Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
By Sarah Gooding - Oct 21, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
dsh-subagent
Advanced tools
dsh-subagent
Structured delegation for dsh - typed result contracts, budgets, no orphans. Name reserved; spec below; first release in development.
dsh-subagent
Structured delegation for dsh - typed result contracts, budgets, no orphans.
A plugin for the DeepSeek Harness (dsh).
Why
"Go do this" without a contract produces "I did something." Delegation deserves a return type.
What it does
- Delegation requests with typed result contracts: fields, format, definition of done
- Budget caps inherited from the parent or overridden per task
- Progress observable from the parent turn
- Results collected into a typed object - not free text
How it fits dsh
A thin layer over the subagent registry; contracts validated on return, mismatches surfaced as first-class failures.
Design principles
- No orphan subagents - every spawn has a collector
- Budgets enforced, not suggested
- The result is data, not vibes
Status
Name reserved, spec locked. Roadmap: 0.1 contracts + collection -> 0.2 budget inheritance -> 0.3 partial-result policies. The first release lands when the 0.1 scope above is fully implemented and tested - not before.
License
MIT
FAQs
Structured delegation for dsh - typed result contracts, budgets, no orphans. Name reserved; spec below; first release in development.
The npm package dsh-subagent receives a total of 0 weekly downloads. As such, dsh-subagent popularity was classified as not popular.
We found that dsh-subagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 20 Aug 2026
Related posts
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026