Added
- Three new skills in both language editions (8 skills total), each following the pack's executable-command invariant:
threat-model: design-stage threat modeling - trust boundaries, STRIDE table, attack trees, mitigations.vuln-intel: NVD / CISA-KEV / GHSA / OSV lookups with verdict criteria and a brief template.incident-response: contain ? evidence ? recover ? postmortem for secret leaks, injection triggers, dependency poisoning, and unauthorized actions.
- Ecosystem snapshot refreshed (2026-08-14): the three new names have no DSH name clashes; newly sighted community packs checked name-by-name.
Changed
- Provider renamed to
@perrylink/dsh-skill-pack-security-providerand published on npm (the@dsh-skill-pack-securityscope is not owned by this publisher). Mount with:dsh plugin add @perrylink/dsh-skill-pack-security-provider - Verification suite drives 8 skills per edition through the official provider, the real
skilltool, and the session catalog (still 19 checks).
Full details: see CHANGELOG.md