Skip to content
Back to skills

Resources

ASecurity

Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

  • 51 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
securitygobashtestinggitsecurity

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 21 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add fendouai/awesome-deepseek-harness --skill resources --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Resources?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Resources
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/fendouai-resources-ee4a467f/badge)](https://www.skillsdirectory.com/skills/fendouai-resources-ee4a467f)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
title: "dsh-reverse-skill"
description: "Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack."
keywords: "dsh-reverse-skill, learning, skill, coding, search, deepseek harness, dsh"
---
# dsh-reverse-skill

> ⭐ **58** · ✅ active · skill · ⬆️ +7 recently

| | | | |
|---|---|---|---|
| Type | skill | Category | Learning |
| Stars | ⭐ 58 | Status | ✅ active |
| Author | [dhicoc](https://github.com/dhicoc) | Updated | 2026-08-17 |

## One-liner

> Complete reverse-skill (85 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

## About

本仓库内容仅用于 **授权的** 逆向工程、渗透测试与安全研究。使用者须确保对目标系统拥有合法授权。一切未授权行为与本仓库无关。 ---

## 📦 Install

```bash
# 安装 peer 依赖(cordis / dsh-skill 由 dsh 运行时提供,这里用于类型与构建)
npm install
npm run build        # tsc → 生成 lib/ 与 lib/types/
```

## 🚀 Quick Start

```bash
"main": "lib/index.js",
"types": "lib/types/index.d.ts",
"peerDependencies": {
  "@deepseek-ai/cordis": "^4.0.1",
  "@deepseek-ai/dsh-skill": "^0.0.1-rc.1"
}
```

## 📚 Learn more

**安装 peer 依赖(cordis / dsh-skill 由 dsh 运行时提供,这里用于类型与构建)**

npm install npm run build # tsc → 生成 lib/ 与 lib/types/ `package.json` 中已声明: "main": "lib/index.js", "types": "lib/types/index.d.ts", "peerDependencies": { "@deepseek-ai/cordis": "^4.0.1", "@deepseek-ai/dsh-skill": "^0.0.1-rc.1" }

**从 GitHub 安装并激活(推荐)**

dsh plugin add github:dhicoc/dsh-reverse-skill 安装后 dsh 会读取 `cordis.patch.yml` 把 `reverse-skill` 这个 Cordis 插件插入当前 profile,启动时自动注册 87 个技能。若你想在 profile / package 配置里手动引用,包名是 `@dhicoc/dsh-reverse-skill`:

**dsh 配置(示例,键名可能因版本而异)**

plugins: - "@dhicoc/dsh-reverse-skill" 加载后,插件在 `apply(ctx)` 里调用 `ctx.skills.registerProvider(...)`,把 87 个技能注册进 `ctx.skills`。模型可通过 `ctx.skills` → `tool-skill` 自动调用,用户也可通过技能名手动调用(受各 SKILL.md 的 `user-invocable` 控制)。

**插件工作原理(数据驱动,零手写清单)**

`src/index.ts` 不做任何硬编码候选列表,而是: 1. 递归遍历 `skills/` 与 `CTF-Sandbox-Orchestrator/`,找到每个 `SKILL.md`; 2. 解析前导 matter(把 `metadata.user-invocable` 提升为顶层 `user-invocable`;上游文件原样打包,CRLF / BOM 在运行时归一化); 3. 构造 `SkillCandidate`(含 `resourceBase: {kind:'directory', path}`、结果缓存); 4. 注册一个 `SkillProvider`,`get()` 时返回完整 body。 新增/删除技能只需改目录,插件自动同步。

## 🔗 Links

- [GitHub Repository](https://github.com/dhicoc/dsh-reverse-skill)
- [Full README](https://github.com/dhicoc/dsh-reverse-skill#readme)
- [Back to the Skills list](../skills.md)

Files in this skill

  • 3chatai-deepseek-harness-plugin.md716 B
  • 429-throttle-mcp.md1.2 KB
  • 7d7d.md779 B
  • 8x-skills.md773 B
  • a-share-ai.md2.2 KB
  • a2ui-render-in-dsh.md1.1 KB
  • a4agent.md1.9 KB
  • a4phone.md1.3 KB
  • aaaagent.md1.1 KB
  • aardio-windows-mcp.md1.1 KB
  • abu-cowork.md1.2 KB
  • academic-agent.md938 B
  • academic-harness.md1.1 KB
  • academic-research-graph.md819 B
  • academic-research-skills-dsh.md1.2 KB
  • acks-dsh-plugins.md895 B
  • acp-extension-dsh.md781 B
  • acryl-dsh-editor-plugin-cli.md829 B
  • acryl.md911 B
  • action-hub.md741 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in security →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.