A toolkit for developing, checking, packaging, and releasing DSH community plugins. An npm package is a reusable JavaScript or TypeScript package; the toolkit builds versions for both the host and client.

Use it to scaffold a new DSH plugin, validate it against the repository standard, update its registry entry, build both targets, and publish a tagged release.

It gives plugin authors a defined project layout, validation rules, registry updates, and an automated publishing path triggered by a version tag.

How Washington5533/guarftrain configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to Washington5533/guarftrain. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/Washington5533/guarftrain/main/.claude/skills/dsh-plugin/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/Washington5533/guarftrain

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/washington5533/guarftrain/dsh-plugin/github.svg)](https://agentmods.dev/skills/washington5533/guarftrain/dsh-plugin)

Your own site

<a href="https://agentmods.dev/skills/washington5533/guarftrain/dsh-plugin"><img src="https://agentmods.dev/badge/skills/washington5533/guarftrain/dsh-plugin/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/washington5533/guarftrain/dsh-plugin"><img src="https://agentmods.dev/badge/skills/washington5533/guarftrain/dsh-plugin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 78 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,703 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00078	$0.02703
Opus 5.5	$0.00031	$0.01081
Sonnet 5.5	$0.00016	$0.00541
Haiku 4.5	$0.00008	$0.00270

Measured 15d ago against content hash 4fa4c6ba29da, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

dsh-plugin scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s -H "Authorization: Bearer <token>" http://127.0.0.1:3099/ | grep -o "client.js[^\"]*"

.claude/skills/dsh-plugin/SKILL.md · 171 lines

How it starts

The opening of the file, as written. The whole thing — 171 lines — stays where its author put it; the contents beside it link to each section on GitHub.

DSH 社区插件开发与发布

DSH 社区插件 = npm 包（含 dsh 段 + cordis.patch.yml）+ 双目标构建产物（host ESM → dist/，client CJS + __ModuleLoader__ wrapper → dist-client/），通过 git tag vX.Y.Z 触发 GitHub Actions 全自动发布（npm → registry → Release）。

规范原文（canonical spec）：docs/PLUGIN_STANDARDS.md — 任何约定冲突时以它为准。 快速参考：references/standards.md（清单速查）、references/registry-schema.md（registry schema）。

本仓库结构

位置	内容
`dsh-plugin/dsh-client-ui-training-guardian/`	参考插件（Training Guardian，本规范的实现范例）
`docs/PLUGIN_STANDARDS.md`	社区插件规范
`scripts/dsh_plugin_cli.py`	插件 CLI（`dsh-plugin`，pyproject 已注册）
`scripts/update_registry.py`	registry 条目重算器（CI 与本地共用）
`.github/workflows/plugin-publish.yml`	发布流水线
`registry/plugins.json`	社区插件 registry

工作流 1：脚手架（新建插件）

python scripts/dsh_plugin_cli.py scaffold my-cool-plugin \
  --author "Your Name" --description "What it does" [--platform web|tui]

在仓库内运行：生成 dsh-plugin/my-cool-plugin/，并自动向 registry/plugins.json 写入条目；若仓库缺 scripts/ 工具链会自动复制。
在全新目录运行（--dir /path/new-repo）：生成完整仓库布局（dsh-plugin/<slug>/ + scripts/ + registry/）。
生成的骨架已含：package.json（dsh 段）、cordis.patch.yml（insert + meta + skills）、双目标 tsdown.config.ts（含 __ModuleLoader__ wrapper）、 locale 注册 + 槽位注入 + 可观察设置 store 的 client 入口、locales、 slots-augment（类型 pin）、用真实 SlotCore 的契约层冒烟测试、双语 README、.github/workflows/plugin-publish.yml。 Skill 只声明在 meta.skills，骨架不在 apply() 里注册 skill。渲染层与交付层测试要自己补（见 references/standards.md）。
名字规范：npm 包名 @scope/kebab-name 或 kebab-name；insert id 取 kebab-name（全局唯一）。

工作流 2：开发迭代

cd dsh-plugin/<plugin>
pnpm install
pnpm build          # tsc --noEmit && tsdown（产出 dist/ + dist-client/）
pnpm test           # vitest
pnpm typecheck

改完源码后（本地联调）：pnpm build，然后重启 DSH 让它重新扫 profile 产物（bundle 地址带 ?rev=<12hex>，浏览器会按 rev 缓存）。

实时联调（真机验证）

# 1. 真训练 + 远程服务（SSE/REST 数据源，默认 8765）
python -m guardian.cli watch --remote --remote-port 8765 -- python scripts/train.py \
  --epochs 20 --ckpt_dir ./checkpoints_live --data_dir ./data
python -m guardian remote --port 8765          # 或单独跑独立远程服务

# 2. DSH web（用独立 DSH_HOME，不要动 ~/.dsh；默认端口 3080，被占就 --port）
DSH_HOME=/path/scratch/.dsh-live dsh --profile web --port 3099 --no-open
#    进程会打印带 token 的 URL，直接访问 / 是 401

# 3. 用 token 核验交付层：启动图里应出现 <包名>/client.js&rev=…
curl -s -H "Authorization: Bearer <token>" http://127.0.0.1:3099/ | grep -o "client.js[^\"]*"
curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer <token>" \
  "http://127.0.0.1:3099/plugins/@scope/name/client.js?rev=<12hex>"   # 必须 200

Read the full file on GitHub · 171 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

15d ago Changed · +28 lines 4fa4c6ba29da
2mo ago First seen · 143 lines · 78 tokens per session scan A 31c2b1e7ee34

Subscribe to this mod's changes

dsh-plugin is a skill published in the GitHub repository Washington5533/guarftrain (2 stars, last pushed 15d ago), licensed MIT. It adds 78 tokens to every session and 2,703 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Git and workflow Languages Releases Training TypeScript ai-plugin deepseek-harness dsh-plugin monitoring training-guardian

dsh-plugin next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
dsh-pluginWashington5533/guarftrain	Skill	2	15d ago	MIT	A	78	Claude Code
changelog-writingxiajiajun516/dsh-config-manager	Skill	301	2d ago	MIT	A	92	Claude Code, Codex
release-processgithub/gh-aw	Skill	5.6k	yesterday	MIT	C	16	Claude Code, Codex
releaseDevin-AXIS/iPolloWork	Skill	7.4k	yesterday	none	A	11	OpenCode
package-release-engineeringsampleXbro/agentsmesh	Skill	27	yesterday	MIT	A	38	Claude Code, Codex
release-deploysongoao25/dsh-virtual-product-team	Skill	5	2mo ago	MIT	A	59	Claude Code, Codex
publish-releaseJimmyPaolini/codebase	Skill	0	1mo ago	MIT	A	48	Claude Code, Codex

guarftrain: Skill for Claude Code