dsh-skill-manager

DeepSeek Harness 技能管理器（host + client 一体包）

Plugin

Verification

L2 · Structured

Security

Low

Health

Active

Trust

Silver

What it does

DeepSeek Harness 技能管理器（host + client 一体包）

dsh plugin --profile web add dsh-skill-manager-5

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOPASSEDSCAN4 FILES

a5b4cb

Security reviewAutomated review · daily

PASSED

No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.

0 critical·0 warning·5 info·4 files scanned

Version binding

plugin version0.2.0dsh manifest

scanned commita5b4cb281f2f2026-08-17

latest commita5b4cb281f2f

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 5 info

• Static heuristic scan: done (4 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoMakes network requests (fetch / axios)lib/client.js:273
var response = await fetch("/api/skill-manager/list");
infoMakes network requests (fetch / axios)lib/client.js:278
var response = await fetch("/api/skill-manager/delete", {
infoReads process.envlib/index.js:46
return (process.env.DSH_HOME?.trim() || join(homedir(), ".dsh"));
infoReads process.envlib/index.js:49
return (process.env.DSH_AGENTS_HOME?.trim() || join(homedir(), ".agents"));
infoHardcoded IP addresslib/index.js:29
if (remote === "127.0.0.1" || remote === "::1" || remote === "::ffff:127.0.0.1") return true;

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-15 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 4 · Forks: 0

• Health: Active — committed within last 30 days