@majinggui/dsh-plugin-skill-manager
DeepSeek Harness Web 客户端的技能管理：扫描用户级技能根目录，列出每项技能及其来源和优先级，禁用某项技能，编辑其 SKILL.md，并从文档或 GitHub 链接安装技能
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:majinggui/dsh-plugin-skill-manager#048f02493cf28d0a3e402ec276e83efe8b30099dPlugin Skill Manager 以 @majinggui/dsh-plugin-skill-manager 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
Skill management for the DeepSeek Harness Web client: a Skills page in Settings that lists every skill the deployment can load from its user-level roots, shows the source and precedence that decide a duplicated name, switches one skill off, opens SKILL.md for editing, and installs skills from uploaded documents or a GitHub repository link.
The page is built from the client's own design system — @deepseek-ai/dsh-client-ui-primitives and the shared --dsw-* tokens — and registers into the official settings.section slot, so it sits in the Settings dialog exactly like a shipped section.
# from npm (once published)
dsh plugin --profile web add @majinggui/dsh-plugin-skill-manager@latest
# from this repository
git clone https://github.com/majinggui/dsh-plugin-skill-manager
cd dsh-plugin-skill-manager && pnpm install && pnpm build
dsh plugin --profile web add link:$(pwd)
Then restart the profile (dsh web, pnpm run dev:web, or the desktop app) and open Settings → Skills.
The package declares one bundle patch (cordis.patch.yml) that inserts the single plugin row mounting both halves: the host half owns one authenticated JSON route, and the browser half registers the Settings page.
| Action | Effect |
|---|---|
| Catalog | Every SKILL.md and flat .md document under the scanned roots, with its source, rank, absolute path, and enablement |
| Scan the shared agents directory | Switches ~/.agents/skills in or out of the scan; off by default, and the choice is remembered |
| Enable / disable | Switches one name off or back on (see how below) |
Edit SKILL.md | Reads the document into an inline editor and saves it against the version it was read from |
| Upload skill documents | Reads .md files and/or skill archives (.zip) in the browser and installs them under the install root |
| Import from GitHub | Reads a repository link and installs every SKILL.md it exposes |
| Replace existing skills | Passes overwrite to an installation, which otherwise skips a name that already exists |
Documents that cannot be parsed are listed with their parse error instead of disappearing, and a name that two roots define is explained inline because its switch applies to the whole name.
A .zip upload installs every directory that holds a SKILL.md as one skill and keeps the files beside it (scripts, references, assets). The single top-level directory Finder and GitHub's "Download ZIP" wrap archives in is stripped first, and an archive with no SKILL.md falls back to its root-level Markdown documents.
bundle.zip
└── pdf-helper/
├── SKILL.md → ~/.dsh/skills/pdf-helper/SKILL.md (normalized frontmatter)
└── scripts/fill.sh → ~/.dsh/skills/pdf-helper/scripts/fill.sh
Entry paths are normalized and refused when absolute or containing .., so extraction cannot escape the install root; encrypted, ZIP64, and unsupported-compression archives are refused with a readable reason.
A standalone plugin has no catalog filter, so disabling writes the two invocation keys the harness already understands into the document's frontmatter:
disable-model-invocation: true
user-invocable: false
That removes the skill from the model catalog, the skill tool, and the / menu. The plugin records the values it replaced in its state file (<dshHome>/skill-manager.json), so enabling restores exactly what the document had before — including removing a key the document never carried. Disabling a document that has no frontmatter is refused rather than guessed at.
| Field | Default | Meaning |
|---|---|---|
dshHome | $DSH_HOME or ~/.dsh | Harness config root; its skills child is scanned and imported into |
agentsHome | $DSH_AGENTS_HOME or ~/.agents | Shared agent config root, the one the page's scan switch controls |
includeAgentsRoot | false | Whether that root is scanned before the user changes the switch; the switch's stored choice wins after that |
extraRoots | [] | Additional managed roots, each with path, source, and rank |
stateFile | <dshHome>/skill-manager.json | Enablement ledger |
installRoot | <dshHome>/skills | Directory that uploads and GitHub imports write into |
githubMaxFiles | 20 | Largest number of documents one GitHub import installs |
githubMaxDocumentBytes | 524288 | Largest accepted GitHub document |
githubTimeoutMs | 30000 | Deadline for one GitHub import |
uploadMaxDocuments | 20 | Largest number of documents and archives one upload installs |
uploadMaxDocumentBytes | 524288 | Largest accepted Markdown document |
zipMaxBytes | 52428800 | Largest archive one upload may carry, before extraction (50 MB) |
zipMaxUncompressedBytes | 209715200 | Largest uncompressed size one archive may reach (200 MB) |
zipMaxMembers | 2000 | Largest number of files one archive may hold |
zipMaxEntryBytes | 67108864 |
Set them where the plugin row is declared:
- insert:
- id: skill-manager
name: dsh-plugin-skill-manager
config:
extraRoots:
- path: ~/team-skills
source: team
rank: 300
Only $DSH_HOME/skills and any configured extraRoots are scanned by default. The shared agents directory ($DSH_AGENTS_HOME/skills, rank 500) is not scanned until the switch on the page turns it on; turning it off again drops its documents from the catalog on the next read. The choice is stored beside the disable records in the state file, so it survives a restart and overrides includeAgentsRoot.
Path confinement is wider than the scan on purpose: reads and writes stay confined to every configured root, so a skill that was switched off while the agents directory was being scanned can still be switched back on after the scan is turned off.
outside-roots.conflict when the document changed in between.SKILL.md.SKILL.md, through the public API, under the configured file, size, and time bounds.pnpm install
pnpm build # tsc -b && tsdown: lib/index.js (host) and lib/client.js (browser)
pnpm typecheck
lib/ is committed so dsh plugin add github:<owner>/<repo> works without a build step; rebuild after changing src/.
Source layout:
| Path | Role |
|---|---|
src/index.ts | Host plugin: configuration and the one route registration |
src/manager.ts | Root resolution, catalog projection, enablement, installation |
src/catalog.ts | Root scanning and tolerant frontmatter parsing |
src/documents.ts | Document normalization, atomic writes, invocation-key editing |
src/github.ts | Repository link parsing and bounded download |
src/http.ts | Request decoding and response encoding |
src/protocol.ts | Wire vocabulary shared by both halves |
src/client/ | The Settings page, its client, its copy, and its stylesheet |
SKILL.md (see above); a deployment that must not touch skill files cannot use this page.MIT
| Largest uncompressed size of one file inside an archive (64 MB) |