
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
dsh-plugin-hello
Advanced tools
A minimal DeepSeek Harness community plugin that adds a callable hello tool
A minimal DeepSeek Harness community plugin. It registers a single model-callable tool, hello, that greets a caller by name. It is the smallest complete example of a dsh-plugin bundle and a good starting point for a first contribution.
When the plugin loads, it registers the hello tool on ctx.tools:
name (string, required) — the person to greet."<greeting>, <name>!" — for example Hello, Ada!.The greeting prefix is configurable and defaults to Hello.
dsh plugin forwards to pnpm inside the profile directory, so any pnpm install form works:
dsh plugin --profile demo add github:you/dsh-plugin-hello
The first run initializes the profile with @deepseek-ai/dsh-base, links this package, and appends it to the profile's dsh.profile.bundles because package.json declares dsh.bundle. A git install fetches sources, so pnpm runs the prepare script to build lib/ from src/. pnpm 10+ refuses that script until it is allowlisted; dsh prints the exact allowBuilds entry to copy into the profile's pnpm-workspace.yaml. Verify the composed layer, then boot:
dsh --profile demo --dump-config # shows a "# == dsh-plugin-hello" layer
dsh --profile demo
Ask the model: Use the hello tool to greet Ada. It calls hello and receives Hello, Ada!.
Set a custom greeting by overriding the row in the profile's cordis.patch.yml:
- id: hello
name: dsh-plugin-hello
config:
greeting: Howdy
Invalid configuration fails the load.
pnpm install
pnpm run typecheck
pnpm run build # emits lib/index.js and lib/index.d.ts
pnpm run test
hello/
├── package.json # bundle manifest (dsh.bundle), scripts, deps
├── cordis.patch.yml # the configuration layer the bundle inserts
├── src/index.ts # the plugin: name / inject / Config / apply
├── tests/hello.spec.ts
├── tsconfig.json
└── vitest.config.ts
FAQs
A minimal DeepSeek Harness community plugin that adds a callable hello tool
The npm package dsh-plugin-hello receives a total of 6 weekly downloads. As such, dsh-plugin-hello popularity was classified as not popular.
We found that dsh-plugin-hello demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.