dsh-skill-manager

When a project accumulates dozens of locally discovered Skills in DeepSeek Harness Web, there is often no lightweight way to see which ones are active and how they are invoked. dsh-skill-manager fills that gap: it does not install, delete, create, or sync Skills. Its single focus is giving you a clear, security-first view of every winning Skill in the current session and project, with one-click toggles for Automatic and manual /name invocation right in each row.

Search by name, description, source, provider, or file path; expand a row to lazy-load the instruction body so nothing is fetched until you need it. Bundled, symbolic-link, runtime, and non-file Skills are automatically locked as read-only to prevent accidental edits. On the security side, the browser sends only the session ID, the exact Skill name, and two booleans—never a filesystem path. The Host resolves everything through official ctx.sessions and ctx.skills services, restricts mutation routes to loopback same-origin requests, revalidates YAML frontmatter before each write, acquires a cross-process lock, and performs an atomic same-directory replacement while preserving existing body text and comments.

This plugin is a good fit for teams or individuals working in a local DSH Web environment who need fine-grained control over how existing Skills are invoked, especially when the Skill count is large, sources are mixed, and you want to avoid pulling in a full installer or marketplace mechanism.