dsh-skill-hub

dsh-skill-hub

中文版 | English

In-GUI skill hub for DeepSeek Harness — browse the full ctx.skills catalog, toggle skills, inspect bodies, fix discovery issues, install from the market, and scaffold new ones.

Host runs in the dsh process via official SDKs only; browser renders through official slots. No dsh source changes.

Quick start

dsh plugin --profile web add dsh-skill-hub
# restart dsh web → Settings → 技能 → Market → scan → import

Requires Node ^22.19 || >=24 + dsh web >=0.1.7-alpha.1 <0.3.

Two surfaces — the hub panel lives at Settings → 技能, and this plugin's own configuration card sits on the plugin's page in the Plugins manager (sidebar → 插件 → dsh-skill-hub). The card is registered by the plugin itself into the plugins.bundle.config slot — dsh has no auto-generated config page — and covers the master switch, announce-to-agent, dot colors, usage display and the stats window/interval.

Features

Settings → 技能 — 3 tabs: Sources (skills, flat/grouped + project tree), Scenes (custom tag groups), Market (install + update).

• Browse — every root of the ctx.skills registry: project / user / bundled + third-party providers. Search across name, description, displayName; filter by source and invocation (model / user); sort by name, added time, or usage. Same-name skills from different sources get a duplicate badge instead of silently hiding.
• Toggle — per-skill switches and per-group tri-state switches with a conflict dialog (close all / keep on). Disabling renames the discovery file (never deletes); disabled skills stay inspectable and re-enableable from their detail page. Only ~/.dsh/skills & ~/.agents/skills are writable; everything else is read-only.
• Organize — scenes (tags) plus auto-aggregated source collections, all drag-reorderable and persisted in ~/.dsh/dsh-skill-hub.json. Edit mode reveals delete/reorder without cluttering the read view.
• Diagnose & fix — files the provider skips (missing frontmatter, bad YAML, name mismatch, short description) show up with reasons; auto-fixable ones (e.g. unquoted : in descriptions) get a one-click Fix button.
• Scaffold — new-skill wizard writing to ~/.dsh/skills or ~/.agents/skills (SKILL.md template below).
• Market — built-in curated repos plus custom owner/repo sources. Any top-level directory containing SKILL.md scans as a root (no allowlist), and a SKILL.md at the repo root itself scans as a single skill named after the repo (minus repo tooling such as .github/). Async import with byte-level progress and cancel. Each source pins a version — click the ref badge to switch between releases, branches, or a custom ref.
• Track updates — imported skills record a repo + commit snapshot. Check all / update-all, per-source badges (installed / updatable / deleted upstream / new release). Sync overwrites local edits (with confirm); upstream deletions move into a restorable trash that keeps source and scene membership.
• Stats — per-skill call counts + last-used times from session logs (incremental cache), group summaries; window and scan interval live-configurable from the settings card.
• Settings card — registered on the plugin's own page in the Plugins manager (sidebar → 插件 → dsh-skill-hub; collapsed until you expand the title): master switch, announce-to-agent, invocation dot colors, usage display toggles, stats window/interval.

Why not just the read-only browser?

dsh-skill-manager browses, dsh-skill-importer / dsh-find-skill import. This plugin manages.

Capability	read-only browser	dsh-skill-hub
Catalog	user roots, self-scanned	ctx.skills registry, all roots + third-party
Toggle	❌	✅ per-skill + per-group, never deletes
Diagnostics	❌	✅ reasons + one-click fix
Market	❌	✅ built-in + custom, version pins, update-all
Source tracking	❌	✅ check/sync/trash with restore
Stats	❌	✅ counts + last-used

Scaffold format (SKILL.md):

---
name: my-skill
description: One line when the agent should use this skill.
---
# my-skill
Body...

How it works

GitHub repo ──scan/import──▶ ~/.dsh/skills
     ▲                          │
     └─check/sync/delete── ctx.skills ◀─ provider
                                │ snapshot/get
                                ▼
                    /api/skill-hub/* ──▶ Panel (Settings → 技能)

Host uses only ctx.skills.snapshot/get, ctx.webServer.register, ctx.systemPrompt.section. Routes sit behind dsh's own /api trust fence (loopback / the listener's bind address / --trusted-host), JSON.

HTTP API

Endpoint	Method	Purpose
/api/skill-hub/catalog?cwd=	GET	skills + disabled + diagnostics + duplicates
/api/skill-hub/skill?name=&cwd=	GET	skill body (works for disabled too)
/api/skill-hub/skill/delete	POST	move to trash (snapshots source+scenes)
/api/skill-hub/toggle	POST	{name, enabled}
/api/skill-hub/toggle-batch	POST	{names, enabled}
/api/skill-hub/create	POST	{name, description?, root?}
/api/skill-hub/diagnostic/fix	POST	{path} auto-fix frontmatter
/api/skill-hub/stats	GET	invocation counts
/api/skill-hub/config	GET/POST	runtime config (null clears)
/api/skill-hub/groups	GET	tags + collections + orders
/api/skill-hub/tag etc.	POST	create/rename, delete, set members, reorder
/api/skill-hub/market etc.	GET/POST	list/add/delete/pin sources; …/source/check + …/source/sync update them
/api/skill-hub/market/source/versions?repo=	GET	releases + branches for the version picker
/api/skill-hub/repo?repo=	GET	discover (any root)
/api/skill-hub/repo/import	POST	async job {jobId, total, totalBytes}
/api/skill-hub/repo/import/progress?jobId=	GET	poll job
/api/skill-hub/repo/import/cancel	POST	cancel job
/api/skill-hub/sources etc.	GET/POST	list/check/sync/delete/restore/clear trash
/api/skill-hub/update	GET	plugin latest release
unknown /api/skill-hub/*	GET/POST	404 {error} naming the path — a typo must not read as an auth failure (the SPA fallback answers 401 for /api/* it does not own)

Development

npm run typecheck  # tsc --noEmit
npm test           # 295 tests, 16 suites
npm run build      # tsc + tsdown → lib/index.js + lib/client.js

Don't run two dsh web on the same $DSH_HOME + cwd — no session-log lock (seq gap corruption). Use separate DSH_HOME.

Troubleshooting

• duplicate loader entry id: skill-hub — remove the duplicate install (keep one dsh plugin add method).
• Skill missing — check the diagnostics section (frontmatter / name mismatch / short description / two discovery forms claiming the same name: a <name>/SKILL.md bundle and a <name>.md file can coexist on disk, and the registry keeps only one of them).
• Empty source group — its skills were deleted, or their disabled records were lost (sidecar restored/hand-edited). Startup reconciles .disabled files on disk and prunes records whose file is gone (a record left behind by a hand-deleted directory used to be un-actionable: enable, create and delete all failed). Source groups with no visible member are no longer rendered.
• A skill cannot be created / stays "disabled" — the disabled record pointed at a file that no longer exists. At startup (and on the next enable attempt) the record is repointed at the surviving .disabled file, or dropped so the name is free again.
• Dots missing in / menu — dsh internals changed; catalog still works.
• Settings card missing — open the plugin in the Plugins manager (sidebar → 插件 → dsh-skill-hub) and expand the 「技能中枢」 card at the top of the page (collapsed by default). On dsh older than 0.1.7-alpha.1 this plugin does not load at all (the settings API it targets does not exist there).

Community

Issues · Discussions · Showcase · Market PR · Discord

License

MIT — LICENSE.