dsh-web is a plugin ecosystem that adds a web interface and optional tools to DeepSeek Harness, an AI development environment. It is used to provide features such as task boards, mobile remote control, SSH operations, image understanding, file and code panels, Git views, agent presets, and interchangeable skins through independently loaded plugins. The catalogue skills are plugins and related workflows for extending and operating the DSH Web environment.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhu1090093659/dsh-web --skill dsh-web-skin-developergit clone --depth 1 https://github.com/zhu1090093659/dsh-webWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-skin-developer)<a href="https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-skin-developer"><img src="https://agentmods.dev/badge/skills/zhu1090093659/dsh-web/dsh-web-skin-developer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhu1090093659/dsh-web/dsh-web-skin-developer"><img src="https://agentmods.dev/badge/skills/zhu1090093659/dsh-web/dsh-web-skin-developer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.02283 |
| Opus 5 | $0.00060 | $0.01141 |
| Sonnet 5 | $0.00024 | $0.00457 |
| Haiku 4.5 | $0.00012 | $0.00228 |
Grade A, and why
dsh-web-skin-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.
皮肤开发者（dsh-web 皮肤集合）
本技能指导在 dsh-web 克隆里从零构建一个新皮肤，并把它发布进皮肤中心（GUI 设置页一级菜单） 与市场（dsh-market.com Workshop）。v2 架构（issue #506）：皮肤是纯资产目录，skin-center 包是唯一加载器，皮肤不再是 独立插件包、不参与构建。
仓库与标准速览
packages/skins/skin-center/skins/<name>/— 一个皮肤 = 一个纯资产目录；mint/是官方锚定的最小范例（纯 token、零补丁零脚本），遇到疑问先读它。- 目录构成：
skin.json（v2 清单，契约见packages/skins/skin-center/contracts/skin-manifest-v2.schema.json）+skin.css（token 重映射）- 可选
patches.css（L3 自由选择器补丁，高敏感）/hooks.mjs（逃生舱 JS，高敏感，需同评审同发布） /assets/（背景等媒体）/preview/（画廊截图）/ 双语 README。
- 可选
- 没有 package.json / tsdown / tsconfig / 测试工程：资产不构建。scripts/skin-asset-dirs.test.mjs 守卫这一形态（资产目录里出现 package.json 即红）。
- 加载器纪律：skin-center 在提供样式时把每条选择器强制作用域到
html[data-dsh-skin="<id>"]， 作者按官方 shell 的写法写:root/body[data-ds-dark-theme]即可；安全管线 （transformSkinCss）在门禁（pnpm skin-center:check）与服务时都会跑。
0. 前置
cd <dsh-web 克隆根>
pnpm install
先读 packages/skins/skin-center/skins/mint/ 的 skin.css 与 skin.json，理解 token 契约与元数据契约。
1. 脚手架
node scripts/dsh-skin-new <kebab-case-name> # 如 matrix、coffee-break
生成 packages/skins/skin-center/skins/<name>/：skin.json（v2，order 自动取最大值+1）、
skin.css（:root 亮色 + body[data-ds-dark-theme] 暗色双套 --dsw-alias-* 占位）、preview/README.md
（截图占位说明）、README.md + README.zh.md（双语 stub）。随后按脚本打印的 next steps 填写。
2. 皮肤契约（硬性约束，违反会挂评审）
- 纯呈现层：不注入服务、不发 cordis 事件、不触及模型请求。
- token 优先：亮色值写
:root，暗色值写body[data-ds-dark-theme]（官方暗色属性在 body 上）； 只重映射官方--dsw-alias-*语义 token（L1），mint 是可复制的全集样例。插件侧按packages/skins/skin-center/contracts/semantic-attrs-v1.md输出data-dsh-plugin/data-dsh-part语义属性（L2），patches.css 里按这些锚点写补丁比裸选择器稳。 - patches.css 是高敏感逃生舱：自由选择器补丁会在 UI 与皮肤中心披露；能 token 解决就不写补丁。
- hooks.mjs 是受信逃生舱：与 skin-center 同评审同发布的 JS（
facets.client声明entry+apiVersion，hooks 运行时契约与 skinManifestVersion 相互独立）；社区皮肤默认不含 hooks。 - 媒体资产放
assets/并在contributes.backgroundMedia声明（亮/暗各一层：type image|video、 src、可选 scrim）；用户手动背景与壁纸引擎优先于它。 skin.json必填字段：skinManifestVersion=2、id（=目录名，^[a-z][a-z0-9-]{0,31}$）、name/nameEn、version（semver）、author、contributes.stylesheet（相对路径，无前导 斜杠、无..、无协议 URL）。可选：tagline/description/tags/accent（#rrggbb）/order/preview（{light,dark} 两张截图路径）/license/licenseUrl/noticeUrl/sourceUrl/attribution （第三方素材必须给 license 字段）、contributes.patches、requires.contracts（SkinRuntime/SkinHooks 契约声明，可选）。v1 字段（bodyAttr/package/wiring）已废弃， 写了只会收到迁移警告。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 116 lines · 120 tokens per session scan A b51c99492294
dsh-web-skin-developer is a skill published in the GitHub repository zhu1090093659/dsh-web (7,417 stars, last pushed today), licensed Apache-2.0. It adds 120 tokens to every session and 2,283 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
frontend-design-system
Use this skill to generate or audit design systems, check visual consistency, and review PRs that touch styling. Use when generating or auditing a design system, checking visual consistency, or reviewing a PR that touches styling.
design-system
Use this skill to generate or audit design systems, check visual consistency, and review PRs that touch styling. Use when generating or auditing a design system, checking visual consistency, or reviewing a PR that touches styling.
motion-foundations
Motion tokens, spring presets, performance rules, device adaptation, accessibility enforcement, and SSR safety for React / Next.js using motion/react. Foundation layer — all other motion skills depend on this. Use when setting up motion tokens, spring presets, reduced-motion handling, or SSR-safe animation in React or…
motion-advanced
Advanced motion patterns for React / Next.js — drag & drop, gestures, text animations, SVG path drawing, custom hooks, imperative sequences (useAnimate), loaders, and the full API decision tree. Requires motion-foundations. Use when building drag and drop, gestures, text or SVG animation, or imperative animation…
motion-patterns
Production-ready animation patterns for React / Next.js — button, modal, toast, stagger, page transitions, exit animations, scroll, and layout — built on motion-foundations tokens and springs. Use when animating a specific UI element in React or Next.js — button, modal, toast, stagger, page transition, or scroll.
motion-ui
Production-ready UI motion system for React/Next.js. Use when implementing animations, transitions, or motion patterns.