
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@dsh-std/skill
Advanced tools
English | 中文
Portable declaration and publication contract for lazily loaded Skill instruction assets.
A skills.dsh/v1alpha1 Skill extension declares a kebab-case name, a short catalog description, a package-relative UTF-8 Markdown entry, and optional model/user invocation visibility. Activation publishes the resource with the exported inert null marker, not an executable callback. The protocol does not prescribe a product's prompt assembly, cache, precedence ranks, filesystem layout, or agent loop.
The Host resolves the entry against the package containing dsh-plugin.json, reads the body only when requested, and retracts the catalog entry with its owning activation instance. Same-name effective resources conflict through the standard composition rules.
DeepSeek Harness mapping is supplied automatically by @dsh-std/adapter-dsh; portable components do not import DSH or Cordis packages.
FAQs
[English](README.md) | 中文
The npm package @dsh-std/skill receives a total of 11 weekly downloads. As such, @dsh-std/skill popularity was classified as not popular.
We found that @dsh-std/skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.