frederico-kluser

Dsh Plugin Dev Agent Skill — Testing skill for Claude Code

Testing community

Global agent skill: create, extend, secure, test and publish Cordis plugins for the DeepSeek Harness (DSH).

How to install Dsh Plugin Dev Agent Skill

This entry records only its repository, not the path inside it, so there is no exact command to give. Open frederico-kluser/dsh-plugin-dev-agent-skill and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Dsh Plugin Dev Agent Skill does

Global agent skill: create, extend, secure, test and publish Cordis plugins for the DeepSeek Harness (DSH). Verified-by-measurement API surface (ctx.webServer, spawn(spec)), frontend levers, IPC, security, testing, packaging & publishing.

Alternatives in Testing

API Spec — Generate Zalando-compliant OpenAPI 3.1 specs (one per bounded context) and publish to SmartBear SwaggerHub 172 ★
Spawn Fs Team — Boot a 5-agent full-stack Flotion team as a new workspace in the cmux window (reuse the open window; only crea 107 ★
Publish Both — Publish new versions of BOTH extensions (VS Code + spec-kit) back-to-back 85 ★

README

dsh-plugin-dev-agent-skill

**The complete agent skill for building DeepSeek Harness plugins.**

A self-contained, verified-by-measurement skill that teaches an AI agent (and its human) how to create, extend, secure, test, package and publish a Cordis plugin for the DeepSeek Harness (DSH) — against the real measured API surface, not against prose.

[![language](https://img.shields.io/github/languages/top/frederico-kluser/dsh-plugin-dev-agent-skill.svg)](https://github.com/frederico-kluser/dsh-plugin-dev-agent-skill) [![license MIT](https://img.shields.io/badge/license-MIT-green.svg)](./LICENSE) [![skill global](https://img.shields.io/badge/skill-global-blue.svg)](#)

What is this?

Everything in DeepSeek Harness is a plugin. The user-facing extension path is a Cordis plugin you publish yourself — never a pull request against the official repo, which does not accept external PRs. This skill is the playbook for that path, with every claim pinned to a verified source (`verified in :` or an official URL) and every refuted or unconfirmed community claim flagged, never taught as truth.

The skill covers six capabilities:

Create functionality — backend behavior via typed events, ctx.effect disposers, ControlIntent, long-polling subprocesses and JSONL IPC.
Change the interface — the four frontend levers: ctx.webServer routes, dispatch takeover, tapIndex, and the slots / client-export system.
Security — credential + boundary, fail-closed defaults, two-axis allowlists, nonces, audit and rate limiting for a control-plane-facing plugin.
Testing — a six-layer pyramid, doubles-with-a-contract, an adversarial suite, contract tests and purposeful coverage.
Packaging — pre-compiled bundles, allowlisted tarballs, publint + attw --pack . + a check-tarball script.
Publishing — changesets, OIDC provenance and a CI gate.