
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
dsh-sql-optimizer
Advanced tools
SQL query optimizer skill for DSH: diagnoses and fixes slow queries using EXPLAIN/EXPLAIN ANALYZE plan reading, index design, query rewrites, statistics, and schema-aware tuning.
SQL 查询优化器技能插件 | SQL Query Optimizer Skill Plugin
License: MIT
Category: skill
Category 分类: 技能
DSH plugin that adds SQL query optimization capabilities to DeepSeek Harness. It diagnoses and fixes slow SQL queries using EXPLAIN/EXPLAIN ANALYZE plan reading, index design, query rewrites, statistics, and schema-aware tuning across PostgreSQL, MySQL/MariaDB, SQL Server, Oracle, and SQLite.
基于 JayRHa/AgentSkills 的 sql-optimizer skill 移植。
本插件为 DeepSeek Harness 添加 SQL 查询优化能力。使用 EXPLAIN/EXPLAIN ANALYZE 执行计划分析、索引设计、查询重写、统计信息和 Schema 感知调优,诊断并修复慢 SQL 查询。支持 PostgreSQL、MySQL/MariaDB、SQL Server、Oracle 和 SQLite。
sql-optimizer as a runtime skill for on-demand loading via the skill toolCopy or symlink the plugin into your DSH plugins directory:
# Copy plugin
Copy-Item -Recurse "E:\DeepSeek_Harness\plugins\dsh-sql-optimizer" "$env:DSH_HOME\plugins\"
# Or symlink (requires admin on Windows)
New-Item -ItemType SymbolicLink -Path "$env:DSH_HOME\plugins\dsh-sql-optimizer" -Target "E:\DeepSeek_Harness\plugins\dsh-sql-optimizer"
Then add to your profile's cordis.patch.yml:
- id: sql-optimizer
name: dsh-sql-optimizer
If you only need the skill without the prompt injection, copy SKILL.md to a DSH skill directory:
# User-level skill
Copy-Item "E:\DeepSeek_Harness\plugins\dsh-sql-optimizer\SKILL.md" "$env:DSH_HOME\skills\sql-optimizer\SKILL.md"
# Or project-level skill (in your project root)
Copy-Item "E:\DeepSeek_Harness\plugins\dsh-sql-optimizer\SKILL.md" ".dsh\skills\sql-optimizer\SKILL.md"
The skill will be discovered automatically by dsh-skill-filesystem.
In your agent.cordis.yml:
insert:
- id: sql-optimizer
name: dsh-sql-optimizer
Once installed and registered, the SQL optimizer instructions are automatically included in the system prompt. The model will apply SQL optimization knowledge when you ask about slow queries.
安装并注册后,SQL 优化器指令会自动包含在系统提示中。当你询问慢查询时,模型会应用 SQL 优化知识。
skill tool / 通过 skill 工具按需加载)skill(name="sql-optimizer")
This loads the full SKILL.md content into the conversation context.
The skill activates when you say things like:
| Engine | EXPLAIN Command |
|---|---|
| PostgreSQL | EXPLAIN (ANALYZE, BUFFERS, FORMAT TEXT) |
| MySQL / MariaDB | EXPLAIN ANALYZE or EXPLAIN FORMAT=TREE |
| SQL Server | SET STATISTICS XML ON |
| Oracle | EXPLAIN PLAN FOR + DBMS_XPLAN.DISPLAY |
| SQLite | EXPLAIN QUERY PLAN |
User: 这个查询很慢,帮我优化一下:
SELECT o.*, u.name FROM orders o
JOIN users u ON o.user_id = u.id
WHERE o.status = 'pending'
ORDER BY o.created_at DESC
LIMIT 50;
Agent: [Captures EXPLAIN ANALYZE output, identifies the dominant cost,
proposes index creation, rewrites query if needed, verifies with
before/after measurements]
dsh-sql-optimizer/
├── package.json # DSH plugin manifest with dsh.plugin declaration
├── cordis.patch.yml # Cordis composition patch (registers plugin row)
├── index.js # Plugin entry: prompt section + skill registration
├── SKILL.md # Full SQL optimizer skill content
└── README.md # This file
FAQs
SQL query optimizer skill for DSH: diagnoses and fixes slow queries using EXPLAIN/EXPLAIN ANALYZE plan reading, index design, query rewrites, statistics, and schema-aware tuning.
We found that dsh-sql-optimizer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.