
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@dsh-std/skill
Advanced tools
English | 中文
Portable declaration and publication contract for lazily loaded Skill instruction assets.
A skills.dsh/v1alpha1 Skill extension declares a kebab-case name, a short catalog description, a package-relative UTF-8 Markdown entry, and optional model/user invocation visibility. Activation publishes the resource with the exported inert null marker, not an executable callback. The protocol does not prescribe a product's prompt assembly, cache, precedence ranks, filesystem layout, or agent loop.
The Host resolves the entry against the package containing dsh-plugin.json, reads the body only when requested, and retracts the catalog entry with its owning activation instance. Same-name effective resources conflict through the standard composition rules.
DeepSeek Harness mapping is supplied automatically by @dsh-std/adapter-dsh; portable components do not import DSH or Cordis packages.
FAQs
[English](README.md) | 中文
The npm package @dsh-std/skill receives a total of 11 weekly downloads. As such, @dsh-std/skill popularity was classified as not popular.
We found that @dsh-std/skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.