xiaoxianyu-office/dsh-skills-manager
30Last commit Aug 14, 2026
dsh-skills-manager DSH plugin
This is a host-level bundle plugin for DSH that adds a Skills entry in the left navigation of the Settings page. System skills (bundled/runtime/custom) are displayed read-only, while user skills located in ~/.dsh/skills can be toggled, edited, created, and deleted. The plugin loads automatically on DSH startup and does not rely on sessions, so modifications persist across restarts.
How to install the dsh-skills-manager DSH plugin
dsh plugin --profile web add github:xiaoxianyu-office/dsh-skills-manager#v0.1.2Copying does not run this command. Review the repository and version before installing the dsh-skills-manager DSH plugin.
dsh-skills-manager DSH plugin data source
dsh-skills-manager DSH plugin snapshot date: Aug 16, 2026
discovered
What the dsh-skills-manager DSH plugin can do
- Adds a Skills navigation entry with a custom star icon in the Settings page left sidebar.
- Displays system skills (bundled/runtime/custom) in read-only mode without toggle or delete controls.
- Manages user skills from ~/.dsh/skills: enable/disable toggle, inline editing, creation, and deletion.
- Shows a diagnostic line at the bottom indicating the scan layer scope.
- Auto-loads on DSH startup and restarts without losing state.
- Write operations use danger-full-access policy and wait 300ms for file watcher to update registries.
Where the dsh-skills-manager DSH plugin fits
- Quickly view all system and user skills from a single Settings page.
- Enable or disable a user skill without manually editing configuration files.
- Create new user skills and edit existing ones directly in the UI.
- Delete obsolete user skills to keep the skill list clean.
Who the dsh-skills-manager DSH plugin is for
- DSH users who need to manage their skills graphically.
- Users who want to see which skills are available (system vs user) and control their activation.
dsh-skills-manager DSH plugin limitations
- Write operations require danger-full-access policy and are limited to local loopback requests (source IP and Host header validation).
- The /skmg API must not be exposed to LAN or public networks to maintain security.
- Currently at version v0.1.2, so it may be early-stage with limited features.
- Depends on host services: skills, fs, shell, sandboxPolicy, webServer – not usable outside DSH.
dsh-skills-manager DSH plugin: from the repository README
Quoted from the xiaoxianyu-office/dsh-skills-manager README, the upstream source of the dsh-skills-manager DSH plugin. Copyright remains with the original authors.
DSH 设置页 **Skills 管理器**（宿主级 bundle 插件）：系统/用户技能分类展示，用户技能支持启用开关、编辑、删除、新建。随 DSH 启动自动加载，不依赖会话，重启不失效。 ## 功能 - 设置页左侧导航新增 **Skills** 入口（自定义火花星图标） - **系统 Skills**：只读展示（bundled/runtime/custom 来源），无开关/删除 - **用户 Skills**（`~/.dsh/skills`）：启用开关、编辑、新建、删除 - 底部诊断行显示扫描层范围 ## 安装 ```bash # 安装 v0.1.2 dsh plugin --profile web add github:xiaoxianyu-office/dsh-skills-manager#v0.1.2 ``` 安装后**重启 DSH** 生效。 ## 升级 重复 `add` 并指定新 tag，**不要使用 update 选择 Git 引用**： ```bash dsh plugin --profile web add github:xiaoxianyu-office/dsh-skills-manager#v0.1.2 ``` ## 卸载 ```bash dsh plugin --profile web remove dsh-skills-manager ``` 卸载后重启 DSH：设置页入口、client bundle 路由全部移除，无残留。 ## 结构 ``` dsh-skills-manager/ ├── package.json # dsh.bundle（组合补丁）+ dsh.client（浏览器双面）声明 ├── cordis.patch.yml # 组合补丁：insert skills-manager 插件行 └── lib/ ├── index.js # host 端：Skills 管理 API，注册 /skmg 路由 └── client.js # client 端：设置页 UI（成品 bundle，无需构建） ``` ## 说明 - host 端依赖宿主服务：`skills` / `fs` / `shell` / `sandboxPolicy` / `webServer` - 写操作使用 `danger-full-access` 策略以管理 `~/.dsh/skills`，写后等待 300ms 让文件 watcher 完成注册表更新 - `/skmg` API 仅接受本机回环请求（源地址 + Host 头双重校验），不要将该端口暴露到局域网/公网 - client bundle 为手写 `__ModuleLoader__` 成品，无 prepare 脚本，不
Read the full READMEThe repository declares no license. Check with the authors before using it.
dsh-skills-manager DSH plugin questions
How do I install dsh-skills-manager?
Run the command `dsh plugin --profile web add github:xiaoxianyu-office/dsh-skills-manager#v0.1.2`. After installation, restart DSH for the plugin to take effect.
How do I upgrade the plugin?
Repeat the `add` command with the new tag version, e.g., `dsh plugin --profile web add github:xiaoxianyu-office/dsh-skills-manager#v0.2.0`. Do not use the `update` command with a Git reference – always use `add` with the new tag.
How do I uninstall the plugin?
Run `dsh plugin --profile web remove dsh-skills-manager`. Then restart DSH. The Settings page entry and client bundle routes will be completely removed, leaving no residue.
Where are user skills stored?
User skills are stored in the `~/.dsh/skills` directory. The plugin reads and writes directly to this location. After write operations, a 300ms delay ensures the file watcher updates the registry.
Is it safe to expose the /skmg API to the network?
No. The /skmg API only accepts local loopback requests with dual validation of source IP and Host header. You should never expose the port to your LAN or the public internet, as it uses danger-full-access policy for write operations.