
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-openspec
Advanced tools
OpenSpec (spec-driven development) for DeepSeek Harness: bundled SDD workflow skills plus native tools wrapping the openspec CLI
OpenSpec(规格驱动开发)for DeepSeek Harness(dsh)。
一个 Cordis 插件,通过两条互补通道把 OpenSpec 的能力注入 dsh agent:
ctx.skills 上注册 12 个捆绑的 OpenSpec SDD 工作流技能
(openspec-propose、openspec-explore、openspec-apply-change、
openspec-verify-change、openspec-archive-change 等),与上游
skills/ 目录逐字同步。模型端由 dsh 自带的 skill 目录机制(<system-reminder>
skill 工具)呈现,开箱即用。ctx.tools 上注册 6 个原生工具,封装 openspec CLI 并返回
结构化结果(stdout/stderr/退出码 + 解析后的 JSON):
openspec_context、openspec_run、openspec_status、openspec_list、
openspec_validate、openspec_init。# 需要 pnpm;profile 可以是 web / headless / 自定义
dsh plugin --profile web add /path/to/dsh-openspec
# 然后重启 GUI / 运行 headless 会话
插件声明了 dsh.bundle.patch,dsh plugin 会自动把它加入 profile 的 bundle 层;
也可以在 profile 的 cordis.patch.yml 手动挂载:
- insert:
- id: openspec
name: dsh-openspec
config: {}
| 字段 | 默认 | 含义 |
|---|---|---|
cliPath | openspec | CLI 可执行文件(经 PATH 解析) |
skillsDir | 包内 skills/ | 技能目录覆盖 |
skillsEnabled | true | 是否注册技能 provider |
toolsEnabled | true | 是否注册原生工具 |
skillRank | 600 | 捆绑技能 rank(项目/用户技能优先) |
timeoutMs | 60000 | 每次 CLI 调用预算 |
initTools | agents | openspec_init 默认 --tools |
npm test # node:test 单元测试(13 例,无需 dsh 运行时)
端到端验证:把插件装入一个 headless profile(见仓库根 README),运行
dsh --profile headless "…" 会话确认技能目录与工具可见、openspec_context 可用。
skills/ 是上游 Fission-AI/OpenSpec 仓库 skills/ 目录的逐字拷贝(去掉了
README.md)。上游技能更新时,从
https://github.com/Fission-AI/OpenSpec/tree/main/skills 重新拷贝即可。
MIT。捆绑的 OpenSpec 技能版权归 OpenSpec 项目(MIT)。
FAQs
OpenSpec (spec-driven development) for DeepSeek Harness: bundled SDD workflow skills plus native tools wrapping the openspec CLI
The npm package dsh-openspec receives a total of 7 weekly downloads. As such, dsh-openspec popularity was classified as not popular.
We found that dsh-openspec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.