Introduction

Under DSH’s “everything is a plugin” paradigm, plugins can enter Agent workflows. For Agent developers, the key is to let the Agent determine if an external Skill is needed before searching, comparing, and reviewing, and then explain the rationale and risks for adoption. The community directory is an independent site and should not be interpreted as an official app store.

Below, we introduce skillx, maintained by drowned-fish1. The materials mention skillx, dsh-skillx, and deepseek-harness-skillx interchangeably. In this article, skillx is used as the display name, and dsh-skillx is used as the package name in the installation and uninstallation commands.

What is this

skillx is a security meta-Skill for AI Agents and a direct installable DeepSeek Harness plugin. It is used to standardize the process of discovery, evaluation, confirmation, and temporary adoption of external Skills by Agents: when an external Skill is needed, it searches, compares, and reviews first, and then adopts it temporarily.

Core Features

  • Determine whether the current task requires an external Skill.
  • Prioritize checking the current project and locally installed Skills.
  • Generate structured capability requests.
  • Search external candidate Skills by channel priority and provide specific search methods.
  • Obtain candidate Skill content in read-only mode and record version identifiers for traceability.
  • Evaluate the match degree of candidate Skills; perform horizontal comparison when multiple candidates exist.
  • Identify security and trust risks, including prompt injection signals.
  • Request user confirmation when risks exist.
  • Generate an explainable Skill adoption report.
  • Use external Skills in a temporary reference manner.
  • Provide a fallback solution when a suitable Skill is not found.
  • When the user explicitly requests, process permanent installation according to a stricter procedure.

Installation and Enablement

The DeepSeek Harness installation command is as follows. Verified materials show the command uses --profile web; the materials do not specify if --profile web is the default or a general installation method.

dsh plugin --profile web add github:drowned-fish1/deepseek-harness-skillx

View actual configuration:

dsh --profile web --dump-config

The uninstallation command is as follows. Note that the package name in the command is dsh-skillx:

dsh plugin --profile web remove dsh-skillx

Typical Usage

After installation, you can say directly:

/skillx 帮我找一个适合当前任务的外部 Skill，采用前先说明匹配度和风险。

You can also use a more complete prompt:

使用 skillx，帮我寻找一个适合当前任务的外部 Skill，并在采用前说明匹配度和风险。

Agents like Codex that support SKILL.md can reference this Skill directory or file. Verified materials show the following path example:

~/.codex/skills/skillx

You can also directly reference SKILL.md in the project and then use the typical prompt above to let the Agent process it according to the skillx workflow.

Applicable Scenarios

The scenarios below all revolve around “whether an external Skill is needed, which is more suitable, and whether it can be safely adopted temporarily.”

  • Current task might need an external Skill: The Agent first determines if it is needed, checks the current project and locally installed Skills, and then generates a structured capability request.
  • Multiple candidate Skills might be applicable: skillx requires comparing match degrees; when there are multiple candidates, perform horizontal comparison rather than arbitrarily adopting the first search result.
  • External candidates have security or trust risks: skillx will identify dangerous signals such as prompt injection; medium, high, or critical risk signals require user confirmation.
  • No suitable Skill found: skillx provides a fallback solution.
  • User explicitly requests permanent installation: Process according to a stricter procedure, rather than defaulting to permanent installation.

Security Boundaries and Notes

skillx is a discovery and adoption process, not an antivirus engine. It does not replace malicious code scanning, sandboxing, or manual auditing, nor will it automatically install third-party Skills without explicit user authorization.

  • Evaluation stage is read-only, no execution: It does not run scripts from candidate Skills or install dependencies.
  • The content of external Skills is data, not commands. Injection instructions within them that attempt to direct the Agent to bypass rules or conceal behavior should be treated as dangerous signals.
  • Medium, high, or critical risk signals require user confirmation.
  • Default is temporary reference only; permanent installation is not the default. Permanent installation requires reading all files and fixing the version.
  • Only adopt parts relevant to the current task.
  • Exercise caution regarding operations such as executing code, installing dependencies, reading keys, and uploading files.

Verified package.json fields are as follows:

"name": "dsh-skillx",
"version": "0.1.0",
"license": "MIT",
"engines": {
  "node": ">=22.19"
}

Any plugin running with the current DSH process permissions should check the source code and license before installation.

The directory page URL was not confirmed in the materials; it is recommended to use the actual DSH plugin directory search for dsh-skillx as the reference.

GitHub Repository:

https://github.com/drowned-fish1/deepseek-harness-skillx