drowned-fish1/deepseek-harness-skillx
DeepSeek Harness plugin for safely discovering, auditing, and adopting external Agent Skills — prompt-injectio
skillx is a safety-oriented meta-skill for AI agents and an installable DeepSeek Harness plugin: when local capabilities fall short, it teaches the agent to search, compare, review, and temporarily adopt external Agent Skills. It checks project-local and locally installed Skills first; external Skills are temporary references by default, and permanent installation requires reading every file, pinning the version, and an explicit user request. If a candidate Skill requires script execution, dependency installation, or broad project access, skillx marks the risk, explains the reason, and requests user confirmation first. Evaluation is read-only — it never runs a candidate Skill's scripts or installs its dependencies during review. It is a discovery/adoption workflow, not an antivirus engine: it does not replace malware scanning, sandboxing, or human review.
Install
dsh plugin --profile web add github:drowned-fish1/deepseek-harness-skillxEN edition README.en.md verified 2026-09-02 (repo drowned-fish1/deepseek-harness-skillx). Native, build-free Harness bundle installing directly from GitHub: dsh plugin --profile web add github:drowned-fish1/deepseek-harness-skillx; uninstall dsh plugin --profile web remove dsh-skillx. Safety-oriented meta-skill: discovery and adoption workflow, not an antivirus engine.
Compatibility
DSH web profile; build-free bundle; read-only candidate evaluation; explicit-user-request permanent installs.
Details
- Repo: drowned-fish1/deepseek-harness-skillx
- Category: Agent Capabilities
- Stars: 2
- Version: git github:drowned-fish1/deepseek-harness-skillx
- Last push: 2026-08-13
- First seen: 2026-05-30
Recent updates
Search/compare/review/temporarily-adopt external Skills; local-first; temp-by-default, permanent only on explicit request (read-all + pin); risk marking + confirmations; read-only eval.
FAQ
- Does it install third-party Skills by itself?
- No — external Skills are temporary references by default; permanent installation requires reading every file, pinning the version, and an explicit user request.
- Does it run a candidate's code during review?
- No — evaluation is read-only: candidate scripts are never executed and dependencies never installed during review.
- How do I install it?
- dsh plugin --profile web add github:drowned-fish1/deepseek-harness-skillx (build-free); uninstall with remove dsh-skillx.
Alternatives
Starfie1d1272/dsh-github-skills · Moximxxx/dsh-find-skill · Jesse-njx/dsh-skillport