dsh-review-skills

Engineering-discipline skill pack for DeepSeek Harness — five battle-tested procedures delivered as a bundled skill provider: code review, simplification, plan-then-execute, test-first, and conflict resolution.

Overview

dsh-review-skills packages the discipline that senior engineers apply by habit into model-visible skills. Once installed, the harness discovers five SKILL.md bundles through the standard ctx.skills registry and can invoke them when a task matches.

The skills

Who is it for?

• Solo developers who want a senior-engineer checklist without hiring one.
• Teams that want consistent review and planning standards across sessions.
• Anyone building on the dsh skill system who wants a reference-quality skill pack to copy.

Compatibility

• Built and verified against @deepseek-ai/dsh@0.1.0-rc.6 / @deepseek-ai/cordis@^4.0.1 / @deepseek-ai/dsh-skill@^0.1.0-rc.6.
• Last verified: 2026-08-14.
• Requires a dsh composition that mounts the ctx.skills service (the dsh-base bundle ships it).
• dsh is in developer preview; the skill frontmatter contract (name / description / whenToUse / invocation flags) may evolve. The included unit tests pin the format this pack targets.

Install / Uninstall

Install into a dsh profile (local checkout):

cd /path/to/deepseek-harness
pnpm dsh plugin --profile web add /path/to/dsh-review-skills

From GitHub (source install — pnpm runs the prepare script, so allow it once):

pnpm dsh plugin --profile web add github:<you>/dsh-review-skills

From npm (once published):

pnpm dsh plugin --profile web add dsh-review-skills

Uninstall:

pnpm dsh plugin --profile web remove dsh-review-skills

Quick start

Install the bundle, restart dsh, then simply ask:

Use the code-review skill on the current diff before we merge.

or mention a skill by name in context:

Plan-then-execute: refactor the auth module, then implement.

The harness resolves the skill through ctx.skills and injects its procedure when the model invokes it.

Configuration

None. The plugin registers its provider with no config; the skills and their routing metadata live in skills/*/SKILL.md frontmatter (name, description, whenToUse, disable-model-invocation, user-invocable).

Permissions & data

• Read-only: the plugin reads its own packaged skills/ directory; it writes nothing and touches no user files.
• No network: all five skills are static Markdown bundled in the package.
• Model-visible content: skill bodies are injected into the model context only when the skill is invoked, per the harness skill catalog policy.

Troubleshooting

Development

pnpm install
pnpm run build         # tsc → lib/
pnpm run test          # vitest: frontmatter contract + 5 bundled skills present

Structure:

• skills/<name>/SKILL.md — one skill per directory; frontmatter drives routing, body carries the procedure.
• src/skills.ts — frontmatter parser and the bundled provider (lazy body loading).
• src/index.ts — plugin entry registering the provider on ctx.skills.
• tests/ — pins the frontmatter contract and asserts all five bundles are parseable.

Design notes:

• Follow the existing skill-file conventions in the dsh repo (@deepseek-ai/dsh-skill types: SkillCandidate, SkillDefinition, SkillProvider) — this pack mirrors the dsh-skill-badge precedent.
• Keep each skill body focused: when-to-use, procedure steps, pitfalls, verification. A skill that tries to cover everything covers nothing.

License & security

MIT. Report security issues privately via the repository's security advisory. The pack ships static Markdown only; it executes no code of its own.