dsh-reverse-skill: A Reverse Engineering Skill Plugin for DeepSeek Harness
dhicoc/dsh-reverse-skill
A DSH plugin packaging 87 SKILL.md for reverse engineering and authorized pentesting as a Cordis plugin, auto-registering skills for model and user invocation.
dsh-reverse-skill is a reverse-engineering skill plugin for DeepSeek Harness (DSH) that packages the upstream reverse-skill project's 87 SKILL.md files into a single Cordis plugin. It solves the problem of lacking a systematic reverse-engineering and penetration-testing skill set in DSH, offering a full skill library from CTF challenges to authorized pentesting. The plugin recursively scans and registers all skills in a data-driven way, enabling automatic invocation by models and manual triggering by users.
How to Install
dsh plugin --profile <your-profile> add @dhicoc/dsh-reverse-skillReplace --profile with the profile name you actually run (see ls ~/.dsh/profiles/): usually web in the browser UI, desktop or desktop-NNN in the desktop app.
- Category
- Tools & Capabilities
- Platform
- DSH Plugin
- Author
- dhicoc
- Distribution
- Plugin
dsh-reverse-skill Key Features
dsh-reverse-skill Repo Summary
What Does It Do?
dsh-reverse-skill is a reverse-engineering skill plugin for DeepSeek Harness (DSH) that packages the upstream reverse-skill project's 87 SKILL.md files into a single Cordis plugin. It solves the problem of lacking a systematic reverse-engineering and penetration-testing skill set in DSH, offering a full skill library from CTF challenges to authorized pentesting. The plugin recursively scans and registers all skills in a data-driven way, enabling automatic invocation by models and manual triggering by users.
Core Features
- Complete skill library: includes 87 SKILL.md files covering 45 domain skills (reverse engineering, pentesting) and 42 CTF track skills.
- Data-driven registration: recursively scans skills/ and CTF-Sandbox-Orchestrator/ directories, auto-registering all skills without manual list maintenance.
- Nested sub-skill support: supports nested sub-skills like pentest-tools/src-hunter and reverse-engineering/dsl-vm-reverse.
- Runtime normalization: automatically handles CRLF and BOM for cross-platform compatibility.
- Reproducible verification: built-in tests assert all skills are discoverable via list(), have unique names, and return non-empty bodies via get().
How to Use This Plugin?
After enabling the plugin in DSH, models can automatically invoke skills via ctx.skills, and users can manually call them by skill name (subject to each SKILL.md's user-invocable flag). On load, the plugin registers all skills via apply(ctx) by calling ctx.skills.registerProvider. To adjust, modify SKILL.md files under the skills/ directory, and the plugin syncs automatically. Note: external MCP tools (e.g., burp-mcp) must be configured separately via dsh's mcp.servers.
This page is an independent rewrite of the plugin's official README — for authoritative documentation and the latest changes, refer to the source: dhicoc/dsh-reverse-skill. The plugin is third-party code that runs on your machine once installed; inclusion does not imply endorsement — please review the source before installing.
DSH Plugin FAQ
