dsh-primer@0.4.7
VERIFIED· install onlyPublisher claims: "DSH plugin development as an on-demand agent skill: official docs mirror, version-compatibility matrix, migration seams, measured pitfalls, plus a scaffolder, checker and pack verifier CLI." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher perrylink · publishing for 92 daysInstalls 1,378Last detonated 1 h ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Collapsed <details> block carrying instructionsREADME.es.md:233 · Collapsed <details> block carrying instructions
AST01<summary>Archivo de patch completo (cordis.patch.yml, 9 líneas)</summary> ```yaml # dsh-primer bundle layer: register the packaged knowledge base as an agent skFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.en.md:273 · Collapsed <details> block carrying instructions
AST01<summary>How do the five READMEs and the knowledge-base numbers stay in sync?</summary> Four gates run in CI: `check:readmes` compares the section structure andFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.en.md:259 · Collapsed <details> block carrying instructions
AST01<summary>Does installing it change my profile or other plugins?</summary> No. The bundle patch only `insert`s its own row (`id: dsh-primer`) and never overwriteFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.pt.md:233 · Collapsed <details> block carrying instructions
AST01<summary>Arquivo de patch completo (cordis.patch.yml, 9 linhas)</summary> ```yaml # dsh-primer bundle layer: register the packaged knowledge base as an agent skFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.en.md:233 · Collapsed <details> block carrying instructions
AST01<summary>Full patch file (cordis.patch.yml, 9 lines)</summary> ```yaml # dsh-primer bundle layer: register the packaged knowledge base as an agent skill. # ThisFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.LOW
Instructs the agent to modify its persistent memory or instruction filesreferences/harness-repo.md:574 · Instructs the agent to modify its persistent memory or instruction files · informational: not an instruction file
AST01- **非平凡变更必须同 PR 加 Agent Note**（`.agents/notes/README.md` §When to write one；`docs/AGENTS.md` L39）。Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.LOW
Prompt injectionguide/choosing-a-plugin.md:109 · Prompt injection — known jailbreak technique reference · informational: not an instruction file
AST01| `PerryLink/dsh-defend` | 3 | 2 | 3 | 0 | 937 | Detects injection, jailbreak and secret leakage at three seams; allow/ask/block tiers |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.HIGH
Collapsed <details> block carrying instructionsREADME.md:233 · Collapsed <details> block carrying instructions
AST01<summary>完整补丁文件（cordis.patch.yml，9 行）</summary> ```yaml # dsh-primer bundle layer: register the packaged knowledge base as an agent skill. # This file is the `dFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.hi.md:233 · Collapsed <details> block carrying instructions
AST01<summary>पूरा patch फ़ाइल (cordis.patch.yml, 9 पंक्तियाँ)</summary> ```yaml # dsh-primer bundle layer: register the packaged knowledge base as an agent skill. #Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Instructions loaded
≈3,792 tok
1 file · 80 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for dsh-primer@0.4.7 as of 47 min ago. This is the package itself, not its dependencies.