dsh-skill-pack-security
Security-audit methodology skill pack plus the plugin_vet supply-chain gate: eight agent skills (secret scan, dependency audit, supply-chain review, prompt-injection review, audit orchestration, threat modeling, vuln intel, incident response) in Chinese and English editions, with an npm provider bundle that mounts the skills and registers the automated plugin_vet pre-install scanner.
PromptHub provides the directory and install command only. Plugin code comes from the author's GitHub or npm source; review it locally before installing.
dsh plugin --profile web add github:PerryLink/dsh-skill-pack-securityThese labels describe capabilities publicly declared by the plugin; actual behavior depends on the author's source and host configuration.
A DSH Plugin runs with your local permissions and may access files, shells, networks, or credentials. Listing and static metadata are not a security guarantee from PromptHub; review the source first.