Models & Providers

dsh-plugin-tools

wwumit/dsh-plugin-tools · ★ 1

wwumit

Plugin tools provider for DeepSeek Harness: expert2skill, skill-compliance, dependency-scan (dsh.bundle)

README body is shown in Chinese.

License
MIT
Added
2026-08-17
Maintenance
active
Install kind
github
Manifest details
Manifest status
Declared
Manifest path
package.json#dsh
Manifest checked
2026-08-19
Lifecycle scripts
None found

Static manifest checks report declarations only; they are not compatibility or security review.

安装

dsh plugin --profile web add github:wwumit/dsh-plugin-tools

GitHub 源码安装:首次需按提示配置 allowBuilds 构建授权后重试

For install and environment setup, plus plugin development tutorials, see DSH community docs ↗

README

Source README · body: zh · Read Chinese README

Table of contents
  1. dsh-plugin-tools
  2. Install
  3. Usage (composition)
  4. Verified (DSH 实机验证)
  5. Disclosure (DISCLOSURE v0.3)
  6. CI 门禁模板(plugin-gate)
  7. Development

dsh-plugin-tools

插件工具专家组:插件/技能开发与发布工具 provider。通过 ctx.skills 从线级 catalog 安装三个核心工具:

工具 用途
expert2skill 专家方法沉淀器:引导访谈 → 规则库 JSON + 可运行 skill 包
skill-compliance 发布合规检查器:披露完整性 + 免责/红线 + 金融敏感词 + 依赖安全(进 STANDARD §7/§9)
dependency-scan 供应链依赖扫描:宿主遮蔽 / 版本锁定 / 高危基线 / peer 完整性(与 skill-compliance DEP 对齐)
malware-scan 恶意代码静态检测:远程执行 / 混淆执行 / 数据外传 / 持久化 / 凭据读取 / 危险调用链
bundle-lint bundle 结构一致性校验(BND-001007)+ awesome-lint 收录规则预检(AWD-001008,对齐官方 08-17~08-24 规则变更)
runtime-probe 实机 list/get 验证:注册插件 → 实测 → 证据契约报告(verifiedBy/verifiedAt/reportUrl)
awesome-lint(bundle-lint v2 内置) 社区精选目录 收录预检:.yml 扩展名 / category 枚举(含 identity)/ 未知字段 / en·zh locale / 描述边界一致性(fkysly 审阅标准)/ dsh-plugin topic

Install

npm install @wwumit/dsh-plugin-tools
# peer deps: @deepseek-ai/cordis, @deepseek-ai/dsh-skill

Usage (composition)

import { Context } from '@deepseek-ai/cordis'
import * as pluginTools from '@wwumit/dsh-plugin-tools'

export function apply(ctx: Context) {
  ctx.plugin(pluginTools, {
    catalogUrl: 'https://wwumit.github.io/skills-catalog/catalog-plugin-tools.json',
  })
}

Verified (DSH 实机验证)

verify-dsh.ts 在真实 DSH 运行时验证:ctx.skills.list() 返回 4 个工具 + ctx.skills.get('expert2skill') 拉取 SKILL.md。

Disclosure (DISCLOSURE v0.3)

线级 catalog 双颗粒度披露:3 个工具全部 cloud: false(纯本地)、disclosureSchemaVersion: 0.3、仓级 repos[].cloudSkills/paySkills 同源。披露检查由 skill-compliance v1.5.x 自动执行。

CI 门禁模板(plugin-gate)

仓库内 templates/ci/plugin-gate.yml 提供发布门禁模板:push/PR 时自动执行 build + bundle-lint + skill-compliance + dependency-scan + malware-scan,任一失败即红。 用法:复制到目标插件仓库 .github/workflows/plugin-gate.yml。

Development

pnpm install
pnpm test    # vitest (mocked fetch)
pnpm build   # tsc → lib/