dsh-skill-security-guard v0.1.0

First community DeepSeek Harness Bundle release for skill-security-guard. Install with: dsh plugin --profile headless add dsh-skill-security-guard@0.1.0. Compatible with @deepseek-ai/dsh 0.1.0-rc.6, Node 22.19.x or 24+, and Python 3.10+. Verified by public-registry install, real DSH/Cordis loading, packaged scanner result A/100, structural tool events, and clean uninstall. SHA-256: eee15c8d626dba20a4fc96034834635535e1755241712f9d03a3bd5a3d28aa5a. This is a community plugin, not an official DeepSeek plugin.

v5.1.0

Highlights

• Add an executable Python standard-library scanner for agent skill packages.
• Support path, directory, zip, stdin, inline text, URL, and JSON output modes.
• Add safe zip extraction with path traversal, size, and file-count checks.
• Add A-F risk scoring with rule IDs, confidence levels, evidence lines, and remediation guidance.
• Add unittest fixtures for safe, high-risk, frontmatter, missing-file, and zip-slip cases.
• Add GitHub Actions CI for Python 3.11 and 3.12.
• Improve README badges, examples, requirements, contribution guidance, and security reporting guidance.

Validation

• CI on main completed successfully.
• Local repository self-scan reports A (100/100).

v5.0.0

Release v5.0.0 — see SKILL.md for changelog.