DSH Project Wiki：为 DeepSeek Harness 增加可审计的项目级 Wiki
`dsh-project-wiki` 是面向 DeepSeek Harness 的本地优先项目 Wiki 插件，由 yu-xin-c 开发（MIT 许可证）。它旨在解决开发中关键上下文易丢失、新会话难以继承及重读聊天成本高且易引入过期结论的问题。插件将架构知识、设计决策及排障结论沉淀为工作区内的 Markdown 页面，支持原生 Web 查看、编辑和全文检索（基于 FTS5，不含向量搜索）。其核心特性包括提案审核机制（Agent 提案需人工批准方可入库）、来源指纹关联、代码变更后的过期扫描、知识图谱生成及双向链接，并保留完整修订记录。安装需 Node.js 22.19+ 或 24+，通过 np
Read MoreSecurStack DSH 插件：在 DeepSeek Harness 中调用 SecurStack 扫描、策略与诊断
SecurStack DSH 插件是一个面向 DeepSeek Harness 的适配器，旨在让智能体工作流直接调用现有的 `securstack` CLI，而无需重新实现安全工具。该插件主要提供四大核心功能：通过 CLI 执行仓库安全扫描、进行策略门槛检查、运行本地诊断，并在 CLI 支持时返回结构化的 JSON 结果。它复用现有的 SecurStack 认证方式（如 API Key 或命令行登录），并严格遵循保守边界，v1 版本不包含扫描引擎、加密或 Shielding 操作等底层逻辑。安装前需确保环境为 Node.js 20 及以上，并通过 `dsh plugin` 命令启用。该插件适用
Read MoreVariant Analysis: Locate a Bug and Eliminate All Similar Ones
Trail of Bits’ variant-analysis has turned the daily variant analysis work of security engineers into an Agent Skill: after confirming a vulnerability, it extracts the root cause, calibrates with precise patterns, searches the entire codebase while relaxing only one condition at a time, and finally triages and leaves CI rules. This article explains the five-step workflow, the selection of ripgrep, Semgrep and CodeQL, as well as the installation and invocation methods of Claude Code, Codex and Cursor, based on the official SKILL.md, plugin README and policy documents.
Read MoreDifferential Review: Trail of Bits formalizes PR security differential review into an executable workflow
Differential-review is an Agent Skill released by Trail of Bits, which conducts security-focused reviews on PRs, commits and diffs: it classifies tasks by risk rather than line count, uses git history to detect regressions, quantitatively calculates the blast radius, treats missing tests as a higher risk factor, and enforces the output of a Markdown report with line numbers and attack scenarios. This article checks the official SKILL.md, plugin README and documentation website, explaining what problems it solves, how to install it in Claude Code / Codex / the general Skill catalog, as well as three official usage scenarios and inapplicable scenarios.
Read More