Installing plugins in the DeepSeek Harness (DSH) ecosystem on Windows requires attention to security details. Unlike npm packages with strict audit pipelines, DSH plugins can run arbitrary code during installation. This guide shows you how to install plugins safely on Windows.
Why Windows Installation Needs Extra Care
Windows has unique security considerations that affect how you should approach plugin installation:
- Execution policies: Default policies may block PowerShell scripts
- User Account Control (UAC): Required for system-level changes
- Antivirus false positives: Custom install scripts may trigger security software
- Path length limits: Windows has stricter path length restrictions
Step 1: Verify the Plugin's Quality Score
Before installing any DSH plugin, check its quality score on dshquality.com. The grading system helps you understand the risk level:
- Grade A-B: Generally safe, standard installation
- Grade C: Proceed with caution, review the install script
- Grade D: Avoid unless you understand the risk and have reviewed the source code
Step 2: Prepare Your Windows Environment
Check your PowerShell execution policy with `Get-ExecutionPolicy`. If it's restricted, you may need to set it to RemoteSigned. Ensure you have admin rights available for system-level plugins.
Step 3: Install Using DSH CLI with Scanner
The recommended method uses the DSH CLI with the --scan flag:
This flag runs our security analysis before installation. If the plugin has dangerous patterns, the installation is blocked and you receive a detailed warning.
Step 4: Verify the Installation
After installation, verify the plugin is working correctly with `dsh plugin list` and `dsh plugin info <plugin-name>`. Check that the quality score matches what we reported.
Security Best Practices for Windows
- Never bypass the scanner — the --scan flag is your first line of defense
- Review install scripts for Grade C plugins
- Use isolated environments for testing new plugins
- Keep DSH updated — security improvements are regularly added
- Report suspicious plugins to the DSH community
FAQ
- Can I install plugins without the scanner? Technically yes, but strongly discouraged.
- What if my antivirus blocks the installation? Check the scanner report first — if it shows Grade A or B, the plugin is likely safe.
- Do I need admin rights for all plugins? No, most plugins install to user directories.