DeepSeek Harness Plugin

zx2021210538/dsh-skills-mcp-manager

Category UI Enhancements Added 2026-10-27

Forked from j62268781-alt/dsh-skills-mcp-manager (MIT) at its 0.5.6 baseline and substantially reworked since; it registers the same plugin id, so it cannot be installed alongside the original. Adds lossless cordis.patch.yml writes (JS expression values preserved), save-gated per-tool filters, skills governance over the DSH roots plus 10 external agent directories with per-skill/per-source switches enforced through the agent-scope skills provider (disabling actually hides a skill from the model), categories and a restorable trash, GitHub-repository install/update/rollback, zip and SKILL.md import, skills.sh/ClawHub market, workspace view, sidebar panel, dark/light contrast fixes, and update checks against this repository GitHub Releases (npm publication carries OIDC provenance).

Install

# from a prebuilt release tarball

dsh plugin --profile web add "https://github.com/zx2021210538/dsh-skills-mcp-manager/releases/download/v0.6.2/dsh-skills-mcp-manager-0.6.2.tgz"

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:zx2021210538/dsh-skills-mcp-manager

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.