What it does
DSH（DeepSeek Harness）Skills 管理 + SkillHub 商城插件：侧边栏面板管理本地 skills（用户级/工作区项目级/内置只读），搜索并一键安装 SkillHub 公开技能，附模型工具 dsh_skillhub_search。
Installation
dsh plugin --profile web add github:peiqi10086/dsh-skills-marketInstall method: GitHub · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.
0.2.0dsh manifest3f31d818d20a2026-08-183f31d818d20aThe scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 6
- infoReads process.envlib/index.js:553const agentsHome = resolve(process.env["DSH_AGENTS_HOME"] ?? join(homedir(), ".agents"));
- infoMakes network requests (fetch / axios)lib/index.js:741const nodeFetch = async (url, init) => fetch(url, {
- infoMakes network requests (fetch / axios)src/client/store.ts:113const res = await fetch(`${API_PREFIX}/${op}`, {
- infoReads process.envsrc/core/local.ts:20const agentsHome = resolve(process.env['DSH_AGENTS_HOME'] ?? join(homedir(), '.agents'))
- infoMakes network requests (fetch / axios)src/index.ts:47fetch(url, { headers: init.headers, signal: init.signal })
- infoReads process.envtsdown.config.ts:53'process.env.NODE_ENV': JSON.stringify(process.env.NODE_ENV ?? 'production'),
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-18 · activity: Active
• Repo created: 2026-08-18
• Stars: ★ 5 · Forks: 0
• Health: Active — committed within last 30 days