dsh-skill-pack-security¶

⭐ 2 · ✅ 活跃 · 技能


类型	技能	分类	安全
星数	⭐ 2	状态	✅ 活跃
作者	PerryLink	更新时间	2026-08-21

一句话介绍¶

安全审计技能包：5 个 Agent 技能，覆盖密钥扫描、依赖审计等。

详细介绍¶

1024 store channel: npm i -g dsh1024 once, then dsh1024 plugin --profile web add dsh-skill-pack-security (counts toward the deepseek1024.com install ranking). Eight security-audit skills plus an automated plugin supply-chain gate for DeepSeek Harness. The skills teach the audit methodology; the plugin_vet tool executes the pre-install scan — license / SBOM / commit pinning / malicious patterns / five-dimension risk card. English · 简体中文 · Español · Português · हिन्दी ---

✨ 核心特性¶

1024 store channel: npm i -g dsh1024 once, then dsh1024 plugin --profile web add dsh-skill-pack-security (counts toward the [deepseek1024.com](https://d

📦 安装¶

# 1. install the bundle into your profile
dsh plugin --profile web add "github:PerryLink/dsh-skill-pack-security#main"

# or from npm (published releases)
dsh plugin --profile web add @perrylink/dsh-skill-pack-security-provider

# 2. restart and verify the row
dsh --profile web --dump-config | grep -A3 'id: skill-pack-security'

🚀 快速开始¶

./scripts/install.ps1 -Target user-agents -Language zh   # Target: project-dsh | project-agents | user-dsh | user-agents; Language: zh (default) | en

📚 更多信息¶

plugin_vet — the automated pre-install gate

plugin_vet is the pack's automated complement: a zero-dependency scanner registered by the provider/ plugin on ctx.tools. Point it at a GitHub owner/repo or a local package path — it downloads the tarball once (timeout + AbortSignal respected), scans within budget limits, and returns a render card. Install gate. The verdict feeds an installation gate — gate.policy: warn (default, n

Installing the skills by hand

DSH's local skill provider scans four roots by rank (lower rank wins same-name conflicts within a layer): Ranks (lower wins same-name conflicts within a layer): project-dsh 100 < project-agents 200 < custom 300 < user-dsh 400 < user-agents 500. Custom rank 300 is plugin-registered (such as this pack's optional provider/), not a disk root. ./scripts/install.ps1 -Target user-agents -Language zh

Configuration

All tunables are Schemastery Config fields (changeable from cordis.yml). provider/cordis.patch.yml documents each key inline.