Skill Pack Security for DeepSeek Harness

What this plugin does

Security-audit skill pack for DeepSeek Harness (dsh): 5 agent skills - secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration. Zero runtime code. Apache-2.0.

Purpose evidence: this record includes a GitHub repository description. Any localized fallback copy is not independent verification of its capability claims.

Repository and source evidence

How to install

Suggested commands are derived from the catalog record. Review the repository README, requested permissions, and source before installation. Read the full guide.

Example configuration

The directory snapshot does not include a repository-verified, plugin-specific configuration example, so no configuration keys are generated or guessed here. After installation, use the official DSH command to inspect the composed configuration for the active profile:

For plugin-specific configuration, use the repository README and manifests as the source of truth: https://github.com/PerryLink/dsh-skill-pack-security

Supported DeepSeek Harness versions

Neither the repository evidence nor the directory record provides a verifiable DSH version range. Test the target DSH version in an isolated environment.

Environment, permissions, and dependencies

GitHub metadata

Stars / forks

1 / 0

Last repository update

August 14, 2026

Latest release

v1.2.0 · August 14, 2026

License

Apache-2.0

Default branch

main

Available / archived

Publicly reachable and not archived

Installation safety

No plugin-specific security assessment was collected. The following is generic DeepSeek Harness installation guidance, not a safety rating or audit conclusion for this plugin.

Third-party plugins can execute code inside your Harness environment. Before installation, review the source, recent activity, dependencies, build scripts, and requested permissions, then test in an isolated environment. Directory inclusion is not a security certification.

Git installs may execute prepare/build scripts on your machine, outside the agent sandbox. Only allow trusted source and pin a commit where possible.

Common errors and troubleshooting

No plugin-specific error documentation was collected. The steps below are generic DeepSeek Harness troubleshooting, not fixes verified for this plugin.

1. 1. Plugin missing after installation

   Confirm installation and launch use the same profile, then run dsh --profile web --dump-config to check whether the bundle entered the composed configuration.

2. 2. Git dependency build is blocked

   pnpm 10+ may block prepare scripts. Only after reviewing the source, add the exact package key reported by pnpm to allowBuilds, then retry.

3. 3. Version or configuration mismatch

   Check the repository README, releases, and compatibility evidence. Do not treat directory-wide commands as promises from the plugin author.