Skip to content

dsh-skill-pack-security v1.3.0

Latest

Choose a tag to compare

@PerryLink PerryLink released this 14 Aug 15:22

Added

  • Three new skills in both language editions (8 skills total), each following the pack's executable-command invariant:
    • threat-model: design-stage threat modeling - trust boundaries, STRIDE table, attack trees, mitigations.
    • vuln-intel: NVD / CISA-KEV / GHSA / OSV lookups with verdict criteria and a brief template.
    • incident-response: contain ? evidence ? recover ? postmortem for secret leaks, injection triggers, dependency poisoning, and unauthorized actions.
  • Ecosystem snapshot refreshed (2026-08-14): the three new names have no DSH name clashes; newly sighted community packs checked name-by-name.

Changed

  • Provider renamed to @perrylink/dsh-skill-pack-security-provider and published on npm (the @dsh-skill-pack-security scope is not owned by this publisher). Mount with: dsh plugin add @perrylink/dsh-skill-pack-security-provider
  • Verification suite drives 8 skills per edition through the official provider, the real skill tool, and the session catalog (still 19 checks).

Full details: see CHANGELOG.md