Preface¶

The extensibility of DeepSeek Harness (DSH) is typically integrated through plugins, and the community directory is also organized by plugin. For those who already know how to write DSH plugins but need to package, verify, and push them to GitHub, the process can easily involve manual steps: environment confirmation, permission checks, credential handling, privacy scanning, repository creation, and release verification.

dsh-plugin-publisher is a DSH plugin built around this workflow: it turns “package as a DSH plugin, verify locally, publish to GitHub” into a reusable workflow, and provides a configuration entry point in the DSH Web GUI.

What This Is¶

dsh-plugin-publisher is a plugin for DeepSeek Harness (DSH) plugin development and GitHub publishing workflows, positioned as a dual-end plugin: Host end + settings page GUI.

The GitHub repository path is akira399/dsh-plugin-publisher, licensed under MIT. The plugin manifest declares zero dependencies and is provided in both bundle patch and client forms, requiring Node version >=20.

After installation, the plugin registers the built-in dsh-plugin-publishing skill. This skill is enabled by default and can be opted out via the settings page.

Core Capabilities¶

Built-in DSH Publishing Skill¶

The plugin registers the dsh-plugin-publishing skill to support the DSH plugin development and GitHub publishing workflow.

When the skill is enabled, dsh-plugin-publishing will appear in the session skills directory. Before each publishing operation, the AI will first obtain explicit consent.

Comprehensive Publishing Workflow¶

The workflow includes the following steps:

1. Environment confirmation
2. Privacy scanning
3. Repository creation
4. Tagging, optional
5. Pushing
6. Anonymous/clone verification

DSH Web GUI Settings Card¶

The plugin provides a card on the settings page of the DSH Web GUI, including:

• Skill enable/disable toggle
• GitHub PAT input field, write-only

You can paste a Fine-grained PAT into the card and save it. The content is not echoed back.

GitHub PAT Integration with System Git Credential Manager¶

The plugin supports syncing the Fine-grained GitHub PAT to the system Git credential manager for git push / git clone.

The GitHub PAT is only written to the DSH credential store and the system Git credential manager. It is never echoed back or uploaded.

Fine-grained PAT Permission Description¶

The plugin provides a tutorial for creating GitHub Fine-grained PATs and the required permission description. The required permissions are:

• Contents: Read and write
• Administration: Read and write
• Metadata: Read

Verification Script¶

The plugin provides the pnpm verify verification script, which checks:

• host/client syntax
• SKILL.md completeness
• Enablement status
• Settings section registration
• Credential listeners
• Client bundle contract
• Privacy scanning

Installation and Enablement¶

Installation¶

Install using the following command:

npx -p @deepseek-ai/dsh dsh plugin --profile web add github:akira399/dsh-plugin-publisher

After installation, restart DSH by running:

dsh web

You should check the source code and license before installation. Installing a plugin means trusting that repository, and the installation process may execute npm/pnpm lifecycle scripts within the package. The plugin runs with the current dsh process permissions; only install repositories that have been reviewed.

Graphical Enablement or Disablement¶

Open the DSH Web GUI:

Settings → Plugin Configuration → dsh-plugin-publisher

Enable or disable the skill in the card.

Non-GUI Environments¶

If the settings page is unavailable, you can add a direct override entry to the profile’s cordis.patch.yml:

- id: dsh-plugin-publisher
  config:
    consent: false

You can also write to the settings document ~/.dsh/settings.yaml:

dsh-plugin-publisher:
  enabled: false

Typical Usage¶

The following is a common usage sequence:

1. Install the plugin and restart DSH.

npx -p @deepseek-ai/dsh dsh plugin --profile web add github:akira399/dsh-plugin-publisher

2. Open the settings card in the DSH Web GUI and confirm the skill is enabled.

Settings → Plugin Configuration → dsh-plugin-publisher

3. If you plan to create new repositories or push code, paste the Fine-grained PAT into the GitHub PAT input field and save it.

4. Use the dsh-plugin-publishing skill in sessions. Before each public repository creation, code push, or topics modification, the AI will first request explicit authorization.

5. Execute the publishing workflow, including environment confirmation, privacy scanning, repository creation, tagging (optional), pushing, and anonymous/clone verification.

6. Run the verification script.

pnpm verify

Applicable Scenarios and Considerations¶

Suitable for these scenarios:

• You have already developed a DSH plugin and need to package it as an installable plugin.
• You need to perform local verification and privacy scanning before publishing.
• You need to push the plugin repository to GitHub while keeping reusable permission descriptions and verification steps.
• You want to manage the enabled state and GitHub PAT from the DSH Web GUI.

Things to note before use:

• The plugin is enabled by default, but default enablement does not mean automatic publishing.
• Explicit user authorization is required before each public repository creation, code push, or topics modification.
• Privacy red line: tokens, credentials, local paths, and personal information must never be committed to the repository.
• Public publishing is irreversible. Code and descriptions become publicly visible once pushed to a public repository; you must conduct your own privacy scan and assess the risks.
• The plugin is provided AS-IS and does not collect or upload any user data; any loss caused by using this plugin or the publishing behavior it guides is the sole responsibility of the user.
• The GitHub PAT is only written to the DSH credential store and the system Git credential manager; the plugin does not record or echo it back.
• The plugin runs with the current dsh process permissions; check the source code and license before installation.

Links¶

• Directory page: https://www.skillhub.cn/plugins/akira399/dsh-plugin-publisher
• GitHub: https://github.com/akira399/dsh-plugin-publisher

The above directory page is an independent plugin directory and is not equivalent to an official app store. Before installation, always refer to the source code, documentation, and license in the GitHub repository.