cheshireez/dsh-skill-hub
C3DeepSeek Harness（dsh）Web GUI 技能中枢：浏览/搜索完整本地技能目录、启用/禁用、查看正文、排查诊断、新建技能，基于官方 ctx.skills 注册表。 In-GUI skill hub for dsh: browse, search, enable/disable, inspect, diagnose and scaffold local skills from the
★ 1+ · cheshireez/dsh-skill-hub source on GitHub · this plugin in the registry
cheshireez/dsh-skill-hub is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, reads credential-class env vars.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt, webServer |
| reads credential-class env vars | token_env | GH_TOKEN, GITHUB_TOKEN |
Services it injects
connection locale remote settings settingsScope skills slots systemPrompt webServer
Outbound domains
api.github.com
Environment variables it reads
GITHUB_TOKEN GH_TOKEN DSH_AGENTS_HOME DSH_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.