Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
By Sarah Gooding - Oct 21, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
dsh-plugin-code-review
Advanced tools
dsh-plugin-code-review
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
dsh-plugin-code-review
Structured code review skill for DeepSeek Harness.
What it does
Teaches the agent a systematic code review process:
- Correctness: logic errors, edge cases, error handling
- Security: input validation, secrets, injection
- Performance: unnecessary loops, N+1, blocking ops
- Style: naming, complexity, dead code
- Testing: coverage, edge cases
Install
dsh plugin --profile your-profile add dsh-plugin-code-review
Usage
Just ask the agent to review code:
- "Review this diff"
- "Check this PR for security issues"
- "Review src/auth.ts"
Output format
[CRITICAL] src/auth.ts:42 - Missing input validation on user email
[WARNING] src/api.ts:18 - Potential SQL injection via string concatenation
[SUGGESTION] src/utils.ts:7 - Function too long, consider splitting
License
MIT -- YYTbit
FAQs
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
We found that dsh-plugin-code-review demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 22 Aug 2026
Related posts
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026