Surfing Plugin

InstallableBundletarballfreshinstall scripts

SearXNG search and Crawl4AI fetch providers for DeepSeek Harness

Install Surfing Plugin

Installs from a tarball the author ships — no build permission needed.

The one-line version

dsh plugin --profile my-profile add github:cyijun/surfing-plugin

The author ships a tarball rather than an npm package or a loadable git checkout. Take the .tgz from the repository's releases, then point the install at the file you downloaded.

Install from the downloaded tarball

# 1. add the bundle to a profile — --profile my-profile points at $DSH_HOME/profiles/my-profile
dsh plugin --profile my-profile add ./<downloaded-package>.tgz

# 2. verify: the bundle should show up as a layer in the resolved config
dsh --profile my-profile --dump-config

# 3. boot the profile
dsh --profile my-profile

Before you run itinstall scripts

This package declares prepare, prepack — package-manager lifecycle scripts that execute on your machine at install time, outside the agent sandbox, before any tool-approval prompt exists.
A plugin runs with your permissions once loaded: it can read your files, use your credentials and reach the network. Tool approvals do not sandbox it.

Prerequisites

API key: Required — see the repository README for which provider.
Network access: Required at runtime.
Language: TypeScript

Install check

Every field the verdict was derived from, so you can re-derive it yourself

Field checked	Result	Weight	What the spec says about it
lifecycleScripts	fail	warn	runs at install time, outside the agent sandbox: prepare, prepack
dsh.bundle	pass	fatal	package.json declares a `dsh.bundle` layer
dsh.bundle.patch file	pass	fatal	patch file present at `cordis.patch.yml`
npm registry	missing	warn	`dsh-surfing-plugin` is not published to npm
distribution	pass	info	README documents a tarball install

Verdict reason: tarball distribution avoids the git build trap
package.json read: package.json
Rules applied from: docs/user/develop/basic/publish.md
Checked at: 2026-08-15
Install-time scripts: prepare, prepack

From the README

Excerpt as published by the author, plain text, unedited

English | [中文](README.zh.md) `dsh-surfing-plugin` adds self-hosted web access to [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): `web_search` uses SearXNG and `web_fetch` uses Crawl4AI. It registers providers with DSH's `ctx.web` service, so the native tool names, arguments, rendering, timeouts, cancellation, and result limits remain unchanged.