PerryLink/dsh-skill-pack-security
dsh-skill-pack-security
Security-audit skill pack + plugin_vet supply-chain gate for DeepSeek Harness (dsh): 8 bilingual agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) plus the plugin_vet automated pre-install scanner. Apache-2.0.
Install
npx @deepseek-ai/dsh plugin --profile <name> add dsh-skill-pack-securityRestart `dsh web` after install. Bundle APIs can change during the developer preview.
README badge
[](https://dshhub.dev/plugins/dsh-skill-pack-security)Paste this into your README. The star count updates with every catalog sync.
From the README
Excerpt from PerryLink/dsh-skill-pack-security, cleaned of badges and images.
dsh-skill-pack-security
- 1024 store channel:
npm i -g dsh1024once, thendsh1024 plugin --profile web add dsh-skill-pack-security(counts toward the deepseek1024.com install ranking).
Eight security-audit skills plus an automated plugin supply-chain gate for DeepSeek Harness.
The skills teach the audit methodology; the plugin_vet tool executes the pre-install scan — license / SBOM / commit pinning / malicious patterns / five-dimension risk card.
English · 简体中文 · Español · Português · हिन्दी
dsh plugin --profile <name> add dsh-skill-pack-security
Install & uninstall
- git channel (latest
main):dsh plugin --profile web add github:PerryLink/dsh-skill-pack-security— mounts the provider bundle;prepackembeds both editions into the tarball. - npm channel (published releases):
dsh plugin --profile web add @perrylink/dsh-skill-pack-security-provider. - tarball channel:
pnpm packinprovider/, thendsh plugin --profile web add ./@perrylink-dsh-skill-pack-security-provider-<version>.tgz. - uninstall:
dsh plugin --profile web remove @perrylink/dsh-skill-pack-security-provider(or remove the row; pure-skill copies are removed with the installer's-Uninstall/--uninstall).
What is dsh-skill-pack-security?
Eight security-audit skills plus an automated plugin supply-chain gate for DeepSeek Harness.
The skills teach the audit methodology; the plugin_vet tool executes the pre-install scan — license / SBOM / commit pinning / malicious patterns / five-dimension risk card.
The same run, animated.
Comparison
38 poison samples (20 malicious, 18 benign) · benchmark/RESULTS.md
Compatibility
| Surface | Status |
|---|---|
| Harness | DeepSeek Harness dsh-v0.2.1-alpha.1 (GitHub tag, verified 2026-09-25: full gate chain + profile install smoke). npm dependency line: @deepseek-ai/dsh 0.1.5-rc.2 (peers `>=0.1.2-rc.1 <0.2.0 |
| Node | ^22.19.0 || >=24.0.0 (the DeepSeek Harness runtime) |
| Platforms | All (the skills are content; the provider is a host plugin) |
| Model | Any (skills load on demand via the skill tool; plugin_vet is deterministic) |
What you get
dsh-skill-pack-security is a skill pack + supply-chain gate for DeepSeek Harness. It ships eight security methodologies as SKILL.md bundles that the model discovers in its session catalog and loads on demand with the skill tool, plus the automated plugin_vet pre-install scanner. The skills teach the methodology; the plugin executes the static checks.
…