网络安全攻防指南：把渗透测试到应急响应收敛进一个 Skill
网络安全攻防指南是一个面向安全攻防场景的 Skill，坐标 @user_3c6cb52e/self-ent-tech-cybersecurity，版本 2.0.1，来源 community，分类 it-ops-security，标签 requires_api_key=false，发布者 user_3c6cb52e。官方简介称其覆盖渗透测试、漏洞分析、安全加固与应急响应的实战技术体系。本文依据已抓取资料整理：资料中评分 100000、下载 1400、安装 0，与任务线索给出的 99254、1331 存在差异，文中已说明以抓取资料为准。需要指出的是，本次抓取 SkillHub 页面与接口地址均失败，因此该 Skill 的 SKILL.md 正文、具体安装命令、目录路径与配置字段均无法核实，本文未编写任何未经核实的安装示例或调用示例，仅说明了通用 SKILL.md 格式的惯例并建议读者以官方页面为准。此外，该 Skill 来源为社区提交，安装量显示为 0，落地前建议自行审阅其正文并确认权限范围。
Read Moredsh-process-guard：防止 DSH 主机与浏览器被误杀的进程防护插件
`dsh-process-guard` 是 DSH 生态的安全加固插件，旨在防止智能体误杀 DSH 服务器进程。它拦截通过进程名称、通配符等危险模式终止进程的命令，仅允许通过显式 PID 或受控句柄终止进程。插件提供 `deny` 和 `ask` 两种模式，默认安全拦截，需配合 `dsh` 0.1.5-rc.3 以上版本使用，适用于浏览器环境中的自动化任务，以提升会话稳定性。
Read Moredsh-auth-gate: DeepSeek Harness Authentication and Security Hardening Plugin
`dsh-auth-gate` is a security hardening plugin for DeepSeek Harness, designed to address the risk of unauthorized access to local development tools in network scenarios such as Docker and reverse proxies. It provides Bearer token authentication for HTTP and WebSocket routes and supports session login and fail-closed mode. The plugin manages credentials through environment variables and requires specifying a Patch file after installation to enable it. Note that it does not support ACP/SDK channels, does not record audit logs, and lacks user isolation; in reverse proxy scenarios, it is recommended to configure rate limiting at the edge layer.
Read MoreDeepSeek Harness Plugin: dsh-security-hardening
The DeepSeek Harness (DSH) plugin `dsh-security-hardening` is designed to address security pain points in agent development through a modular approach. Developed by maintainer `satan9394` and classified under security hardening, its core features include implementing the STRIDE threat modeling framework and constructing a three-tier boundary system model, providing agents with a structured security protection approach. Since the documentation does not provide specific installation commands or operational details, users must visit the directory page or GitHub repository to obtain the relevant information. When using it, attention should be paid to permission control and source-code review, ensuring that it runs with the current process's privileges and complies with security standards.
Read More