Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hackerFish/awesome-dsh-skills --skill dsh-plugin-clientgit clone --depth 1 https://github.com/hackerFish/awesome-dsh-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client)<a href="https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client"><img src="https://agentmods.dev/badge/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client"><img src="https://agentmods.dev/badge/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.00785 |
| Opus 5 | $0.00023 | $0.00392 |
| Sonnet 5 | $0.00009 | $0.00157 |
| Haiku 4.5 | $0.00005 | $0.00078 |
Grade A, and why
dsh-plugin-client scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
DSH 插件 client 半端(依据官方包实现与 dsh-voice-input 实战验证)
包结构
package.json:exports加"./client": "./lib/client/index.js";dsh.client声明{ "platform": "web", "inject": [...] }inject按需列出依赖的 client 插件:@deepseek-ai/dsh-client-runtime(slots)、@deepseek-ai/dsh-client-locale(i18n)、以及插槽声明方(如@deepseek-ai/dsh-client-ui-conversation、@deepseek-ai/dsh-client-ui-settings)- client 源码放
src/client/index.ts,导出export const inject = ['slots']与export function apply(ctx)
注册 UI(slots 契约)
ctx.slots.inject('conversation.input.right', () => ctx.slots.register({
name: 'conversation.input.right', // 插槽名(single/list/chain 由声明方定)
id: 'my-button',
order: 10,
locale: 'my.ns', // 可选:声明后组件收到 t()
}, MyComponent))
- 组件自动收到「标准 kit」:全局
useSessions/useWorkspaces;会话级useSession、useInput(draft 快照)、inputActions(setDraft/submit/…);以及sessionId、useProjection、renderSlot、t - 常用插槽:
settings.plugins.tab(设置页标签)、conversation.input.left/right(输入条按钮区)、tool.call.toolview(工具调用视图,keyed 注册)、conversation.composer.dock
构建(tsup 双目标)
// tsup.config.ts:host 半端
{ entry: { 'host/index': 'src/host/index.ts' }, format: ['esm'], platform: 'node' }
// client 半端
{ entry: { 'client/index': 'src/client/index.ts' }, format: ['cjs'], platform: 'browser',
external: ['react', 'react-dom'] }
- 构建后必须按官方 client-modules 协议包装:
window.__ModuleLoader__.load({ id: '<包名>', factory: (require) => { ...CJS... } })(react 由宿主加载器提供,不打进 bundle) - 自测:Node 里 mock
window.__ModuleLoader__执行 bundle,断言apply/inject导出与注册发生
安装与调试
file:协议是复制安装,改代码必须重装;link:协议建 Junction 指向本地目录,改源码即时生效(开发推荐)- 验证 client 已加载:刷新页面看 UI 是否出现;host 加健康路由
GET /<prefix>/health排查;页面 HTML 的 client 清单里应出现"id":"<包名>"与rev - 页面清单不更新 = 服务端未重启(rev 是启动时计算的);改 lib 后重启 dsh
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 47 lines · 46 tokens per session scan A 3ee2c34f0c80
dsh-plugin-client is a skill published in the GitHub repository hackerFish/awesome-dsh-skills (5 stars, last pushed 4d ago), licensed MIT. It adds 46 tokens to every session and 785 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
dsh-web-skin-developer
Build a new skin for the dsh-web skin collection (DSH Web GUI) and publish it into the Skin Center — the first-level settings section — scaffold with scripts/dsh-skin-new, author the v2 skin.json manifest plus skin.css token remap (pure asset directory, no package.json, no build step), validate with scripts/dsh-skin…
dsh-first-plugin
A step-by-step guide for building and installing a first DSH plugin. DSH is a software tool whose plugins can add tools, connect outside services, or respond to agent events.
dsh-plugin-dev
A guide for building and debugging plugins for DeepSeek Harness, a developer-preview tool built on the Cordis component framework. It explains how plugins are exported, loaded, and connected to services.
dsh-skill-dev
A specialist review agent for software that handles purchasing, suppliers, payments, or spending approvals.
api-design
Guidance for designing public programming interfaces, meaning the methods and data structures other code is allowed to use. It emphasizes adding only interfaces with real callers and making invalid uses impossible to compile.