dsh-skill-pack-security v1.3.0

Added

• Three new skills in both language editions (8 skills total), each following the pack's executable-command invariant:
  • threat-model: design-stage threat modeling - trust boundaries, STRIDE table, attack trees, mitigations.
  • vuln-intel: NVD / CISA-KEV / GHSA / OSV lookups with verdict criteria and a brief template.
  • incident-response: contain ? evidence ? recover ? postmortem for secret leaks, injection triggers, dependency poisoning, and unauthorized actions.
• Ecosystem snapshot refreshed (2026-08-14): the three new names have no DSH name clashes; newly sighted community packs checked name-by-name.

Changed

• Provider renamed to @perrylink/dsh-skill-pack-security-provider and published on npm (the @dsh-skill-pack-security scope is not owned by this publisher). Mount with: dsh plugin add @perrylink/dsh-skill-pack-security-provider
• Verification suite drives 8 skills per edition through the official provider, the real skill tool, and the session catalog (still 19 checks).

Full details: see CHANGELOG.md

dsh-skill-pack-security v1.2.0

[1.2.0] - 2026-08-14

Fixed

• docs/release-checklist.md batch version command now reads UTF-8 and writes BOM-less UTF-8 via [System.IO.File]::WriteAllText (Windows PowerShell 5.1's Set-Content -Encoding UTF8 adds a BOM, which the official parser rejects because the first line must be exactly ---); a verification check asserts the BOM-less write and the layout check rejects any BOM in a SKILL.md.
• prompt-injection-review: grep -E '^\s*鈥? replaced with POSIX [[:space:]] in both editions (the GNU-only \s silently changes meaning under macOS BSD grep); a lint check now forbids GNU-only escapes in shipped shell greps.
• provider plugin fails loud on misconfiguration: empty/nonexistent skillsDir (or no resolvable layout) throws at apply() instead of mounting zero skills; root resolution supports both the repository and the published layouts.
• dependency-audit: pnpm audit --json advisories described correctly as an object keyed by advisory id (was "array") in both editions.
• CI pins the deepseek-harness checkout to a commit for reproducible verification.

Added

• Verification: 7 new checks (19 total) 鈥?zh鈫攅n structural parity, references wiring, provider-version sync, documented skill-root ranks vs official constants, grep portability, secret self-check, UTF-8-safe release checklist; OFFICIAL_SKILLS now derives from the checkout; Windows CI job runs the verification and the install.ps1 exercise.
• Distribution: provider is now an npm bundle (dsh.bundle + cordis.patch.yml, dsh plugin add ready); prepack embeds both editions into the tarball; publishing checklist documented in provider/README.md.
• Installers: manifest-based install with -Uninstall/--uninstall, -DryRun/--dry-run, and overwrite protection (-Force/--force to replace foreign same-name skills).
• secret-scan: trufflehog (history + automatic verification), gitleaks protect --staged, --log-opts bounded scans, report-file hygiene, more token families in the degraded grep.
• dependency-audit: osv-scanner multi-ecosystem/offline section, SBOM inventory, provenance/signature verification (npm audit signatures, dist.integrity).
• supply-chain-review: git-dependency prepare script vector, GitHub Action SHA pinning, dist.fileCount/tarball-host anomalies, lockfile-growth re-check.
• prompt-injection-review: DSH built-in defense checklist (user-only /name gesture, catalog/body escaping, framing declaration), new surfaces (subagent/workflow prompts, tool render outputs, terminal echoes, image/PDF text, cordis.yml !!js blocks), write-approval and web-quarantine mitigations.
• security-audit: IaC/container asset surface (trivy config/checkov, trivy image), pull_request_target and action-pinning checks, finding ids (F-01鈥?, optional compliance mapping appendix.
• Governance: CHANGELOG.md, SECURITY.md, CONTRIBUTING.md, and Dependabot configuration.

v1.0.0

dsh-skill-pack-security v1.0.0

????:DeepSeek Harness ???????,5 ? agent ??,???????Apache-2.0?

?? / Contents

• security-audit ????(??????????????)
• secret-scan ????(gitleaks/trivy???????????????)
• dependency-audit ????(pnpm/npm audit?license?????????)
• supply-chain-review PR/???????(?????typosquat??????)
• prompt-injection-review agent ???????(AGENTS.md/??/??/MCP/??)

?? / Verification

• ?? dsh-skill-filesystem ??? + ?? skill ?? headless ??:9/9 ??
• 13 ?? frontmatter ???????? fail-closed ??
• GitHub Actions CI:?? push ?????? 9 ???(? release ??)

?? / Install

./scripts/install.ps1 -Target user-agents   # project-dsh | project-agents | user-dsh | user-agents

????? skills/* ? .agents/skills/ / ~/.dsh/skills/?

Full Changelog: https://github.com/PerryLink/dsh-skill-pack-security/commits/v1.0.0