dsh-web is a plugin ecosystem that adds a web interface and optional tools to DeepSeek Harness, an AI development environment. It is used to provide features such as task boards, mobile remote control, SSH operations, image understanding, file and code panels, Git views, agent presets, and interchangeable skins through independently loaded plugins. The catalogue skills are plugins and related workflows for extending and operating the DSH Web environment.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhu1090093659/dsh-web --skill dsh-web-community-plugin-developergit clone --depth 1 https://github.com/zhu1090093659/dsh-webWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-community-plugin-developer)<a href="https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-community-plugin-developer"><img src="https://agentmods.dev/badge/skills/zhu1090093659/dsh-web/dsh-web-community-plugin-developer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-community-plugin-developer"><img src="https://agentmods.dev/badge/skills/zhu1090093659/dsh-web/dsh-web-community-plugin-developer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00123 | $0.02166 |
| Opus 5 | $0.00062 | $0.01083 |
| Sonnet 5 | $0.00025 | $0.00433 |
| Haiku 4.5 | $0.00012 | $0.00217 |
Grade A, and why
dsh-web-community-plugin-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.
社区插件开发者（dsh-web 社区插件索引）
本技能覆盖两条路径：
- 路径 A：社区贡献者在自己的仓库里开发一个 DSH 插件（官方 cordis bundle 标准）；
- 路径 B：把插件登记进 dsh-web 的社区插件索引（
packages/dsh-community-plugins/community.json）， 出现在 GUI 设置页的「社区插件」分区。
0. 事实速览（先读）
- 只索引、不内嵌：
packages/dsh-community-plugins（npm@linxin666/dsh-client-ui-community-plugins） 只登记条目，每个条目链到贡献者自己的仓库；本仓库绝不打包第三方代码。 - GUI 形态：社区插件是设置页一级菜单（
settings.sectionidcommunity-plugins，order 140）， 与通用设置/模式/插件/Agent 预设及 Web 插件、皮肤中心、宠物并列，内容直接展开 （alwaysOpen，无折叠），自带启用开关（community-plugins设置命名空间，开关就在分区卡片内）。 - 插件管理器联动：卡片桥接同家族 sibling
dsh-plugin-manager（cordis 服务pluginManager，可选）——在场时展示已安装状态并可发起安装/卸载/看进度；缺席时 降级为只读的复制安装命令索引。 - 数据流：
community.json→node scripts/community-index→packages/dsh-community-plugins/src/client/generated/community.ts（自动生成，内嵌进 client bundle） → 重建社区插件包。 - 门禁：
node scripts/community-index --check（等价pnpm community:check）是 CI 漂移门禁；scripts/community-index.test.mjs在pnpm test:scripts里校验条目契约。
1. 路径 A：在自己的仓库开发社区插件
社区插件的实现完全在贡献者自己的仓库完成，dsh-web 只链接它。形态与皮肤包一致的
官方独立 bundle 标准（对照 DSH docs/user/develop/basic/publish.md，turtle-ui 为范例）：
package.json声明dsh.bundle.patch→cordis.patch.yml，以及dsh.client（platform: "web"+ 浏览器半区注入列表）；cordis.patch.yml— bundle patch 层（插入插件行的 id/name）；prepare脚本 =tsdown（git 安装后自动构建lib/，自包含，无项目引用）；- host 半区
src/index.ts（apply(ctx)）、browser 半区src/client/，分层与 exports 约定同 packages/AGENTS.md； - 类型只来自
@deepseek-ai/*npm SDK devDependencies；browser 半区对@deepseek-ai/*只能 type-only 导入（运行时由宿主 shell 的 module table 提供）。
可选：给插件接设置页（host 用 installSettingsSection 注册命名空间，browser 用
ctx.settingsScope.bind + settings.plugin.item / settings.section 槽），要点见
docs/plugins.md「设置页插件配置」；发布到 npm 用自己的 scope（参考社区条目里的
npm 字段写法），用户即可 dsh plugin add 安装。
若插件要做进 dsh-web 家族（成为官方聚合成员而非社区索引条目），走
node scripts/dsh-plugin-new <name>脚手架 +packages/dsh-web-all/aggregate.yml注册（patchFrom + deps）+node scripts/aggregate.mjs重生成，门禁pnpm typecheck && pnpm test && pnpm docs:check。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 103 lines · 123 tokens per session scan A e6a104c7c7fe
dsh-web-community-plugin-developer is a skill published in the GitHub repository zhu1090093659/dsh-web (7,321 stars, last pushed today), licensed Apache-2.0. It adds 123 tokens to every session and 2,166 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
manage-taskboard
Manage work in the native DeepSeek Harness Taskboard with exact task ids and optimistic versions. Use when an Agent must inspect project work, claim an eligible todo, record progress or blockers, verify an implementation, submit it for human review, or release its own claim; also use when a human asks how to accept…
industry-research-method
A Chinese-language method for researching an industry by mapping its supply chain, tracking policies and news, and writing sourced reports. It separates the chain into upstream inputs, midstream production, and downstream distribution or use.
company-research-method
A documented process for researching a company using supplied files and selected public sources. It produces a company overview with business details, sourced financial figures, and stated risks.
dsh-plugin-guide
Use when developing, reviewing, packaging, debugging, or answering questions about DeepSeek Harness (DSH) plugins — the plugin-based agent harness on vendored Cordis. Applies the official plugin-development constraints (plugin contract, cordis.yml layers, services/events/effects, tool DSL, bundles/profiles) backed by…
setup-matt-pocock-skills
Configure this repo for the engineering skills: set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills.
wayfinder
Plan a huge chunk of work (more than one agent session can hold) as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.