dsh-skill-hub

dsh-skill-hub

中文版 | English

In-GUI skill hub for DeepSeek Harness — manage the full ctx.skills catalog from the Web GUI. Beyond browsing, toggling and market installs, it puts the weight on two things: audit before install (hidden characters, remote-execution pipes, credential paths, size caps — a blocking finding is refused before it lands) and budget after install (the name + description characters of the first progressive-disclosure layer, so you learn at 8000 that a skill would install but never trigger). Host runs in the dsh process via official SDKs only; browser renders through official slots. No dsh source changes. Quick start

Requires Node ^22.19 || >=24 + dsh web >=0.1.7-alpha.1 =24.9.

Two surfaces — the hub panel lives at Settings → Skills Hub, and this plugin's own configuration card sits on the plugin's page in the Plugins manager (sidebar → 插件 → dsh-skill-hub). The card is registered by the plugin itself into the plugins.bundle.config slot — dsh has no auto-generated config page — and covers the master switch, announce-to-agent, dot colors, usage display and the stats window/interval. Features

Settings → Skills Hub — 4 tabs: General (all skills, viewed all / by source / by location / by role), Workspace (project skills for the selected workspace), Market (install + update), Trash (restorable removed skills).

The same hub is available as a 960px sidebar panel (left rail → Plugins area → Skills Hub), so skills can be browsed without leaving the conversation. Browse — every root of the ctx.skills registry: project / user / bundled + third-party providers. Search across name, description, displayName; filter by source, status (enabled / disabled), and invocation (model / user); sort by name, added time, or usage. Every row has a ⋯ menu for detail / toggle / delete, so actions do not depend on edit mode. Same-name skills from different sources get a duplicate badge instead of silently hiding. Content audit — enabled skills' bodies (SKILL.md) are checked too: raw ESC control characters, Unicode tag characters, and bidirectional controls (these three make "reviewed" not equal "seen" — a market import carrying them is refused outright), zero-width characters, curl … | sh remote execution, SSH/cloud-credential/keychain paths, over-long descriptions, and the 2 MiB per-file / 10 MiB per-skill / 500-file limits. Pure local static matching: no model call, no network. A market import scans the whole bundle (including scripts/); the standing check only reads SKILL.md — it runs