找技能 · 风险评估版：在 SkillHub 检索时同步看权限与风险
找技能·风险评估版（@laoxi/zhaojineng，v1.0.2）是劳希在 SkillHub 发布的 ai-agent 类 Skill，面向中文用户做安全优先的技能发现与安装。除搜索、分类与推荐外，为每条结果提供风险评估档位（未见风险/观察/谨慎/高风险/未收录）、权限与隐私去向、作者信誉，绿黄优先、红橙降权，安装前强制确认。可通过安装文档安装 @laoxi/zhaojineng，或使用 skillhub CLI 指定 Agent skills 目录。适合在装第三方 Skill 前先看风险与权限的开发者。
Read Morefind-plugin: Search and controlled installation of community plugins in DSH
`find-plugin` is a DSH plugin maintained by graceen2331-prog, designed to simplify the search, review, and secure installation process of community plugins. The plugin registers two tools, `find_plugin` and `install_plugin`, without relying on a database or a Web UI. `find_plugin` searches GitHub for repositories with the `topic:dsh-plugin` topic, performs static checks, risk disclosure, and filters invalid candidates, returning up to five secure options. `install_plugin` executes the installation by obtaining a fixed Commit SHA and re-verifying the Bundle, utilizing the DSH approval mechanism (which allows only one-time authorization) and the official plugin management system.
Read Moredsh-desktop-safe-market：Review-First, Install-Second DSH Plugin Marketplace
`bruc3van/dsh-desktop-safe-market` is a community plugin marketplace for DeepSeek Harness (DSH) with a core concept of "review first, install later." It is not an official store but enhances the security of plugin installation by integrating a security review process. Plugins themselves do not have an interface for executing installation. Instead, they fill security review prompts into a new session, allowing the user to confirm and then let the agent read the repository code for review. After the review passes, the official installation command is executed (prioritizing npm, followed by pre-built packages or source code). This mechanism ensures that the review and installation are structurally inseparable. The plugin provides curated plugin sources (daily snapshots based on manual selection), an installed management panel (supporting enable, disable, uninstall, and secure upgrade), and a read-only skill page. The secure upgrade function first confirms the upstream new version.
Read More