dsh-skill-pack-security
A DeepSeek Harness security skill pack with eight bilingual audit skills and the plugin_vet pre-install supply-chain scanner.
Install
$ dsh plugin --profile web add "github:PerryLink/dsh-skill-pack-security#main"Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Publishes eight on-demand security-audit skill bundles in Chinese or English.
- Registers the plugin_vet tool for license, SBOM, commit-pinning, malicious-pattern, data-responsibility, and risk-card checks.
- Can use plugin_vet verdicts in a configurable installation gate with warn or deny policy.
- Supports installation from GitHub, npm releases, or a packed provider tarball.
- Provides manual installers for DSH skill roots.
Useful For
- Review a DSH plugin or package before installation.
- Guide secret scanning, dependency review, supply-chain review, threat modeling, and incident response.
- Add a configurable pre-install supply-chain gate to a DSH profile.
- Load security-audit methodology on demand during agent work.
Who It Fits
- DeepSeek Harness users
- Plugin reviewers and maintainers
- Security-conscious agent workflow teams
- Developers auditing dependencies or agent-project prompt-injection surfaces
Documented Limitations
- plugin_vet is a narrow pre-install trust gate and does not replace a manual end-to-end audit.
- Its malicious-pattern and maintenance signals are static heuristics, not dynamic analysis.
- Only one language edition can enter a session catalog from the same skill root because same-name skills resolve by rank.
- The declared DSH compatibility target is 0.1.0-rc.8.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- PerryLink/dsh-skill-pack-security
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- 4fc0198 · 2026-09-18
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 13GitHub stars
- Forks
- 1
- Open issues
- 1
- Last commit
- 2026-09-18
- Last release
- 2026-09-12
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
DeepSeek Harness web-search plugin that adds web search, X search, and focused page fetching with structured evidence.
View plugin →Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →Agent skill for beautiful, verifiable architecture, workflow, sequence, data-flow, and lifecycle diagrams—self-contained HTML with motion and crisp export.
View plugin →