dsh-remote-shell
A DSH (DeepSeek Harness) plugin that bundles the remote-shell skill: secure SSH / SFTP / Telnet / WinRM remote operations with an encrypted credential vault (Fernet + PBKDF2-HMAC-SHA256).
中文说明见 README.zh.md。
Installation
From the npm registry (once published):
dsh plugin --profile web add dsh-remote-shell
From a local checkout (development / testing):
dsh plugin --profile web add /path/to/dsh-remote-shell
Then restart dsh web for the plugin to take effect. The skill appears in the skill catalog as remote-shell (provider dsh-remote-shell, source bundled).
Features
The bundled skill provides:
- Remote command execution over SSH / WinRM / Telnet: single commands, batch execution, script execution, remote system information, and health checks.
- SFTP file transfer: upload, download, and directory listing.
- Encrypted credential vault: login/execution scripts never accept plaintext passwords (there is no
-p flag); credentials are always fetched from the encrypted vault. Use credctl to add, list, update, and remove credentials.
- Safety interception: mutating commands are blocked by default and only run after explicit user confirmation (
--auto-confirm).
How it works
The plugin is a Cordis plugin that injects a single skills provider. On load it scans the bundled skills/ directory for SKILL.md files, parses each file's YAML frontmatter, and registers the skill with the host's skill registry (rank 600, source bundled). The provider is immutable: it performs no file watching or polling, and a missing or malformed skill degrades gracefully (skipped, never thrown).
Line-ending policy
The bundled skill files are copied verbatim from the source skill, which uses mixed line endings. .gitattributes pins each file to its source line ending so checkouts (under any core.autocrlf setting) reproduce the source bytes exactly. SKILL.md is pinned to LF because the provider's frontmatter detection requires exact --- lines — a CRLF checkout would make the provider skip the skill entirely.
Development
Run the unit tests (Node.js built-in test runner, no extra tooling):
node --test
Dependencies
The skill's scripts are written in Python 3 and require third-party libraries such as paramiko (SSH/SFTP) and pywinrm (WinRM). Install them on first use following the instructions in the skill's SKILL.md.
Security Notice
Installing this plugin runs third-party code on your machine. The credential vault master password is managed by you; the plugin does not store or transmit it.
License
MIT — see LICENSE.
