pet-vaccine-record-wallet：把宠物接种凭证整理成可分享的钱包卡
pet-vaccine-record-wallet 是 SkillHub 上 life-service 分类的社区 Skill，坐标 @user_15292d5a/yjkj-pet-vaccine-record-wallet，版本 1.0.0，发布者 user_15292d5a，requires_api_key=false。它把散落的宠物疫苗接种凭证整理成四样东西：一张可分享的钱包卡、一份文档索引、一个续期跟踪器、一份缺证清单，用于在寄养、出行、社区登记等需要证明的场景下快速核对。它明确不给兽医建议，不替代执业兽医判断。资料中未提供官方安装命令与配置字段，因此本文不提供命令，接入前以官方页面为准。
Read MoreAgent凭证安全与沙箱隔离：给 Agent 系统的凭证泄露风险加五层防线
这个Skill面向Agent系统中API Key、Token、数据库密码等凭证的泄露风险，把AWS/Cloudflow生产实践里的防护手段整理成可执行的审计与部署清单。防护思路分五层：Proxy Pattern、OAuth Delegation、STS临时凭证、工具输出脱敏、TEE可信执行，并附带沙箱隔离评估矩阵和Confused Deputy防御策略。官方简介给出的量级是5分钟自动审计、2-4小时完成全五层部署。文章按定位、核心功能、安装启用、典型用法、适用场景与注意分节说明，冲突的评分与下载数以官方页面为准，未核实的安装命令不写。
Read More财务文档官：凭证与档案合规的 Agent Skill
财务文档官（@user_8965db71/fin-doc-officer，v1.1.1）是 SkillHub 社区专业类 Skill，无需 API Key。覆盖凭证管理、制度文件、档案合规、模板库与文档自动化五条工作流，含检查点与失败降级。文章说明定位、核心能力、skillhub 安装命令及 Cursor 等 skills 目录，并摘录官方凭证归档与档案合规检查示例，适合财务共享与档案岗位在 Agent 中按 SOP 协作。
Read Moredsh-credentials-mysql: MySQL Credential Store for DeepSeek Harness
`dsh-credentials-mysql` is a plugin-based credentials component for DeepSeek Harness, designed to address the inability of traditional local file storage to be shared across multiple instances. The plugin implements persistent credential storage using MySQL, supports AES-256-GCM field-level encryption, and enables multi-process concurrent access. Its core features include using InnoDB transactions and row locks to ensure data consistency, built-in connection pooling, and the ability to be deployed alongside other MySQL plugins in the ecosystem. Users configure database connection, encryption keys, table prefix, and other parameters via environment variables. After installation, the plugin takes over `ctx.credentials` and provides read/write capabilities consistent with local storage, making it suitable for building distributed DSH deployment environments.
Read MoreKeyringSeam: macOS Keychain Credential Provider for DeepSeek Harness
`fieldnote-ops/keyringseam` is a macOS Keychain credential provider plugin for DeepSeek Harness (DSH), designed to address the weak permission boundaries of managed credentials within the `ctx.credentials` seam. This project is independently maintained, supports macOS 13+, is licensed under the MIT license, and the current public version is v0.2.0-rc.1. Its core mechanism involves using an Apple-notarized Developer ID-signed Broker application to store sensitive values in a private Data Protection Keychain access group, and explicitly requiring device owner authentication before each credential retrieval, setting, or cancellation. The plugin provides
Read More