What it doesAI
Manage ntd-format experts/expert teams in dsh: browse/install 50+ experts via sparse git checkout and inject roles with /expert commands.
- Browse, search, and one-click install 50+ built-in experts
- Full support for expertType: team with owner and members
- Each expert becomes a user-invocable skill via /expert alias
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add @weibaohui/experts-managementInstall method: npm · sandbox install verified (L4)
Verification & Compatibility
L1–L3 are registry / install-spec static checks — constant across dsh versions.
External credentials (plugin-level): none detected
dsh 0.1.2-alpha.1currentL5 · verified
- • Node.js: v24.14.0
- • DSH: 0.1.2-alpha.1
ID: experts-management-20260902T171557Z · profile: l5-web-smoke
Issued: 2026-09-02 · expires: 2026-12-01
View checks & evidence
↳ carried from earlier record experts-management-20260902T044820Z (l3-fullscan)
↳ carried from earlier record experts-management-20260902T044820Z (l3-fullscan)
↳ carried from earlier record experts-management-20260902T044820Z (l3-fullscan)
active in loader tree (149 entries)
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/experts-management/)``[](https://www.dsh.so/artifact/experts-management/)`Security Report
Automated static scan, not manual review.
Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).
0.4.3dsh manifestd2725b8fda7c2026-09-02d2725b8fda7csuspicious · npmscore 0Vet is an AST static scan (npm artifact or git source).
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
Risk details
| Risk | Rule | Location | Description |
|---|---|---|---|
| high | R2 | index.js:23 | require('node:child_process') 危险内置模块(执行/网络能力触达) |
| medium | R2 | index.js:26 | require() 动态模块加载(npm 包内能力触达) |
| medium | R2 | index.js:41 | require() 动态模块加载(npm 包内能力触达) |
| medium | R2 | index.js:43 | require() 动态模块加载(npm 包内能力触达) |
| medium | R2 | index.js:1112 | require() 动态模块加载(npm 包内能力触达) |
Activity
Last commit 2026-09-01 · activity: Active
• Repo created: 2026-09-01
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days
Source
Author README
View on GitHub ↗The author's original README.md from the repository — fetched live, unedited.
