself a plugin with similar permissions; unknown sources should not be installed.
3. Stale information. Version, compatibility, and verification may lag behind the repository.

Mitigation is simple. Install only from clear sources, verify package and owner, and isolate first in sensitive environments.

Do not enter high-privilege credentials into a market. Browsing and triggering installs do not need an account password; refuse requests for one.

Failure and rollback

If the market will not open or the list is blank, check three layers.

1. Loading: is the plugin listed and are logs free of load failures?
2. Network: are the required endpoints reachable; are proxy and mirror interfering?
3. Data: is the index empty or the cache corrupted; clear and retry.

Rollback is uninstalling the market plugin. Plugins installed through it remain; they exist by their own sources.

Check residue after uninstall. The market may leave configuration and cache; clean before reinstalling.

When it fits

Install in three cases, skip in three.

Use the built-in Hub by default. It requires no installation and has a smaller risk surface; consider a third-party market only for a clear need.

A market is a tool, not a requirement. Installing it or not does not change whether plugins work.

Next steps

Confirm source before installing. For the install command, read How to add dshmarket from the CLI. For the built-in Hub, read How to install from DSH Plugin Hub. For the market concept, read What dsh plugin market means.

Sources: DeepSeek Harness docs - Packaging plugins, dsh CLI README, DSH Plugin Hub plugin page