
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
dsh-skill-authoring
Advanced tools
Ships a skill that documents how to write, review and verify DSH skills: SKILL.md frontmatter rules, how to phrase a description so it triggers, length and splitting guidance, and an A/B check that the skill actually changes agent behaviour.
一个 DSH 插件,内容只有一份技能:安装时把包内的 skills/ 注册为一个技能根,于是这份技能随插件进入 agent 的技能目录。
dsh plugin --profile web add dsh-skill-authoring
references/、什么情况不该为数字硬拆scripts/check-skill.js 一次查 frontmatter / 必填字段 / 文件引用 / 站内锚点 / §N 交叉引用 / 篇幅,可传技能目录或技能根目录,支持 --jsonpackage.json # dsh.bundle.patch → cordis.patch.yml
cordis.patch.yml # 插入一行 @deepseek-ai/dsh-skill-filesystem,customSkillDirs 指向 skills/
skills/
dsh-skill-authoring/
SKILL.md
scripts/
check-skill.js
cordis.patch.yml 用的机制和 DSH 自带 agent preset 装载自己的技能是同一套:!!js 里的 baseUrl 解析到本包,所以路径跟着安装位置走。
scripts/check-skill.js 是零依赖的 Node 脚本(scripts/package.json 里只写了一行 {"type": "commonjs"},用来抵消本包 "type": "module" 对 .js 的作用域,让脚本在包内仍按 CommonJS 跑)。它只读文件、不修改任何东西,可以脱离 DSH 直接跑:
node skills/dsh-skill-authoring/scripts/check-skill.js <技能目录>
MIT
FAQs

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.