DeepSeek Harness 的插件体验短板：安全权限未生效，好插件用户找不到

TL;DR - An investigation of DeepSeek Harness’s rapidly growing plugin ecosystem finds that weak discovery, governance, and isolation make plugins difficult to trust and manage. Most critically, plugins can bypass Harness’s three advertised permission levels and access files, credentials, the network, and system resources with the user’s full account privileges.

• Of roughly 11,000 GitHub repositories tagged dsh-plugin, fewer than 1,000 may be usable; many lack required packaging or are unrelated projects exploiting the tag.
• A probe plugin could read SSH-file listings and API keys, write files, and access the internet even under read-only, because permission controls govern model tool requests—not plugin code running inside Harness.
• Installing plugins can invalidate prompt-prefix caches, increase latency and context usage, and worsen tool-selection accuracy; profiles, presets, and Code Mode can mitigate this, but users receive little guidance.
• Popular plugins can conflict over shared UI or configuration paths, while the ecosystem lacks an official registry, compatibility checks, signing, security reporting, trusted recommendations, and package-name coordination.