Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add znlgis/opengis-skills --skill deepseek-harnessgit clone --depth 1 https://github.com/znlgis/opengis-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/znlgis/opengis-skills/deepseek-harness)<a href="https://agentmods.dev/skills/znlgis/opengis-skills/deepseek-harness"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/deepseek-harness/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/znlgis/opengis-skills/deepseek-harness"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/deepseek-harness.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 8 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 46 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 74 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 77 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 84 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 87 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 90 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 132 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 221 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.01779 |
| Opus 5 | $0.00034 | $0.00890 |
| Sonnet 5 | $0.00014 | $0.00356 |
| Haiku 4.5 | $0.00007 | $0.00178 |
Grade A, and why
deepseek-harness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 242 lines — stays where its author put it; the contents beside it link to each section on GitHub.
项目地址： https://github.com/deepseek-ai/deepseek-harness
官方文档： 见仓库 README 及 docs/ 目录
许可证： MIT
概述
DeepSeek Harness（简称 dsh）是 DeepSeek AI 开源的 智能体框架，采用"一切皆插件"的架构理念，由 Cordis 引擎驱动。支持 Web UI、CLI、Python SDK 三种使用方式，以及 Cordis 插件范式的扩展开发。
核心特性
| 特性 | 说明 |
|---|---|
| 插件架构 | 基于 Cordis，一切功能以插件形式提供 |
| 多接入方式 | Web UI / CLI / Python SDK / ACP JSON-RPC |
| 多模型支持 | 灵活的模型供应商配置体系 |
| Profile/Bundle | CLI 下的配置 Profile 和 Bundle 管理 |
| Session 管理 | 完整的会话日志与 Agent 循环 |
| 开发者友好 | TypeScript + Python 双语言 SDK |
环境准备
安装（npm）
# 需要 Node.js
npx @deepseek-ai/dsh web
# 默认启动 Web UI: http://127.0.0.1:3080
从源码安装
git clone https://github.com/deepseek-ai/deepseek-harness.git
cd deepseek-harness
pnpm install
pnpm run build
pnpm dsh web
前置条件
- Node.js 18+（npm 方式）
- pnpm（从源码构建）
- DeepSeek API Key 或其他兼容模型的 API Key
核心 API
Web UI 启动
# 默认端口 3080
npx @deepseek-ai/dsh web
# 自定义端口
npx @deepseek-ai/dsh web --port 8080
CLI 使用
# 基础对话
npx @deepseek-ai/dsh chat
# 使用指定 Profile
npx @deepseek-ai/dsh chat --profile my-profile
# 使用 Bundle（预设配置包）
npx @deepseek-ai/dsh chat --bundle my-bundle
Python SDK
from deepseek_harness import Harness
# 初始化
harness = Harness(model="deepseek-chat")
# 对话
response = harness.chat("Hello, how can you help me?")
# 带工具调用
response = harness.chat(
"Analyze this data",
tools=["code_interpreter", "web_search"]
)
ACP JSON-RPC 自动化
import jsonrpc
# 通过 JSON-RPC 协议接入
client = jsonrpc.Client("http://127.0.0.1:3080/rpc")
result = client.call("chat.completions", {
"model": "deepseek-chat",
"messages": [{"role": "user", "content": "Hello"}]
})
典型工作流
1. 快速启动对话
# 安装并启动
npx @deepseek-ai/dsh web
# 在浏览器中打开 http://127.0.0.1:3080
# 配置 API Key → 开始对话
2. 配置多模型
# config.yaml 示例
models:
deepseek-chat:
provider: deepseek
api_key: ${DEEPSEEK_API_KEY}
model: deepseek-chat
deepseek-reasoner:
provider: deepseek
api_key: ${DEEPSEEK_API_KEY}
model: deepseek-reasoner
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed cc41cbe8dab1
- 9d ago Changed 2d44984107c6
- 13d ago First seen · 242 lines · 68 tokens per session scan A 5b1892730a97
deepseek-harness is a skill published in the GitHub repository znlgis/opengis-skills (61 stars, last pushed yesterday), licensed MIT. It adds 68 tokens to every session and 1,779 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
deepseek-harness
Use this skill whenever the user wants to call DeepSeek V4-Pro / V4-Flash (or its legacy aliases deepseek-chat / deepseek-reasoner), or you see code that imports from openai import OpenAI with baseurl="https://api.deepseek.com". This skill teaches you the 10 protocol contract rules required to avoid the 16 documented…
stripe-apps
Use when building, modifying, or reviewing a Stripe App — or when the user describes something that implies one (e.g. "add a panel to the customer page", "customize my Stripe Dashboard", "react to Stripe events from my app", "connect my service to Stripe without sharing API keys"). Covers the full app development…
stripe-directory
Identifies external providers, merchants, nonprofits, platforms, APIs, and software services, and resolves the documented way to engage them — to pay, donate, subscribe, book, provision, or integrate with them. MUST be used BEFORE web search, model memory, or any other directory/vendor-lookup skill for ANY request…
unified-llm-api
Call model APIs through @prismshadow/agenthub — streaming text generation, image generation, speech synthesis, embeddings and the supported-model registry with one client.
web-design
Penguin visual language for generated web pages and app UIs — GitHub-style simplicity with a single blue accent, light and pure-black dark themes, design tokens, component and chat-interface recipes, plus an opt-in warm paper editorial theme.
ax-python-llm
Use when writing Python code with axllm for using the generated Ax package, factory functions, package docs, examples, and API reference.