
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
WPS / 金山文档 cloud-docs integration for DeepSeek Harness: official SkillHub MCP (https://mcp-center.wps.cn/skill_hub/mcp), custom browser authorization (auth-guide + exchange-poll token), WPS cloud-doc tools under mcp__wps__*, wps_status/wps_oauth_start/wps
English | 中文
WPS / 金山文档 (WPS Cloud Docs) integration for DeepSeek Harness (DSH).
Talk to your WPS cloud drive in the DSH conversation: list / search / read / create /
upload-download cloud documents, and read / write their text / spreadsheet /
presentation / PDF content. It connects to the official Kingsoft SkillHub MCP
(https://mcp-center.wps.cn/skill_hub/mcp) and registers its tools as mcp__wps__*.
~/.dsh/dsh-wps.json (mode 0600).mcp__wps__<name> tools + 4 helper tools (wps_status /
wps_oauth_start / wps_test / wps_clear) + a web settings panel "WPS".dsh plugin --profile web add dsh-wps
# or from Git:
# dsh plugin --profile web add github.com/zhengjy01/dsh-wps
Restart, then trigger authorization (browser opens the WPS login page, use a personal WPS account — enterprise accounts are rejected). After that you can just say things like "列一下我的 WPS 云文档根目录".
| You say | Tool |
|---|---|
| "看看我最近的 WPS 文件" | mcp__wps__list_latest_items |
| "列我的云文档根目录" | mcp__wps__list_my_files |
| "搜含『周报』的文件" | mcp__wps__search_files |
| "读这个文档/表/演示" | read_file / sheet.get_range_data / read_slide |
| "新建一个 docx,内容是……" | create_file_with_content |
| "把这个演示导出 PDF" | wpp.export.export.pdf |
Full tool list = whatever wps_test reports (558 tools).
mcp-center.wps.cn/.well-known/oauth-authorization-server returns 404, so WPS uses a
custom flow, not MCP OAuth discovery: generate auth_code → open
https://mcp-center.wps.cn/kdocs-auth/auth-guide?auth_code=<uuid> → user logs in →
poll POST https://api.wps.cn/office/v5/ai/skill_hub/wps_auth/exchange (body {code})
every second until {code:200, token}. 403 = enterprise account rejected, 409 = cancelled.
The token is then the Bearer credential on every JSON-RPC call to the SkillHub MCP.
dsh-wps/
├── src/
│ ├── index.ts # cordis plugin entry (apply + helper tools + announcement)
│ ├── store.ts # token store (~/.dsh/dsh-wps.json, 0600)
│ ├── auth.ts # browser authorization (auth-guide + exchange poll)
│ ├── mcp.ts # JSON-RPC-over-HTTP MCP client + dynamic mcp__wps__* registration
│ ├── routes.ts # /api/dsh-wps/* (settings panel)
│ └── client/ # web settings panel "WPS"
├── cordis.patch.yml # bundle patch (insert wps row)
├── tsdown.config.ts # host + client bundle build
└── package.json # dsh.bundle.patch declaration
MIT
FAQs
WPS / 金山文档 cloud-docs integration for DeepSeek Harness: official SkillHub MCP (https://mcp-center.wps.cn/skill_hub/mcp), custom browser authorization (auth-guide + exchange-poll token), WPS cloud-doc tools under mcp__wps__*, wps_status/wps_oauth_start/wps
The npm package dsh-wps receives a total of 0 weekly downloads. As such, dsh-wps popularity was classified as not popular.
We found that dsh-wps demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.